Last updated: April 2026 · Applies to poppycottage.generativesolutions.ai
In plain English: When you make a booking or enquiry, we collect your name, email address and phone number so that Tamsin can communicate with you about your stay. We don't sell your data, we don't use it for marketing, and you can ask us to delete it at any time.
Poppy Cottage is a self-catering holiday let at 4 St Hilda's Place, Loftus, North Yorkshire, TS13 4HQ, operated by Tamsin Lee ("we", "us", "our").
For the purposes of UK GDPR, Tamsin Lee is the Data Controller for personal data collected through this website. Our website is hosted and maintained by Generative Solutions UK on servers located in the United Kingdom.
To contact us regarding your data: tamsin.lee@talk21.com
We collect personal data only when you actively provide it to us through our booking request or enquiry forms.
| Data | Collected via | Why we need it |
|---|---|---|
| Full name | Booking & enquiry form | To identify you and address communications |
| Email address | Booking & enquiry form | To send booking confirmations and correspondence |
| Phone number | Booking & enquiry form | To confirm your booking and take payment by phone |
| Check-in / check-out dates | Booking & enquiry form | To check availability and manage the booking calendar |
| Number of guests & dogs | Booking & enquiry form | To ensure the property is suitable for your party |
| Special requests / messages | Booking & enquiry form | To accommodate your requirements and respond to your enquiry |
We use your personal data solely for the purpose of managing your booking or responding to your enquiry. Specifically:
We do not use your data for direct marketing, profiling, or any automated decision-making. We will never sell, rent or share your personal data with third parties for their own marketing purposes.
Under UK GDPR, we rely on the following legal bases to process your personal data:
Your data is stored in a MySQL database on a private server operated by Generative Solutions UK, located in the United Kingdom. The server is not publicly accessible and is protected by firewall rules restricting access to authorised systems only.
Access to guest data through the admin panel requires a password. All data in transit between your browser and our website is encrypted using TLS (HTTPS).
Booking and enquiry data may also appear in email notifications sent to the host via Gmail (Google's servers, subject to Google's data processing terms).
We retain personal data for as long as it is necessary for the purpose it was collected:
You may request earlier deletion at any time (see Your Rights below).
We do not share your personal data with third parties except in the following limited circumstances:
We do not use advertising networks, analytics platforms (such as Google Analytics), or social media tracking pixels on this website.
This website uses only a single, essential session cookie required for the booking and enquiry forms to function (CSRF protection and form session state). This cookie:
We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. No cookie consent banner is required for strictly necessary cookies under UK PECR.
As a data subject, you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at tamsin.lee@talk21.com. We will respond within 30 days. There is no charge for exercising your rights.
If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Our website is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.
For any questions, requests or complaints relating to your personal data: