Privacy Policy

Privacy Policy

Last updated: 7 September 2026

Destination Balcary respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit https://destinationbalcary.com/, contact us, make an enquiry, enquire about or make a booking, subscribe to communications, or otherwise interact with us.

This policy is intended to provide information in accordance with applicable UK data protection and electronic communications legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), as applicable.

1. Who we are

For the purposes of applicable data protection legislation, the organisation responsible for your personal information is:

Destination Balcary
Airds of Balcary Farm
Auchencairn
Castle Douglas
DG7 1QZ
Scotland, UK

Telephone: 07973 255 279
Email: airdsofbalcary@gmail.com

References in this Privacy Policy to “Destination Balcary”, “we”, “us” or “our” mean the organisation responsible for the processing of your personal information.

2. What personal information we collect

The information we collect depends on how you interact with us.

Information you provide directly

This may include:

  • your name;
  • email address;
  • telephone number;
  • postal address;
  • booking and reservation details;
  • arrival and departure dates;
  • number of guests;
  • information about pets or other requirements relevant to your stay;
  • payment and transaction information where relevant;
  • information contained in enquiries and correspondence;
  • information you provide when submitting feedback or reviews;
  • information provided when subscribing to email communications; and
  • any other information you choose to provide to us.

Please do not provide sensitive personal information unless it is genuinely necessary for us to deal with your enquiry or booking.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, depending on the technologies and services operating on the website.

This may include:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • approximate location derived from an IP address;
  • referring website;
  • pages visited;
  • date and time of visits;
  • website interactions;
  • information about website performance; and
  • technical information relevant to website security.
  • Where such information is collected using cookies or other storage/access technologies that require consent, those technologies will only be used after the appropriate consent has been obtained.
  • 3. Information provided through enquiries
  • If you contact us by email, telephone, through a website form or by another method, we may collect information necessary to respond to your enquiry.
  • We may use this information to:
  • respond to your enquiry;
  • provide information about Destination Balcary;
  • provide information about accommodation availability and prices;
  • answer questions about the farm or facilities;
  • deal with requests or complaints; and
  • maintain a record of relevant correspondence where reasonably necessary.
  • The lawful basis will generally be that processing is necessary to respond to your request or to take steps at your request before entering into a contract.
  • 4. Booking information
  • Our website provides a booking and availability facility. The current booking page displays a third-party booking-widget area.
  • When you make or enquire about a booking, we may process information such as:
  • your name;
  • contact details;
  • booking dates;
  • number of guests;
  • accommodation requirements;
  • pet information where relevant;
  • payment or transaction details;
  • correspondence relating to your booking; and
  • information reasonably necessary to provide your accommodation and related services.

The identity of the current booking provider should be added to this Privacy Policy once the booking system has been confirmed.

Where a third-party booking provider processes personal information on our behalf, we will take appropriate steps to ensure that suitable contractual, security and data protection arrangements are in place.

Where payment is processed by a third-party payment provider, that provider may process your payment information directly. We do not intend to store complete payment-card details ourselves unless this is specifically required and lawfully undertaken.

5. How we use your personal information

We may use personal information to:

  • respond to enquiries and requests;
  • provide information about Destination Balcary;
  • check availability;
  • administer bookings;
  • provide accommodation and related services;
  • communicate with you about your booking or enquiry;
  • process or administer payments where applicable;
  • provide arrival and departure information;
  • provide customer service;
  • deal with complaints;
  • maintain appropriate business and financial records;
  • administer and maintain our website;
  • maintain website and information security;
  • prevent fraud, misuse or unlawful activity;
  • improve our website, accommodation and services;
  • comply with legal and regulatory obligations;
  • establish, exercise or defend our legal rights; and
  • send marketing communications where we are legally permitted to do so.

6. Our lawful bases for processing

We will only process personal information where we have a lawful basis under applicable data protection law.

Contract

We may process your information where this is necessary to enter into or perform a contract with you, including administering a booking and providing accommodation.

Pre-contractual steps

We may process information where you ask us to provide availability, prices or other information before deciding whether to make a booking.

Legal obligation

We may process personal information where necessary to comply with legal, tax, accounting, insurance or regulatory obligations.

Legitimate interests

We may process personal information where this is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

Examples may include:

  • responding to enquiries;
  • administering our business;
  • maintaining website security;
  • keeping appropriate business records;
  • improving our services;
  • protecting our property and legal rights; and
  • dealing with disputes or complaints.

Consent

Where consent is required, we will ask for it before processing your information for the relevant purpose.

This may include certain marketing activities and certain non-essential cookies or similar technologies.

You can withdraw consent at any time.

7. Marketing communications

We may send information about Destination Balcary, special offers, events, local information or other communications where we are legally permitted to do so.

Where consent is required for electronic marketing, we will obtain the appropriate consent before sending it.

You can unsubscribe at any time by following the unsubscribe instructions in the relevant communication or by contacting us.

You have an absolute right to object to the processing of your personal information for direct marketing purposes.

8. Cookies and similar technologies

Our website may use cookies and other technologies that store information on, or access information from, your device.

This can include:

  • cookies;
  • tracking pixels;
  • scripts and tags;
  • web or browser storage;
  • link-decoration or navigational tracking technologies; and
  • other similar storage and access technologies.

Some technologies may be strictly necessary for the website or a service you have specifically requested.

Other technologies, such as certain analytics, advertising or preference technologies, may require your consent before they are used.

Our separate Cookie & Tracking Policy explains these technologies and how you can manage your choices.

The ICO’s current guidance confirms that PECR applies to a broad range of storage and access technologies, not simply conventional cookies.

9. Website analytics

The existing Destination Balcary Privacy Policy states that Google Analytics is used.

The current website configuration should be checked to confirm whether Google Analytics remains active and which version and configuration are being used.

If Google Analytics or another non-essential analytics service is active:

  • it will be identified in our cookie information;
  • any required consent will be obtained before the technology is activated; and
  • analytics information will be used to understand website usage and improve our website and services.

The presence of an analytics service will not be treated as automatically exempt from consent merely because the information collected is aggregated or used for statistical purposes.

10. Who we share your personal information with

We do not sell your personal information.

We may share personal information where reasonably necessary with:

  • accommodation and booking providers;
  • booking-management systems;
  • payment service providers;
  • website hosting and technical service providers;
  • email and communications providers;
  • IT and cybersecurity providers;
  • professional advisers;
  • insurers;
  • contractors and suppliers assisting us in operating Destination Balcary;
  • government bodies, regulators or law-enforcement authorities where legally required or permitted; and
  • other parties where necessary to establish, exercise or defend our legal rights.

Where another organisation processes personal information on our behalf, we will take appropriate steps to ensure that suitable data protection arrangements are in place.

11. Third-party services

Our website may use or link to third-party services.

These may include:

  • booking services;
  • analytics services;
  • social-media platforms;
  • video or other embedded content;
  • website security services;
  • mapping services;
  • payment providers; and
  • other technical or service providers.

Third parties may process personal information in accordance with their own privacy notices.

Where third-party services use non-essential storage or access technologies on our website, we will apply the appropriate consent requirements.

12. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place.

Depending on the circumstances, these safeguards may include:

  • an adequacy decision;
  • approved contractual safeguards; or
  • another lawful transfer mechanism recognised under applicable data protection law.

13. How long we keep your information

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

Different types of information may be retained for different periods.

For example:

  • booking and financial records may be retained for the period necessary to satisfy tax, accounting, insurance and legal requirements;
  • enquiry correspondence may be retained for as long as reasonably necessary to deal with the enquiry and any resulting relationship or dispute;
  • complaint and dispute records may be retained for as long as reasonably necessary to investigate and resolve the matter and protect our legal interests; and
  • marketing information may be retained while you remain subscribed or until you withdraw consent, subject to applicable law.
  • When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.

14. Security of personal information

We take reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

These measures may include appropriate access controls, secure systems, software updates, backups and other security measures appropriate to the nature of the information and the risks involved.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

15. Your data protection rights

Subject to certain legal conditions and exemptions, you may have the following rights:

  • Right to be informed about how your personal information is used;
  • Right of access to the personal information we hold about you;
  • Right to rectification of inaccurate or incomplete information;
  • Right to erasure in certain circumstances;
  • Right to restriction of processing in certain circumstances;
  • Right to data portability in certain circumstances;
  • Right to object to certain processing; and
  • Rights concerning automated decision-making and profiling, where applicable.

You also have an absolute right to object to direct marketing.

Where we process information on the basis of consent, you have the right to withdraw that consent at any time.

These rights are subject to certain legal exceptions and limitations.

To exercise your rights, please contact us using the details in Section 1.

We may need to request reasonable information to verify your identity before responding to a request.

16. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate and attempt to resolve your concern.

You also have the right to complain to the UK’s data protection regulator:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk/

The ICO provides information about your data protection rights and how to make a complaint.

17. Third-party websites

Our website contains links to third-party websites, including tourism organisations, attractions, social-media services and other external websites.

We are not responsible for the privacy practices, security or content of third-party websites.

You should read the privacy notice of any third-party website before providing personal information to it.

18. Social media and embedded content

Destination Balcary provides links to social-media services, including Facebook and Instagram.

If you follow a link to a social-media platform or interact with embedded third-party content, that third party may collect information about you in accordance with its own privacy policy.

Where embedded content uses non-essential storage or access technologies, the appropriate consent requirements will apply.

19. Children’s information

Our accommodation and website are intended to be used and booked by adults.

We do not knowingly seek to collect children’s personal information through the website unless it is necessary for a legitimate purpose connected with a booking or enquiry.

20. Automated decision-making

We do not currently use your personal information to make solely automated decisions that produce legal or similarly significant effects on you.

If this changes, we will update this Privacy Policy and provide any information required by applicable law.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes to our business;
  • changes to our website;
  • changes to our booking or payment systems;
  • changes to the third-party services we use;
  • changes in how we process personal information;
  • changes in technology; or
  • changes in applicable law or regulatory guidance.

The latest version will be published on this page with the date it was last updated.

We recommend checking this page periodically.

22. Contact us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we use your personal information, please contact:

Destination Balcary
Airds of Balcary Farm
Auchencairn
Castle Douglas
DG7 1QZ
Scotland, UK

Telephone: 07973 255 279
Email: airdsofbalcary@gmail.com


Last updated: 7 September 2026

Contact us The Farmhouse
Scottish Agritourism Scottish Tourist Board Self Catering

We also have a...

Coastal Escape in
South West Scotland

Ross Bay Retreat self catering holiday cottages in Dumfries & Galloway, a cosy, coastal retreat with sea views from each balcony; when you need to get away from it all.

Visit the Ross Bay Retreat website >

Country Escape in
Yorkshire

Overdale Cottage is a cosy pet friendly cottage in the charming village of Harome, 3 miles from the Helmsley on the edge of the North York Moors National Park.

Visit the Helmsley Hideaway website >