Privacy policy

Who we are

Hill Head Cottage, Harpur Hill, Buxton, Derbyshire, is responsible for your personal information on this website. Email shorttermlettings@tishansoft.co.uk with any privacy question.

What we collect, and why

• Bookings: your name, email, phone number, dates, number of guests and pets, and what you paid. We use this to run your booking, take payment, and contact you about your stay.
• Your account (optional): your name, email and phone number, and either a password (stored scrambled, never readable) or your Google sign-in. We use this to let you sign in and see your bookings.
• Enquiries: what you write in the contact form, with your contact details, so we can reply.
• Security: to prevent abuse we use your internet address briefly, and keep it only as an irreversible code that cannot be turned back into the address.

Our legal bases are: to carry out the contract with you (bookings and accounts), our legitimate interest in running the site securely and answering enquiries, and our legal duty to keep accounting records.

Cookies

We use only an essential cookie that keeps you signed in. We do not use advertising or tracking cookies, so there is no cookie banner. If you choose Sign in with Google, Google loads on that page and may set its own cookies.

Who we share it with

We share only what is needed with the services that help us run the website:

• Stripe takes card payments. We never see your card details.
• Brevo sends our emails, such as confirmations and password resets.
• Google provides Sign in with Google, if you use it.
• Neon hosts our database in the cloud.

Some of these may handle information outside the UK, with appropriate protections. Dates that are booked are shared with Airbnb as "reserved", without any personal details. We do not sell your information.

How long we keep it

• Booking records: up to 6 years, as accounting and tax rules require.
• Your account: until you delete it. You can do that yourself in My account. Past bookings are kept for our records but are no longer linked to you.
• Enquiries: only as long as needed to deal with them.

Your rights

You can ask to see the information we hold about you, correct it, have it deleted, restrict or object to how we use it, or take a copy of it. Email us and we will reply within one month. If you are unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

We may update this policy and will show the date at the bottom of this page.

Last updated 10 October 2026