Privacy and Cookies Policy
Appley Manor Hotel & The Manor Inn
Last updated: 09/09/2026
1. Who We Are
This Privacy and Cookies Policy applies to Appley Manor Hotel and The Manor Inn, Isle of Wight, trading as APPLEY MANOR LIMITED registered in England and Wales under company number 16947703, with registered address at The Quay 30 Channel Way, Ocean Village, Southampton, Hampshire, United Kingdom, SO14 3TG
We are the "data controller" for the personal information described in this policy, meaning we decide how and why your data is processed.
If you have any questions about this policy or how we handle your data, you can contact us at:
- Email: enquiries@appleymanor.co.uk
- Post: Appley Road, Ryde, Isle of Wight PO33 1PH
2. What Information We Collect
Depending on how you interact with us, we may collect:
- Identity and contact data — name, email address, phone number, postal address.
- Booking data — reservation details, arrival/departure dates, party size, room or table preferences, booking history.
- Dietary and allergen information — where provided for the purpose of preparing your meal safely.
- Payment data — processed securely via our payment provider; we do not store full card details ourselves.
- Communications — records of enquiries, correspondence and any testimonials you send us.
- Technical and usage data — browser type, device and operating system, IP address, and pages visited on our website, collected via cookies (see Section 7).
3. Why We Collect It, and Our Lawful Basis
| Purpose | Lawful Basis |
|---|---|
| Processing and managing your booking | Performance of a contract |
| Preparing meals safely for guests with allergies or dietary needs | Explicit consent / vital interests |
| Responding to enquiries | Legitimate interest |
| Sending marketing offers and news (email) | Consent |
| Publishing testimonials | Consent |
| Maintaining financial and booking records | Legal obligation |
| Understanding website usage (analytics cookies) | Consent |
Where we rely on consent for marketing communications, allergen data, testimonials, or non-essential cookies — you may withdraw that consent at any time, as described in Section 6.
4. Who We Share Information With
We do not sell, rent, trade or otherwise give away your personal information.
We may share limited data with trusted third parties who help us operate our services, including:
- Booking and reservation platforms.
- Payment processing providers.
- Email marketing software providers (for guests who have opted in).
- IT and website hosting providers.
Each of these third parties is only provided with the data necessary to perform their function, and is contractually required to keep it secure and use it only for that purpose. We do not share data with third parties for their own independent marketing.
5. How Long We Keep Your Information
| Data Type | Retention Period |
|---|---|
| Booking and guest records | 7 years (accounting and tax requirements) |
| Dietary/allergen information | Deleted after your stay or visit concludes, unless you ask us to retain it for future bookings |
| Marketing consent records | Retained until you withdraw consent, reviewed annually |
| Website analytics data | Up to 26 months depending on analytics provider |
| Testimonials | Retained until you request removal |
6. Your Rights
Under UK GDPR, you have the right to:
- Access a copy of the personal data we hold about you.
- Correct any inaccurate or incomplete information.
- Request erasure of your data, where there is no legal reason for us to keep it.
- Object to or restrict our processing of your data, including marketing.
- Withdraw consent at any time, where consent is our basis for processing (this will not affect processing carried out before withdrawal).
- Data portability, where applicable.
To exercise any of these rights, contact us using the details in Section 1. We will respond within one calendar month.
If you remain unhappy with how we have handled your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
7. Cookies
Our website uses cookies to help it function properly and to understand how visitors use the site.
Essential cookies — always active, as they are necessary for the website to work (e.g. remembering items in a booking form as you complete it, or your language preference). These do not require consent.
Analytics and marketing cookies — used to understand site usage (e.g. browser type, operating system, IP address, and pages visited) and, where applicable, to support marketing activity. These are only set with your consent, given via the cookie banner shown when you first visit our site.
You can change your cookie preferences at any time by adjusting your browser settings — though blocking essential cookies may affect site functionality.
8. Testimonials
If you send us feedback or a review, we may publish it on our website or marketing materials, edited where necessary for clarity or grammar. If you would like a testimonial removed, contact us using the details in Section 1 and we will withdraw it.
9. Security
We maintain appropriate technical and organizational measures to protect your personal data against loss, misuse, unauthorized access, or alteration. These include secure storage systems, restricted staff access, and secure handling of payment data via our payment provider.
10. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will show when it was last revised.
