PRIVACY POLICY

This website is operated by Noble Rooms Ltd, trading as Princes Street Hostel. We take your privacy seriously and ask that you read this policy carefully, as it contains important information on:

  • the personal information we collect about you;
  • what we do with your personal information; and
  • who your personal information might be shared with.

We are the controller of the personal information that we collect from you on our website and during your stay. This means we are legally responsible for how we collect, hold and use your personal information in accordance with UK data protection laws (Data Protection Act 2018 and the UK GDPR).

If you have any questions about this statement or how we hold or use your personal information, please contact us at hello@princesstreethostel.com

1. What personal information do we collect about you and why?

Our website provides information about our accommodation and booking services.

When you visit our website or make a booking with us, we collect personal information about you when you:

  • make a booking via our website or through our booking system (Beds24);
  • provide us with feedback about your stay;
  • submit an enquiry to us via email or contact form.

The personal information we collect typically includes:

  • Name, email address, and telephone number
  • Billing and postal address
  • Payment card details (processed securely via our payment provider)
  • Booking details and dates of stay
  • Any special requirements, allergies, or accessibility needs

We use such personal information to:

  • process your booking and collect payments;
  • provide you with the accommodation and services you have requested;
  • communicate with you regarding your booking and stay;
  • respond to any of your enquiries;
  • improve our services based on your feedback;
  • comply with accounting, taxation and record keeping requirements;
  • handle and resolve complaints;
  • notify you of any changes to our services that may affect you.

We may not be able to provide our services if you do not provide sufficient personal information (for example, payment card details are required to complete a booking).

We may send you promotional communications about our services (e.g. special offers), but only if you have actively opted in to receive such messages. You can withdraw your consent at any time by clicking the unsubscribe link in our emails or by contacting hello@princesstreethostel.com.

We use cookies on our website. Some cookies are essential for the operation of the site (e.g. to manage your booking), while others (such as analytics cookies) help us understand how visitors use our site. We will only use non-essential cookies if you have given us your consent via our cookie banner.

We only process your personal information where we have a lawful basis to do so under data protection law. These include:

  • Contractual necessity: To process your booking and provide the accommodation and services you have requested.
  • Legal obligation: To comply with legal and regulatory requirements (e.g. tax, accounting, and accommodation licensing laws).
  • Legitimate interests: To improve our services, respond to feedback, and manage our business operations, provided these interests are not overridden by your rights and freedoms.
  • Consent: For sending you marketing communications and for processing any special category data (e.g. health information for accessibility needs).

You have the right to withdraw your consent at any time by contacting us at hello@princesstreethostel.com.

If you provide us with personal information about someone else (e.g. when booking on their behalf), you must ensure that you have their permission to do so. If the individual is under 13 years old, you must be their parent or legal guardian or have obtained consent from their parent or guardian.

3. Who do we share your personal information with?

We may share your personal information with:

  • Our booking system provider (Beds24) to process your booking and manage reservations;
  • Payment processors to securely handle payment transactions;
  • Cloud service providers who host our systems;
  • Our legal advisors, accountants, and auditors;
  • Third-party mailing providers (only if you have opted in to receive marketing).
  • Public authorities where required by law (e.g. for safeguarding or criminal investigations).

All third parties are required to handle your data securely and in accordance with data protection law. We do not sell your personal information.

4. How long do we keep your personal information?

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, including to meet legal, accounting, or regulatory requirements. For example:

  • Booking and payment records: typically retained for 7 years for tax and accounting purposes
  • Marketing preferences: retained until you withdraw consent
  • Safeguarding records (if applicable): retained in accordance with legal requirements

5. How do we keep your personal information secure?

The security of your personal information is important to us. We use technical and organisational measures to safeguard your personal information, including:

  • Secure encryption for payment data transmission
  • Password protection and access controls
  • Regular security assessments
  • Secure storage of physical records

While we take reasonable steps to protect your data, no method of transmission over the internet is completely secure. If we become aware of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.

6. What if you provide us with personal information about somebody else?

If you provide us with personal information about another person (e.g. a guest in your booking, a friend or family member), you must ensure that:

  • they are aware of this policy and how their data will be used;
  • they have given you permission to share their data with us;
  • if they are under 13, you are their parent or guardian or have obtained parental consent.

7. Do we send your personal information outside the UK?

We may transfer your personal information to service providers located outside the UK. In this case, we will ensure appropriate safeguards are in place to protect your privacy rights, including standard contractual clauses. You have the right to request details of these safeguards.

8. What rights do you have in relation to your personal information?

You have the following rights:

  • The right to access your personal information
  • The right to correct inaccurate or incomplete information
  • The right to request deletion of your data (subject to legal retention requirements)
  • The right to restrict or object to processing
  • The right to request data portability
  • The right to withdraw your consent at any time
  • The right to object to direct marketing
  • The right to lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at hello@princesstreethostel.com. We may ask you to verify your identity before processing your request.

Please note: While we aim to respond to all legitimate requests regarding your personal data, we reserve the right to charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, or repetitive, as permitted by data protection law.

9. Complaints

If you have concerns about how we use your personal information, please contact us at hello@princesstreethostel.com.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

10. Updates to this policy

We may update this policy from time to time to reflect changes in our practices or relevant data protection laws. We will notify you of any material changes. Please check this page periodically to ensure you are aware of the most recent version.