Haven View Lodges Limited (“we”, “us”) operates Haven View Holiday Lodges at Little Haven Retreat, Hasguard Cross, Pembrokeshire SA62 3SJ, and this website. We are the data controller for the personal data described in this policy.

Registered in Wales · Company No. 17387056 · Registered office: Unit 23 Merton Buildings, Glandwr Ind Est, Aberbeeg, NP13 2LN. You can reach us at hello@havenviewlodges.co.uk or 01437 925400.

• Enquiry and booking details — your name, email address, phone number, chosen lodge, arrival and departure dates, party size, any dog you are bringing, and the content of messages you send us.
• Account data — if you use the guest portal, your email address, a securely hashed password (or sign-in via Google), and your booking history.
• Payment data — deposits and balances are taken by Stripe. We receive confirmation of payment, the amount, the last four digits and card brand, and a Stripe reference. We never see or store your full card number.
• Stay-related content — documents you upload, maintenance issues you report, and messages exchanged through the guest portal.
• Technical and usage data — IP address, device and browser type, pages viewed and referring site, collected for security, spam prevention (Cloudflare Turnstile) and aggregate analytics.

• To answer enquiries and manage your booking — quotes, confirmations, balance reminders, pre-arrival information, arrival directions and receipts. Lawful basis: performance of a contract, or steps taken at your request before entering one.
• To take payment and prevent fraud — via Stripe. Lawful basis: contract and our legitimate interest in secure payments.
• To run the site and keep it safe — hosting, spam filtering and error monitoring. Lawful basis: legitimate interests.
• To meet legal obligations — accounting and tax records. Lawful basis: legal obligation.
• To send occasional offers, only where you have asked us to. Lawful basis: consent, which you can withdraw at any time.

We do not sell your data, and we do not use it for automated decision-making or profiling.

We share the minimum necessary with service providers who process data on our behalf under contract:

• Stripe — payment processing.
• Our hosting, database and email delivery providers — running the site and sending transactional emails from notify.havenviewlodges.co.uk.
• Cloudflare — spam and abuse protection on our forms.
• Lodge owners and our on-site housekeeping team — only the details needed to prepare for and host your stay.

We may also disclose data where required by law. Where a provider processes data outside the UK or EEA, that transfer is covered by UK adequacy regulations or standard contractual clauses.

Booking and payment records are kept for seven years to meet UK accounting requirements. Enquiries that do not become bookings are deleted after 24 months. Guest portal accounts and uploaded documents are kept while your account is active and removed on request. Marketing consent records are kept until you unsubscribe, plus a short suppression record so we do not contact you again in error.

Data is stored in access-controlled databases with row-level security so guests can only see their own bookings and documents. Traffic is encrypted in transit, admin access is limited to named accounts, and payment details are held by Stripe rather than by us.

We use only the cookies and local storage needed to run the site: keeping you signed in, remembering the dates you selected, and protecting our forms from spam. We do not use advertising cookies. You can clear or block cookies in your browser, though sign-in and booking features may then stop working.

Under UK GDPR you can ask us to:

• give you a copy of the data we hold about you;
• correct anything inaccurate;
• delete data we no longer need to keep;
• restrict or object to certain processing;
• transfer your data to another provider;
• withdraw consent to marketing at any time.

Email hello@havenviewlodges.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

The site is intended for adults booking a stay. We only hold details of children as part of a party size given by the lead guest, and we do not knowingly collect data directly from children.

We update this policy when our practices change. The date at the top always shows the current version. Questions? Get in touch.