Last updated: DECEMBER 2025

At The Kensington Hideaway Hotel, your privacy is our priority. We are committed to handling your personal information with transparency, integrity, and care. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, make a reservation, interact with us, or stay at our hotel.

Who We Are

The Kensington Hideaway Hotel
Website: https://kensingtonhideaway.com
Email: info@kensingtonhideaway.com
Address: Kensington, London, United Kingdom

We act as the data controller responsible for your personal data under UK GDPR.

What Personal Data We Collect & Why

We collect information only when necessary to provide our services, operate our hotel, improve guest experience, comply with the law, and keep our premises safe.

1. Booking & Reservation Information

When you make a reservation via our website, booking partners, or directly with us, we collect:

Full name
Contact details (email, phone, address)
Payment information (processed securely by third-party payment providers)
Stay details (dates, room type, preferences)
Special requests, such as dietary needs, allergies, or accessibility needs

Why:
To confirm bookings, communicate with you, personalise your stay, meet accessibility/dietary requirements, and comply with legal and financial obligations.

2. Contact Forms & Customer Support

If you contact us, we may collect:

Name
Email address
Phone number
Message content

Why:
To respond to enquiries, provide support, and maintain service quality.

3. Newsletter & Marketing

If you opt in to receive marketing updates, we collect:

Email address
Name (optional)

Why:
To send news, offers, and hotel updates.
You can unsubscribe at any time.

4. Automatically Collected Data (Cookies & Analytics)

When you visit our website, we may collect:

IP address
Device and browser type
Pages viewed and time spent
Cookies and similar technologies

Why:
To improve website performance, analyse traffic, enhance user experience, and maintain security.

5. CCTV Footage (On-Property Security)

Our hotel uses CCTV in public areas for:

Guest and staff safety
Crime prevention and detection
Monitoring and protecting hotel property

CCTV footage may be shared with law enforcement when legally required.

Retention: Typically 30 days, unless required for investigations.

6. Wi-Fi Usage Data

When using our guest Wi-Fi, basic technical data may be collected:

Device ID
MAC address
Connection timestamps
Browsing domains (not personal content)

Why:
To maintain network performance, ensure security, and comply with legal obligations.

7. Recruitment & Employment Data

If you submit a CV or job application, we may collect:

Name & contact details
Employment history
Qualifications
Right-to-work documentation

Why:
To assess your suitability for employment, comply with HR laws, and maintain records.

Lawful Basis for Processing (UK GDPR)

We process data under the following legal bases:

Contractual necessity – to manage bookings, payments, and guest services
Legitimate interest – hotel security, analytics, service improvement
Legal obligation – financial reporting, safety requirements
Consent – marketing communications, optional cookies
Vital interest – emergency situations affecting guest safety

Embedded Content & Third-Party Services

Our website may contain content or tools from third parties such as:

Booking engines
Payment processors
Google Maps
Social media platforms
Email marketing software

These third parties may collect data as if you visited their website directly.
Each provider operates under their own Privacy Policy.

Who We Share Your Data With

Your data is shared only when necessary with:

Booking and reservation partners
Payment processors
IT and website hosting providers
Marketing platforms (only if you opt-in)
Law enforcement or regulatory bodies (when required)

We do not sell personal data.

How Long We Keep Your Data

We retain data only as long as necessary:

Reservation records: as required by accounting and hotel regulations
Marketing data: until you unsubscribe
CCTV footage: approx. 30 days
Job applications: up to 12 months unless otherwise agreed

Your Rights (UK GDPR)

You may request to:

Access your data
Correct inaccurate information
Request deletion
Restrict processing
Object to certain uses
Withdraw consent (e.g., marketing)
Receive a copy of your data (data portability)

To exercise your rights, email: privacy@kensingtonhideaway.com

International Data Transfers

Some third-party providers may store or process data outside the UK/EU.
We ensure appropriate safeguards such as Standard Contractual Clauses (SCCs).

How We Protect Your Data

We use strong technical and organisational measures, including:

Encrypted connections (SSL)
Secure payment systems
Access controls and permissions
Staff training and confidentiality
Firewall and intrusion monitoring
Regular security reviews and updates

Children’s Privacy

Our services and website are not directed to persons under 16.
We do not knowingly collect children’s personal data without parental consent.

Changes to This Policy

We may update this Privacy Policy periodically.
Any changes will be posted on this page with an updated revision date.

Contact Us

For any questions or data requests:
📧 privacy@kensingtonhideaway.com
📍 Kensington, London, United Kingdom

Privacy Policy