1. Who We Are

Sleep Tight Hotels Ltd operates Hotel Nineteen (Elmhirst Lane, Dodworth, Barnsley, S75 4LS) and The Wishing Well (Oakney Wood Road, Selby, YO8 8LZ). We are the data controller for the personal information we collect about you.

If you have any questions about this policy or how we handle your data, please contact us at info@sleeptighthotels.com.

2. Information We Collect

We collect personal information when you:

• Make a booking or enquiry through our website or by telephone
• Check in or stay at one of our hotels
• Contact us by email, phone, or social media
• Sign up for our newsletter or promotions
• Use our Tap 2 Eat digital ordering service
• Apply for a business account

The types of information we collect include: name, contact details (address, email, telephone), payment information, booking history, dietary requirements or accessibility needs (where provided), and correspondence with us.

3. How We Use Your Information

We use your personal information to:

• Process and manage your booking or reservation
• Provide our hotel services during your stay
• Process payments and prevent fraud
• Send you booking confirmations, receipts, and service communications
• Respond to your enquiries and complaints
• Send you marketing communications where you have given consent or where we have a legitimate interest
• Manage business accounts and invoicing
• Improve our services through feedback and analysis
• Comply with our legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contractual necessity: To fulfil your booking and provide accommodation
• Legitimate interests: To improve our services, prevent fraud, and communicate with guests
• Legal obligation: To comply with laws such as HMRC requirements and health and safety regulations
• Consent: For marketing communications where required

5. Sharing Your Information

We do not sell your personal data. We may share it with:

• Booking platforms and channel managers we use to manage reservations
• Payment processors (PCI-DSS compliant)
• IT service providers who host or maintain our systems
• Our accountants and professional advisors where required
• Law enforcement or regulatory bodies where required by law

6. How Long We Keep Your Data

We retain booking and guest records for seven years from the date of your stay to meet our legal and tax obligations. Marketing preferences are retained until you withdraw consent. Job application data is held for six months unless you are offered employment.

7. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (subject to legal retention requirements)
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please email info@sleeptighthotels.com.

8. Cookies

Our website uses cookies to improve your experience. Please see our Cookie Policy for full details.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment card data is handled exclusively by our PCI-compliant payment partners and is never stored on our own systems.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will always show when it was last revised. Continued use of our website or services after an update constitutes acceptance of the revised policy.