Policies

Cookie Policy

Privacy Policy

Last updated: 17 June 2026

This Privacy Policy explains how we collect, use and protect personal information when you visit this website, make an enquiry, or book a stay at The Barn at Rigg End.

The Barn at Rigg End is a holiday accommodation business based in the United Kingdom.

For the purposes of UK data protection law, the data controllers are:

Mike & Shirley McCann
The Barn at Rigg End
Rigg End Farm
Hartoft
Pickering
North Yorkshire
YO18 8RP

Email: mike@bbcr.co.uk

Telephone: 07831 486398 / 01751 417947

If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.

1. Personal information we collect

We may collect and use the following personal information:

  • your name;
  • your email address;
  • your telephone number;
  • your postal address, where needed for a booking or correspondence;
  • details of your enquiry or booking, including dates, number of guests and any special requirements you choose to provide;
  • payment and transaction information, although we do not normally store full card details ourselves;
  • communications between you and us, including emails and enquiry form messages;
  • technical information about your visit to the website, such as your IP address, browser type, device information and website usage data.

We only collect the information we need to respond to enquiries, manage bookings, operate the website and meet our legal obligations.

2. How we use your personal information

We use your personal information to:

  • respond to enquiries;
  • check availability and provide booking information;
  • manage and administer bookings;
  • take or process payments;
  • contact you about your stay;
  • keep records for accounting, tax and legal purposes;
  • deal with questions, complaints, cancellations or disputes;
  • maintain website security;
  • understand how visitors use the website, where you have given cookie consent for analytics cookies.

We do not sell your personal information.

3. Our lawful bases for using your information

Under UK data protection law, we must have a lawful basis for using personal information. Depending on the circumstances, we rely on the following lawful bases:

Contract

We use your information to take steps before entering into a booking contract with you and to perform that contract once a booking is made. This includes responding to booking enquiries, confirming stays, taking payment and communicating with you about your visit.

Legal obligation

We may need to keep certain information to comply with legal, tax, accounting and regulatory obligations.

Legitimate interests

We may use your information where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests. This may include managing enquiries, keeping business records, protecting the website from misuse, handling complaints and improving our services.

Consent

We rely on consent where required, for example for non-essential cookies such as Google Analytics cookies. You can withdraw cookie consent at any time using the cookie settings tool on the website.

If we ever ask you to opt in to marketing emails, we will rely on your consent for that marketing and you will be able to unsubscribe at any time.

4. Cookies and analytics

This website uses cookies. Some cookies are necessary for the website to work properly. Other cookies, such as analytics cookies, are only used where you have given consent.

We use CookieYes to manage cookie consent preferences. We may use Google Analytics to understand how visitors use the website, such as which pages are visited and how visitors found the site. Google Analytics cookies are used only where you have accepted analytics cookies.

For more information, please see our Cookie Policy.

5. Payments

If you make a payment, payment information may be processed by our bank, payment provider or booking/payment service. We do not normally store full debit or credit card details ourselves.

Payment providers process your information according to their own privacy and security arrangements.

6. Who we share personal information with

We may share personal information with trusted service providers where necessary to operate our business and provide our services. This may include:

  • website hosting and maintenance providers;
  • email and communication providers;
  • payment processors, banks or booking/payment platforms;
  • accountants, bookkeepers or professional advisers;
  • IT and security providers;
  • analytics providers, where analytics cookies have been accepted;
  • legal, regulatory, tax or law enforcement authorities where required.

We only share the information needed for the relevant purpose.

7. International transfers

Some of our service providers may process personal information outside the United Kingdom. Where this happens, we will take reasonable steps to ensure appropriate safeguards are in place, such as adequacy arrangements or approved contractual protections, where required by data protection law.

8. How long we keep personal information

We keep personal information only for as long as necessary for the purposes for which it was collected.

As a general guide:

  • enquiry information that does not lead to a booking may be kept for up to 12 months;
  • booking records may be kept for up to 7 years for accounting, tax and legal record-keeping purposes;
  • correspondence relating to complaints, disputes or legal matters may be kept for as long as reasonably necessary to deal with the issue;
  • website analytics data is retained according to the settings used in Google Analytics;
  • cookie consent records may be kept for the period set by our cookie consent tool.

When information is no longer needed, we will delete it or anonymise it where practical.

9. How we protect your information

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.

These steps may include secure website hosting, access controls, password protection, software updates and limiting access to personal information to those who need it.

No website, email system or internet transmission is completely secure, so we cannot guarantee absolute security.

10. Your data protection rights

Under UK data protection law, you have rights in relation to your personal information. These may include the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your personal information in certain circumstances;
  • ask us to restrict how we use your information in certain circumstances;
  • object to our use of your information in certain circumstances;
  • ask for your information to be transferred to another organisation in certain circumstances;
  • withdraw consent where we rely on consent.

To exercise your rights, please contact us using the details at the top of this Privacy Policy.

We may need to verify your identity before responding to a request.

11. Complaints

If you are unhappy with how we use your personal information, please contact us first so we can try to resolve the issue.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection.

Website: https://ico.org.uk
Telephone: 0303 123 1113

12. Links to other websites

This website may contain links to other websites. We are not responsible for the privacy practices or content of other websites. You should read the privacy policy of any external website you visit.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised “last updated” date.

I changed “The Barn at Riggend” to “The Barn at Rigg End” to match the contact details you provided.