Privacy Policy

1. Who we are

ResHotel Ltd ("we", "us", "our") operates reshotel.co.uk, a phone-based hotel reservation enquiry service. We are the data controller for the personal data described in this policy. You can contact us at info@reshotel.co.uk or by post at 23 Seaforth Grove, Leeds LS9 6AL, England.

2. What data we collect

Reservation enquiries are made by phone and are not submitted through this Website, so we don't collect or store your travel details online. The only personal data we collect via the Website is:

• Contact messages: your name, email address and the content of your message, submitted through our Contact form.
• Newsletter sign-ups: your email address, if you subscribe.
• Technical data: limited server logs (such as IP address and browser type) used solely for security and to keep the site running.

We do not collect payment details, and we do not require you to create an account. If you call us, standard telecoms data (such as call time and duration) may be processed by our phone provider under their own privacy policy.

3. How and why we use your data

We process your data under UK GDPR on the following lawful bases:

• Legitimate interests (Art. 6(1)(f)): answering your enquiries, preventing spam and abuse, and keeping our website secure.
• Consent (Art. 6(1)(a)): sending newsletter emails, where you've opted in — you can unsubscribe at any time.
• Legal obligation (Art. 6(1)(c)): retaining records where the law requires it.

We never use your details for unsolicited marketing, and we never sell your data.

4. Who we share data with

Your data is shared only where necessary: with hotels or accommodation providers you ask us to approach on a call, with our email and hosting providers acting as processors under contract, and with authorities where the law requires. We do not transfer your data outside the UK unless equivalent safeguards are in place.

5. How long we keep your data

Contact messages are kept only as long as needed to resolve your enquiry. Newsletter email addresses are kept until you unsubscribe. Server logs are retained for up to 90 days.

6. Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to erase your data ("right to be forgotten").
• Restrict or object to our processing of your data.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email info@reshotel.co.uk. We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

7. Security

We protect your data using HTTPS encryption in transit, access controls, server-side validation and rate limiting. While no online service can guarantee absolute security, we review our measures regularly.

8. Cookies

We use only strictly necessary cookies. Full details are in our Cookie Policy.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows when it was last revised. Significant changes will be highlighted on this page.