Privacy

PRIVACY POLICY 


1. Introduction

This Privacy Policy explains how Forsyths Ltd (t/a The Station Hotel Ltd) collects, uses, stores, and protects your personal data.


2. Data Controller

Forsyths Ltd

Morayshire Copperworks, Rothes, Aberlour, Moray, AB38 7AD

Email: manager@stationhotelspeyside.com


3. Data We Collect

3.1 Information You Provide

  • Name
  • Email, phone number
  • Postal address
  • Age/ID confirmation
  • Payment details (processed securely by third-party providers)
  • Booking information
  • Account login details
  • Reviews and user-generated content

3.2 Automatically Collected Data

  • IP address
  • Browser/device data
  • Analytics & usage data
  • Cookies (see Cookie Policy)


4. How We Use Personal Data

We process data for:

  • Order processing & fulfilment
  • Age verification
  • Account creation & management
  • Bookings & event administration
  • Customer service
  • Marketing (with your consent)
  • Website optimisation & analytics
  • Legal obligations (e.g., licensing, HMRC, fraud prevention)


5. Lawful Bases for Processing

  • Contract — fulfilling purchases or bookings
  • Legal obligation — age verification, accounting, licensing
  • Consent — marketing emails, cookies
  • Legitimate interests — business analytics, security

6. Sharing Your Data

We may share data with:

  • Payment processors
  • Delivery providers
  • Email marketing services
  • Analytics platforms
  • IT hosting providers
  • Regulators where required by law

We never sell personal data.


7. International Transfers

Data remains stored within the UK or EEA where possible.

Where transfers occur, appropriate safeguards (e.g., SCCs) are used.


8. Data Retention

We retain data only as long as necessary for:

  • legal requirements
  • accounting and audit needs
  • active customer relationships

9. Your Rights (UK GDPR)

You may request:

  • access to your data
  • correction
  • deletion
  • restriction
  • objection
  • portability
  • withdrawal of consent

Email requests to: manager@stationhotelspeyside.com


10. Security

We use technical and organisational security measures to protect data.