Privacy notice

Who we are

Castle Sunset on the Beach is a holiday house at Castle View, 1 Killerby Lane, Cayton, Scarborough YO11 3TP, run by Phil Scaife. We decide how your personal information is used, which makes us the data controller. Questions or requests: hello@castlesunset.co.uk or 07971 836446.

What we collect, why, and for how long

Your email address, when you sign up for offers (and where you signed up, the date you agreed and a private unsubscribe link)

To send you offers and last-minute dates. Our lawful basis is your consent.

Kept: Until you unsubscribe. After that we keep only a record that you opted out, so we don't email you again.

Your name, email, phone number (if you give it) and message, when you use the contact form

To reply to you. Our lawful basis is our legitimate interest in answering enquiries.

Kept: Up to 2 years, then deleted.

Your name, star rating, stay date and review, when you leave a review

To publish genuine guest reviews after we've checked them. Our lawful basis is your consent.

Kept: For as long as the review is shown. Ask us and we'll remove it.

Your email address and IP address, when you open the guest information page

To keep arrival details private to booked guests and to spot misuse. Our lawful basis is our legitimate interest in keeping the house secure.

Kept: Up to 12 months.

What you type into the chat assistant

To answer your question. Messages are sent to an AI service to generate a reply and are not used to identify you.

Kept: We don't store chat conversations on our website.

Your booking details: name, contact details, dates, guests, ID check and payment

To take and manage your booking. Our lawful basis is to perform our contract with you, and our legal obligations.

Kept: As long as needed for the booking and for tax and accounting records (usually 6 years).

Who we share it with

We never sell your information. These companies handle it for us, under contract and only to provide their service:

• Vercel: hosts this website
• TiDB Cloud (data stored in Frankfurt, EU): stores sign-ups, contact messages, reviews and the guest page log
• Uplisting: runs our booking system, guest messages and ID checks; card payments are taken by Stripe
• Resend: sends us an email when you send a message or leave a review
• Anthropic (through Vercel AI Gateway): generates the chat assistant's replies

Some of these companies are based in the United States. Where your information leaves the UK, they protect it with the UK's approved safeguards, such as the UK International Data Transfer Addendum or the UK-US data bridge.

If you book through Airbnb or Booking.com, they collect your details first and share what's needed for your stay with us. Their own privacy notices apply to what they do.

Cookies and similar storage

We don't use advertising or tracking cookies, and we don't run analytics that follow you around the web. The site uses your browser's own storage only to remember that you've closed the offers pop-up and, on the guest information page, that you've entered the password. The admin area uses a login cookie for our own staff. None of these are used for marketing.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the information we hold about you
• correct anything that's wrong
• delete your information
• stop or limit how we use it, or object to us using it
• send it to you, or to someone else, in a common format
• withdraw your consent at any time, for example by unsubscribing from our emails

Email hello@castlesunset.co.uk and we'll reply within one month. Every offer email also has an unsubscribe link.

Complaints

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.