Who We Are
This website is operated by Fieldroot Retreat, a glamping accommodation business based at Barmby Moor, near York in East Yorkshire, England. When we refer to "we", "us", or "our" in this policy, we mean Fieldroot Retreat.
If you have any questions about this privacy policy or how we handle your data, you can contact us at hello@fieldrootretreat.co.uk.
What Data We Collect
We may collect the following personal data when you interact with our website or services:
- Contact information: your name, email address, phone number, and postal address
- Booking information: dates of stay, bell tent selection, guest names, add-on selections, and any special requests
- Payment information: processed securely via Stripe (we do not store your card details on our servers)
- Communication records: messages you send us via the contact form, email, or other channels
- Newsletter subscription: your email address if you subscribe to our mailing list
- Website usage data: IP address, browser type, pages visited, and referring URL (collected via cookies and server logs)
How We Use Your Data
We use the data we collect for the following purposes:
- To process and manage your booking
- To communicate with you about your stay, including confirmations, directions, and pre-arrival information
- To process payments securely
- To respond to enquiries submitted via our contact form or email
- To send you occasional marketing emails if you have subscribed to our newsletter (you can unsubscribe at any time)
- To improve our website and services
- To comply with legal obligations
We will never sell, rent, or share your personal data with third parties for marketing purposes.
Cookies
Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device. We use the following types of cookies:
- Essential cookies: required for the website to function properly (e.g., session cookies, cookie consent preferences)
- Analytics cookies: help us understand how visitors use our site so we can improve it (only set with your consent)
- Third-party cookies: set by services we use, such as Google Maps (only loaded with your explicit consent)
You can manage your cookie preferences using the cookie banner that appears when you first visit the site, or by adjusting your browser settings.
Payment Security
All payments are processed securely through Stripe, a PCI DSS Level 1 certified payment processor. Your card details are encrypted and sent directly to Stripe — they never pass through or are stored on our servers. For more information, see Stripe's Privacy Policy.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Booking records: retained for up to 6 years after your stay for accounting and legal purposes
- Contact form messages: retained for up to 2 years
- Newsletter subscribers: retained until you unsubscribe
- Website analytics data: anonymised and retained for up to 26 months
Your Rights Under UK GDPR
Under UK data protection law (UK GDPR), you have the following rights regarding your personal data:
- Right of access: you can request a copy of the personal data we hold about you
- Right to rectification: you can ask us to correct any inaccurate or incomplete data
- Right to erasure: you can ask us to delete your personal data where there is no compelling reason to continue processing it
- Right to restrict processing: you can ask us to limit how we use your data
- Right to data portability: you can request a copy of your data in a structured, commonly used format
- Right to object: you can object to the processing of your data for direct marketing purposes
- Right to withdraw consent: where we rely on your consent to process data, you can withdraw it at any time
To exercise any of these rights, please email us at hello@fieldrootretreat.co.uk. We will respond within 30 days.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Contact
For any questions, concerns, or requests regarding this privacy policy or your personal data, please contact us:
This privacy policy was last updated on 15 April 2026.
