PRIVACY POLICY
1. Introduction
This Privacy Policy explains how Forsyths Ltd (t/a The Station Hotel Ltd) collects, uses, stores, and protects your personal data.
2. Data Controller
Forsyths Ltd
Morayshire Copperworks, Rothes, Aberlour, Moray, AB38 7AD
Email: manager@stationhotelspeyside.com
3. Data We Collect
3.1 Information You Provide
- Name
- Email, phone number
- Postal address
- Age/ID confirmation
- Payment details (processed securely by third-party providers)
- Booking information
- Account login details
- Reviews and user-generated content
3.2 Automatically Collected Data
- IP address
- Browser/device data
- Analytics & usage data
- Cookies (see Cookie Policy)
4. How We Use Personal Data
We process data for:
- Order processing & fulfilment
- Age verification
- Account creation & management
- Bookings & event administration
- Customer service
- Marketing (with your consent)
- Website optimisation & analytics
- Legal obligations (e.g., licensing, HMRC, fraud prevention)
5. Lawful Bases for Processing
- Contract — fulfilling purchases or bookings
- Legal obligation — age verification, accounting, licensing
- Consent — marketing emails, cookies
- Legitimate interests — business analytics, security
6. Sharing Your Data
We may share data with:
- Payment processors
- Delivery providers
- Email marketing services
- Analytics platforms
- IT hosting providers
- Regulators where required by law
We never sell personal data.
7. International Transfers
Data remains stored within the UK or EEA where possible.
Where transfers occur, appropriate safeguards (e.g., SCCs) are used.
8. Data Retention
We retain data only as long as necessary for:
- legal requirements
- accounting and audit needs
- active customer relationships
9. Your Rights (UK GDPR)
You may request:
- access to your data
- correction
- deletion
- restriction
- objection
- portability
- withdrawal of consent
Email requests to: manager@stationhotelspeyside.com
10. Security
We use technical and organisational security measures to protect data.