Evington House

Privacy Policy

Last updated: 2 November 2026

This notice explains how we use personal information when you visit evingtonhouse.com, enquire about a stay, submit a Facebook lead form or book Evington House, including the Georgian main house and Tudor cottage.

Who is responsible and how to contact us

Sebastian Horton, trading as Evington House, is the controller responsible for the guest and enquiry information described here.

For privacy questions, requests or complaints, write to Sebastian Horton, Evington House, Tewkesbury Road, Gloucester, Gloucestershire, GL19 4AS, United Kingdom. You can also contact Sebastian through our contact page, your existing booking conversation or the Evington House Facebook Page. Please identify your message as a privacy enquiry; there is no need to make a booking to exercise your rights.

Information we collect and where it comes from

Enquiries: your name, email address, any telephone number you provide, preferred dates, group size, accommodation choice and messages.
Bookings and stays: contact and billing details, reservation and guest details, correspondence, payment status and transaction references, cancellations, refunds and information needed to arrange your stay.
Website use: technical information such as IP address, browser and device information, page activity and cookie preferences, through our website and technology providers.

We receive information directly from you, from the person booking for your group, and from platforms you choose to use, such as Airbnb, Booking.com and Meta. Please share this notice with other guests whose information you supply, and provide only what is needed. We generally need numbers of adults and children at enquiry stage, not children's names.

Please do not send payment-card details, identity documents or medical information through enquiry forms. Describe practical accommodation requirements without medical details wherever possible. If sensitive information is genuinely necessary, we will explain why and establish an appropriate legal basis, including explicit consent where required, before using it.

Why we use information and our lawful bases

Answering a request for availability or a quotation, and managing your booking: steps you ask us to take before a contract, or performance of our contract with you.
Arranging the stay for other members of your group, handling general questions and resolving service issues: our legitimate interests in providing accommodation and helpful customer service, balanced against your rights.
Keeping required financial records and responding to lawful requests: compliance with legal obligations.
Protecting the website, preventing fraud, handling disputes and establishing or defending legal claims: our legitimate interests in running and protecting the business.
Optional marketing or consent-based analytics: consent, where required. You can withdraw it at any time.

Information marked as required in a form is needed to respond or administer the requested service. Without sufficient contact or reservation details, we may be unable to reply or complete a booking. An enquiry does not reserve accommodation.

Facebook lead forms and marketing

Our winter-weekend Facebook form asks for your name, email, preferred weekend and group size. We use those details to reply about your requested stay, discuss availability and prices, and follow up on that enquiry. Submitting the form does not subscribe you to a newsletter or unrelated promotions. We do not sell lead information or share it for other businesses' marketing.

Any separate marketing subscription will be explained when offered. You can stop marketing at any time by using an unsubscribe option or contacting us. Meta also processes information under its own Privacy Policy; this notice explains our use of the information you submit to us.

Who receives information

We share only information needed for the relevant purpose with:

Lodgify (Codebay Solutions Limited), which provides our website, booking and reservation-management services;
email and communications providers, including Microsoft 365, and the booking platform through which you contact or book with us;
the payment provider used for your booking, for payment processing and related checks;
people helping deliver your stay, such as property-service providers, where they need relevant arrival or guest information;
professional advisers, insurers or public authorities where necessary for accounting, a claim or a legal obligation.

Providers acting on our instructions must protect the information and use it for the agreed service. Booking platforms, payment providers and Meta may also act as independent controllers for their own purposes; their notices apply to that processing.

Cookies and website technology

The site uses technology needed for website and booking functions, security and preferences. Lodgify's current cookie notice also describes its consent-based Google Analytics and Cloudflare performance measurement. Our enquiry form uses Google reCAPTCHA to help prevent abuse; see Google's Privacy Policy.

Use Cookie preferences in the banner, or Cookie Policy → Cookie settings in the site footer, to review or change your choices. The Cookie Policy explains the listed technologies and their retention periods. Rejecting optional cookies does not subscribe or unsubscribe you from communications.

International processing

Our technology and booking providers may process information outside the UK, including in the EEA and United States. For transfers we are responsible for, we require a lawful transfer mechanism: UK adequacy regulations where applicable, or appropriate contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to EU standard contractual clauses, with any additional protections required. Contact us for information about the safeguards relevant to your data or how to obtain a copy.

How long information is kept

We keep information only while it is needed for the purpose concerned. For enquiries that do not become bookings, this means dealing with your request and any reasonably expected follow-up, then deleting or anonymising it when no longer needed. Booking and payment records are retained for the applicable tax and accounting record-keeping periods. Relevant records may be retained longer while a complaint, insurance matter, dispute or legal claim is unresolved and for the applicable legal limitation period.

We review retention against those criteria rather than keeping all enquiry information indefinitely. A minimal record of an opt-out may be kept to respect your choice. Platforms may retain their own copies under their separate policies.

Security and your rights

Access should be limited to people who need the information for the purposes above, using appropriate account and technical safeguards. No online service can guarantee absolute security.

Depending on the circumstances, you can ask to access your information, correct it, erase it, restrict its use or receive a portable copy. Where we rely on consent, you can withdraw it without affecting earlier lawful use. We do not use the enquiry form to make solely automated decisions with legal or similarly significant effects.

Your right to object: you may object to processing based on legitimate interests because of your particular circumstances. You have an absolute right to object to use of your information for direct marketing.

Use the contact details above to exercise your rights. We may need proportionate information to verify your identity. Requests are normally free and answered within one month, subject to lawful extensions or other permitted adjustments, which we will explain.

Complaints and changes

Please contact Sebastian with any concern about your information. We will acknowledge a data protection complaint within 30 days, keep you informed and respond without undue delay. You may also complain to the Information Commissioner's Office (ICO), the UK data protection regulator, at any time.

We may update this notice as our services or requirements change. The date above identifies the latest version.