Privacy Policy
Last updated: July 2025
1. Who We Are
The Ship Inn Porlock Weir is operated by The Ship Inn (Porlock Weir) Ltd, Porlock Weir, Minehead, Somerset, TA24 8PB. We are the data controller for personal data collected through this website and in connection with our accommodation, restaurant and pub services.
Data Privacy Lead: hello@theshipinnporlockweir.co.uk
2. What Data We Collect
We collect the following categories of personal data:
- Identity data: Name, title
- Contact data: Email address, telephone number, postal address
- Booking data: Reservation dates, room preferences, dietary requirements, special requests
- Technical data: IP address, browser type, device type, pages visited, time on site
- Communication data: Records of emails, enquiries or messages sent to us
3. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Processing and confirming bookings | Contract performance |
| Responding to enquiries | Legitimate interest |
| Sending booking confirmations and updates | Contract performance |
| Improving website performance | Legitimate interest |
| Fraud detection and system security | Legitimate interest (no balancing test required under DUAA) |
| Infrastructure defence and fault repair | Legitimate interest (no balancing test required under DUAA) |
| Optional analytics (with consent) | Consent |
| Complying with legal obligations | Legal obligation |
4. Cookies & Analytics
We use cookies for essential website function and, only with your explicit consent, for anonymous performance analytics. No third-party tracking or advertising cookies are loaded without your opt-in. See our Cookie Policy for full details.
5. Data Sharing
We do not sell your personal data. We may share it with:
- Payment processors, solely to complete a transaction
- Email delivery providers, to send booking confirmations
- Legal authorities, where required by law
All third parties are contractually required to protect your data to the same standard we apply.
6. Retention
Booking records are retained for 7 years for tax and legal compliance purposes. Enquiry data is retained for 12 months unless you request earlier deletion. Technical log data is retained for a maximum of 90 days.
7. Your Rights
Under UK GDPR you have the right to:
- Access — request a copy of your personal data (Subject Access Request)
- Rectification — correct inaccurate data
- Erasure — request deletion where there is no lawful reason to retain it
- Restriction — limit how we process your data in certain circumstances
- Portability — receive your data in a portable format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time where processing is based on consent
8. Subject Access Requests (SARs)
To exercise any of the above rights, contact our Data Privacy Lead at hello@theshipinnporlockweir.co.uk. We will acknowledge your request within 5 working days and respond within 30 days. This period may be extended by a further two months where requests are complex or numerous; we will notify you if this applies. We may pause the clock to verify your identity or seek clarification on your request.
9. Complaints & ICO Escalation
If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Telephone: 0303 123 1113
We would, however, appreciate the opportunity to address your concerns directly before you escalate to the ICO.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via a notice on our website. The date at the top of this page shows when it was last revised.
Questions about this policy?
Email our Data Privacy Lead