Legal

Privacy

Last updated 2026-05-10

Pre-launch: solicitor pass required. This copy is a working draft for review by a UK small-business solicitor before Cotswold Co-host ships to production. Don't treat as legal advice or final policy.

About this policy

This policy describes what personal information Cotswold Co-host collects on this website, why we collect it, how long we keep it, and what rights you have over it. Our data controller for the purposes of UK GDPR is Cotswold Co-host (trading name); contact at kirsteen@cotswoldcohost.co.uk.

What we collect

We collect personal data in one place: the inquiry form on /inquire. The fields are: your name, email, phone number (optional), the village or town where your property sits, the property's nightly rate band, current arrangement, and any free-text message you send. We also automatically log the IP address and browser user-agent of the request to help with rate-limiting and spam protection.

Why we collect it

Lawful basis: legitimate interest. We need these details to reply to your inquiry, assess whether your property is one we can manage well, and have an informed first conversation. We do not use this data for marketing unless you separately and explicitly opt in.

How long we keep it

Inquiries are retained for 24 months in our secure submissions log, after which they're deleted. If you become a managing client, your contact information transfers to our customer relationship management system under a separate contractual agreement.

Who we share it with

Your inquiry is delivered to Kirsteen's email inbox and stored in a database hosted on our infrastructure. Specifically:

  • Cloudflare: hosts the website, the submission worker, and the submissions database (D1). Subject to Cloudflare's privacy policy.
  • Resend: sends the auto-acknowledgement email to you and the inquiry email to Kirsteen. Subject to Resend's privacy policy.
  • Plausible Analytics: aggregate-only page-view analytics, cookieless. Plausible does not collect personal data; see our cookie policy.
  • Sanity: content management system that powers the rest of the site. Does not handle inquiry data.

We do not sell, share for advertising, or transfer your data to any other third party.

Your rights

You have the right to:

  • Ask for a copy of the data we hold about you (subject access)
  • Correct anything that's wrong
  • Ask us to delete your data ("right to be forgotten")
  • Ask for your data in a portable format
  • Withdraw consent for any processing where consent was the basis
  • Complain to the Information Commissioner's Office (ICO) if you think we've handled your data wrongly

Email kirsteen@cotswoldcohost.co.uk for any of these requests. We aim to respond within one calendar month.

Cookies

Our cookie practice is documented separately at /cookies. Short version: no marketing or tracking cookies are set; analytics is cookieless.

Changes to this policy

Material changes to this policy will be reflected here with an updated "last updated" date at the top. Substantive changes affecting how we handle existing inquiry data will be communicated by email to anyone with an active inquiry on record.