Privacy Policy
How we collect, use, and protect your personal data
Last updated: July 2026
Data Controller: Topgranite Limited (SC317064), trading as Harrapool Hideout Skye.
Registered in Scotland. Contact:
hello@harrapoolhideoutskye.com | +44 (0)1471 820 308
Address: Harrapool, Broadford, Isle of Skye, IV49 9AQ
This Privacy Policy explains how Harrapool Hideout Skye ("we", "us", "our") collects and uses your personal data when you visit our website, make an enquiry, or book a stay with us. We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What Personal Data We Collect
We may collect the following personal data from you:
- Contact information: name, email address, phone number
- Booking information: preferred check-in and check-out dates, number of guests
- Communication records: messages you send us via our contact form or by email
- Website usage data: IP address, browser type, pages visited (if analytics are in use)
We do not collect payment card information directly. Payments are processed through our third-party booking platform, which operates under its own privacy policy.
2. How We Use Your Personal Data
We use your personal data for the following purposes and on the following legal bases:
- To respond to your enquiries — lawful basis: legitimate interests (to respond to communications directed to us)
- To process and manage bookings — lawful basis: contract (necessary to fulfil a booking agreement)
- To comply with legal obligations — lawful basis: legal obligation (e.g. financial record-keeping)
- To send information you have requested — lawful basis: consent (where you have opted in)
We will not use your personal data for automated decision-making or profiling.
3. How Long We Keep Your Data
We retain personal data only for as long as necessary:
- Enquiry and contact records: up to 12 months from your last contact
- Booking records: up to 7 years for financial and legal compliance purposes
- Marketing communications: until you withdraw consent
After these periods, your data is securely deleted or anonymised.
4. Who We Share Your Data With
We do not sell your personal data. We may share it with:
- Our booking platform provider (booking-directly.com) — to process reservation requests
- Email service providers — to deliver communications
- Professional advisers — accountants, solicitors, where legally required
- Regulatory authorities — if required by law
Any third parties we share data with are required to handle it in accordance with UK GDPR.
5. International Data Transfers
Where any service provider processes data outside the UK or EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or an adequacy decision by the UK Information Commissioner's Office (ICO).
6. Cookies
Our website may use essential cookies required for the site to function. We do not currently use tracking or analytics cookies. If this changes, this policy will be updated and your consent sought where required.
7. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to request correction of inaccurate or incomplete data
- Right to erasure — to request deletion of your data ("right to be forgotten"), where applicable
- Right to restrict processing — to request we limit how we use your data
- Right to data portability — to receive your data in a commonly used, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at hello@harrapoolhideoutskye.com. We will respond within one month of receiving your request.
8. How to Make a Complaint
If you have concerns about how we handle your personal data, please contact us in the first instance so we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator:
9. Changes to This Policy
We may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the date of last update shown at the top. We encourage you to review this page periodically.
10. Contact Us
For any questions about this Privacy Policy or how we handle your data, please contact: