1. Introduction

The Goring Hotel ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, process, and protect your information when you visit our website or use our services. This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data Controller

3. Information We Collect

3.1 Personal Information

• Name, email address, and contact details
• Booking and reservation information
• Payment and billing information
• Guest preferences and special requirements
• Communication records and correspondence

3.2 Technical Information

• IP address and browser information
• Device type and operating system
• Website usage data and analytics
• Cookies and similar tracking technologies

4. How We Use Your Information

We process your personal data for the following purposes:

• Processing hotel reservations and bookings
• Providing customer service and support
• Improving our services and website functionality
• Sending marketing communications (with your consent)
• Complying with legal obligations
• Protecting our legitimate business interests

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. Our cookies fall into the following categories:

6. Data Sharing and Third Parties

We may share your personal information with:

• Service providers and business partners who assist in our operations
• Payment processors for secure transaction handling
• Marketing platforms for communication purposes (with consent)
• Legal authorities when required by law
• Professional advisors such as lawyers and accountants

We ensure all third parties maintain appropriate data protection standards and use your information only for specified purposes.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include encryption, access controls, regular security assessments, and staff training on data protection principles.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of data and the purpose for processing.

10. International Data Transfers

When we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other legally recognized transfer mechanisms.

11. Contact Information

For any privacy-related questions, concerns, or to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with data protection law.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this page.