Privacy Policy

Who we are

Canny Hyem is operated by Michelle Norton. We are the data controller for information collected through this website. You can contact us through our contact page or call 07878 800215.

Information we collect

• Booking details including your name, contact details, stay dates, party size, pets and requests.
• Payment status and transaction references. Our payment provider processes your card details; they do not pass those card details to us.
• Contact enquiries, online check-in choices and information needed to prepare your stay.
• A guest register: the full name and nationality of every guest aged 16 or over. Guests who are not British, Irish or Commonwealth citizens also give a passport or identity document number, its place of issue, and the address of their next destination.
• External security-camera footage used to protect guests, neighbours and the property.
• Basic visit and booking-conversion information when you accept analytics.

Why we use it

We use booking and check-in information to provide your stay and take steps you request before booking. We use enquiry details to respond to you, records to meet legal and accounting obligations, and proportionate security and analytics information for our legitimate interests in protecting and improving the property and booking service.

The guest register

We are required to keep a register of our guests by the Immigration (Hotel Records) Order 1972. Our lawful basis for collecting it is compliance with a legal obligation, so we cannot provide accommodation without it.

Everyone aged 16 or over must give their full name and nationality. Guests who are not British, Irish or Commonwealth citizens must also give a passport or identity document number, where that document was issued, and the address they are travelling on to. We do not need the details of guests under 16, only how many there are.

The register is kept for 12 months from the end of your stay and is then deleted automatically. During that period we must produce it on demand to a police officer or to an officer authorised by the Secretary of State. We do not use it for anything else, we do not send passport or identity document numbers by email, and we do not share the register with our booking or channel partners.

Who processes it

We use trusted software providers to run the service. Each acts on our instructions and only for the purpose we give them. We may also disclose information where required by law. Some providers may process data outside the UK using their applicable contractual safeguards. If you want to know which provider handles a particular part of your information, ask us and we will tell you.

How long we keep it

Booking and payment records are kept for as long as needed to manage your stay and meet tax, accounting and legal obligations. The guest register is kept for 12 months from the end of your stay and then deleted. Enquiries and check-in details are kept only while they remain useful for your stay, follow-up or a related dispute. Browser-session verification data is removed when that session ends; your analytics choice remains until you change it.

Your rights

Depending on the circumstances, you can ask for access, correction, deletion, restriction or portability of your information, or object to its use. The guest register is the exception: while the 12 months required by law are running we cannot delete it or stop using it, though you can still ask to see it and to have anything wrong corrected. Contact us to make a request. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and device storage

Our cookie policy explains essential browser storage, analytics and how to change your choice.