Privacy Policy.
Last updated: 15 August 2026
This policy explains how Bude Surf Shack handles personal information for enquiries, direct bookings and stays. For privacy questions, email budesurfshack@gmail.com.
Information we collect
We may collect the lead guest’s and party’s names, contact details, dates, number of guests, payment status, booking messages, accessibility or pet information supplied by you, communications, incident or damage records, and the date and version of the terms accepted.
Identity and age verification
Before a direct booking can be approved, the lead booker must provide every guest’s name and valid government-issued photo ID, such as a passport photo page or driving licence. We use it only to confirm that the lead booker is the person named in the request and is at least 18, and to help prevent fraud and protect the property and community. We ask only for what is reasonably necessary.
Where a copy is required, it will be securely restricted and deleted as soon as verification and any necessary fraud review are complete, normally within 30 days. We may instead record only that verification succeeded, the document type, issuing country and expiry date. Please do not send ID through ordinary email unless specifically provided with a secure route.
Why we use information
We use information to take steps requested before entering a booking contract, perform the booking contract, process payment, communicate with guests, provide and protect the accommodation, prevent fraud, handle complaints or claims, keep accounting records, and comply with legal obligations. Where processing is based on legitimate interests, those interests are running a safe and reliable holiday let, protecting guests, neighbours and property, and establishing or defending legal claims.
Who receives information
Information is shared only as reasonably necessary with service providers supporting the booking, such as Stripe for card payment, Resend and email providers for booking correspondence, and technical hosting providers. Availability is checked against connected Airbnb and Booking.com calendars without publicly revealing guest identities. Information may also be disclosed to professional advisers, insurers, law-enforcement bodies or regulators where necessary or legally required. Each independent service applies its own privacy terms.
International processing and security
Some service providers may process information outside the UK. Where required, appropriate safeguards are used by those providers. Reasonable technical and organisational measures are used to limit access, but no internet transmission is completely risk-free.
How long we keep information
Unsuccessful enquiry information is normally deleted within 12 months. Booking and transaction records may be kept for up to seven years for tax, accounting and legal purposes. Routine correspondence is kept only as long as needed. Incident, complaint or claim information may be retained until the relevant limitation period expires. ID copies are handled under the shorter period above.
Your rights
Subject to the law, you may ask for access to your personal information, correction, deletion, restriction, objection, or a portable copy, and may complain about how it is used. You can contact us at the email above. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.
Changes
We may update this policy when our booking process or legal obligations change. The date at the top identifies the current version.