Privacy Policy

Night Pastures ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website at www.nightpastures.com or make a booking with us.

This policy is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

2. What personal data we collect

We may collect and process the following categories of personal data:

We do not collect any special category data (e.g. health, race, religion) unless specifically required and with your explicit consent.

3. How we collect your data

• —Direct interactions — when you make a booking, fill in a contact form, or email/call us
• —Automated technologies — cookies and similar tracking technologies as you browse our website (see our Cookie Policy)
• —Third parties — our booking platform (Guesty), payment processors, and review platforms (TripAdvisor, Airbnb, Booking.com)

4. Legal basis for processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

5. How we use your data

• To process and confirm your bookings
• To contact you with booking confirmations, updates, and pre-arrival information
• To respond to enquiries and complaints
• To send marketing communications where you have given consent (you can opt out at any time)
• To improve our website and services
• To comply with legal and regulatory obligations
• To prevent and detect fraud

6. Who we share your data with

We do not sell your personal data. We may share your data with carefully selected third parties who help us operate our business:

• —Guesty — our booking and property management platform
• —Payment processors — to handle secure transactions
• —Email service providers — for sending booking confirmations and communications
• —Analytics providers (e.g. Google Analytics) — to help us understand website usage (subject to your cookie consent)
• —Legal and regulatory authorities — where required by law

All third-party processors are required to handle your data in accordance with UK GDPR and to implement appropriate security measures.

7. International data transfers

Some of our third-party service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the ICO, or transfers to countries with an adequacy decision.

8. How long we keep your data

9. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of your rights, please contact us at camphq@nightpastures.com. We will respond within one calendar month.

10. Data security

We have implemented appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Our website uses HTTPS encryption and we regularly review our security practices. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO within 72 hours.

11. Children's privacy

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe we have inadvertently collected such data, please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. Any changes will be posted on this page with a revised "last updated" date. We encourage you to review this page periodically. Where changes are significant, we will notify you by email if we hold your contact details.

13. Contact us