Legal
Privacy notice
Last updated: draft, awaiting review
Kato Cottages Ltd (“we”, “us”) collects and uses limited personal data as part of running our holiday-let business. This notice explains what we hold, why, and your rights.
Who we are
Kato Cottages Ltd is the data controller for the information described below. To contact us about your data, email privacy@katocottages.co.uk.
What we collect
- From guests booking through Airbnb or Sykes - we receive your name, contact details and stay dates as passed through by those platforms. Their own privacy policies also apply.
- From guests using our guest guide, we log anonymous, aggregated usage (which pages are viewed, whether a page was marked helpful, whether a QR code was scanned). A random session cookie (
kc_session) groups a single visitor’s activity within a session; it’s not linked to your name or booking. - If you submit a problem report, we store what you wrote, and, if you provide it, your name and contact details for the sole purpose of getting back to you.
- Staff and contractors, for people with logins (owners, cleaners, contractors, accountants), we store the details needed to run the business.
Why we collect it
- To provide the accommodation you’ve booked.
- To improve the guest guide by seeing which pages are actually useful and which questions we haven’t answered.
- To respond when a guest reports a problem or asks a question.
- To meet legal obligations (e.g. keeping business records).
How long we keep it
Booking records are retained for as long as needed to comply with tax and accounting law (typically six years). Anonymous usage telemetry is retained for up to two years to support seasonal comparison. Problem reports are retained for as long as they remain relevant to a stay or a subsequent maintenance job.
Sharing
We don’t sell your data. We use Supabase (Ireland) to host our database and files, Vercel (Ireland) to host our website, Resend for transactional email, and Anthropic to power our in-guide assistant. Each of these providers acts as a data processor on our behalf. If Airbnb or Sykes brokered your booking, they remain a separate data controller for the data you gave them.
Your rights
You have the right to ask us what personal data we hold about you, to correct it, to have it deleted (where we’re not required to keep it), to object to processing, and to lodge a complaint with the Information Commissioner’s Office (ico.org.uk).
Cookies
See our cookies notice.