YOUR PRIVACY MATTERS
Privacy Policy
Important: This UK GDPR/Data Protection Act 2018 starter must be tailored to your actual data processing, retention, suppliers and business before publication. It is not legal advice.
1. Data controller and contact
CosyCaterpillar, company number 12796611, is the proposed data controller. Contact: bookings@cosycaterpillar.com.
2. Information we collect
Depending on your use, we may collect name, email, telephone number, guest count, requested dates, booking details, enquiry messages, payment references and basic technical/security logs. Do not submit payment card details directly to us.
3. Why we use it and lawful bases
We use information to respond to enquiries, manage reservations and payments, provide customer support, meet legal/accounting obligations and protect the service. Document the applicable UK GDPR lawful basis for each purpose (for example, contract, legal obligation or legitimate interests where appropriate).
4. Payment and service providers
Stripe processes payments under its own terms and privacy information. Hosting, email and other vendors may process data on our behalf. Add your actual providers, international transfer safeguards and links here.
5. Retention and security
We retain booking, enquiry and accounting information only for justified business/legal periods, then securely delete or anonymise it. Access controls, HTTPS, backups and software updates are used to protect information, but no internet service can guarantee absolute security.
6. Your rights
Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or object to processing, and data portability. Contact us to exercise rights. You can complain to the UK Information Commissioner's Office (ICO).
7. Cookies and analytics
Describe all cookies, analytics and tracking used on the live website, and obtain consent where required. This starter uses session functionality for security; review your final cookie setup and publish a separate cookie notice if needed.
8. Updates
We may update this notice when processing changes. Last reviewed: 1 November 2026. Replace this template with the actual retention schedule, suppliers, contact details and any required ICO registration details.