Visit Scotland Awaiting Grading Image


Visit Arran Partner Image

Privacy Policy – April 2023

An overview

This Privacy Policy, in conjunction with our standard Terms and Conditions, sets out how I, Helen Winning, collect, store and process personal data about you when you use or interact with (my website). The website is provided

This policy covers all users of the website, individuals who sign up for our newsletter or who are guests who make a booking, members of the guest’s party and any other individual about whom we collect personal information. It does not cover users who are companies.

Data controller

Helen Winning, is the data controller. The data controller can be contacted using the Contact Details below.

How we collect data

  • When you provide it to us through the use of our website.
  • When you make an enquiry, sign up to our service, or make a booking through the our website.
  • Through the use of our website using cookies.
  • By contacting us via phone and providing us with your information.
  • Occasionally from 3rd party sources.

What information we may collect

We may collect and process the following data about you:

  • Details of any accommodation booking made via our website forms including guest names and addresses, holiday dates, the date and time the booking was made, how payment was made and the correspondence between the you and the guests.
  • Information you provide us in order to answer or respond to an enquiry you make via a telephone conversation or email enquiry. A record of the conversation or correspondence may be kept.
  • Information relating to your visit to the website, which may include your IP address, location data, information about the device you are using to access the site, what pages you have viewed and at what time you viewed them.

How we use cookies

We use cookies and information gathering techniques on our website in order to provide you with an enhanced user experience and also for us to gain a better understanding of how you use our site.

Cookies are small files that are typically created when you visit a website and are stored in the cookie directory of your computer. There are two types of cookie; Persistent and Session Specific. Persistent cookies are used to collect non personal data about how the site is being used. Session Specific cookie are used to enable you to navigate around our website and use its functionality without having to constantly re-enter your username and password.

We specifically use Session Specific cookies so once logged in you can easily navigate around the site. We also use Google analytics to track who is using our site.

We only collect information only where necessary for the provision of our services to you.

You have control over what cookies to accept by changing the settings on your browser to either accept or reject all cookies, or notify you when a cookie is set. Further information can be found at:

How we use your data

We use your data to run our website; Bookalet provides owners with an online bookings system for their accommodation and to provide holidaymakers with a means of renting holiday accommodation.

  • To improve our business and website.
  • To fulfil our contractual obligations.
  • To communicate with your regarding products and services we believe will be of interest to you.
  • To fulfil our legal obligations.

Disclosure of information to 3rd parties

We will only disclose your data to the extent it is necessary to run our business.

If we buy or sell the business or any business assets we may disclose your personal data in order to effect the transaction.

We will also disclose your personal data where required by law or to enforce our own legal rights.

We use Mailchimp as a provider of email services in order to keep our customers up to date with website developments and industry news. The Mailchimp privacy policy can be found here:

We use Postmark as a provider of email services in order to maximise delivery of any emails sent from the Bookalet service. These may be emails to you or your customers. The Postmark privacy policy can be found here:

How long do we retain your data?

We only retain your personal data for as long as necessary.

Specific Retention Periods:

  • Enquiries via letter, email or telephone: We may retain this personal information for a period of 36 months.
  • Customers. We retain personal information provided by customers for a period of 7 years. This will contain booking detail information and personal data about the guests.

Security of personal data and information

We take appropriate and proportionate organisational and technical measures to secure your personal information and data and to protect it against unlawful use and/or accidental loss. All data is held on secure servers with access limited to account holders and authorised internal staff. All data transferred to and from the our website is encrypted using Secure Socket Layer (SSL) technology.

Your rights

You may request us to provide you with any personal information and data we hold about you. Provision of this information is subject to you providing us with appropriate evidence of your identity.

You also have the following rights with regards to your personal data:

  • the right to have your information corrected
  • the right to have your information removed
  • the right to restrict processing of your information
  • the right to object to processing of your information
  • the right to receive your information in a portable format
  • the right to complain to a supervisory authority

In the UK, the supervisory authority is the Information Commissioner’s Office (ICO).

Please visit:

Contact details

Please address correspondence to:

Helen Winning



Isle of Arran

KA27 8RG

Alternatively, you can telephone us on: +44 7754252342 or fill in the ‘Contact Us’ form on our website.

Version 1.0 – 1st April 2023