Cookies
Necessary
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
| Cookie | Duration | Description |
|---|---|---|
| __cf_bm | 1 hour | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
| _cfuvid | session | Cloudflare sets this cookie to track users across sessions to optimize user experience by maintaining session consistency and providing personalized services |
| m | 1 year 1 month 4 days | Stripe sets this cookie for fraud prevention purposes. It identifies the device used to access the website, allowing the website to be formatted accordingly. |
Uncategorised
Other uncategorised cookies are those that are being analysed and have not been classified into a category as yet.
| Cookie | Duration | Description |
|---|---|---|
| current_locale | 3 months | No description available. |
| _innstyle_session | session | Description is currently not available. |
| _user_attributes | 6 months | No description available. |
| bev | 2 years | No description available. |
| everest_cookie | 3 years | Description is currently not available. |
| country | session | No description available. |
Privacy Policy
Arne Maynard Garden Design Holdings Limited (“we”, “us”, “our”) respects your privacy. This policy explains what personal data we collect, how we use it, and your rights.
Allt y Bela Limited (Company No. 14176527)
1) Who we are (the controller)
Arne Maynard Garden Design Holdings Limited (Company No. 11349233)
Registered office: 3 North Parade Buildings, Bath, England, BA1 1NS, United Kingdom
Contact: info@alltybela.co.uk
We are the data controller for personal data relating to your booking and stay with us, your use of our facilities, your interactions with our website, and our marketing.
2) Bookings via Inn Style
All accommodation bookings for Allt y Bela are processed via our booking partner, Inn Style (www.innstyle.co.uk).
When you click “Book Now” on our website, you will be redirected to the Inn Style platform (or interact with an embedded Inn Style window).
Inn Style collects and processes your booking and payment information and shares the necessary details with us so that we can manage your stay.
Inn Style acts as our booking agent and data processor, but they may also process data for their own legitimate business or legal purposes (e.g. fraud prevention, regulatory compliance).
You should also review Inn Style’s Privacy Policy for more information about how they handle your data.
The booking contract remains between you and us.
3) What personal data we collect
Data you provide:
Booking & stay data: name, contact details, address, party composition (including number of adults, children and dogs), stay dates, special requests
Payment details: processed securely by Inn Style and its payment partners. We receive confirmation of payment but do not store or have access to full card details
Communications: emails, calls/voicemails, texts/WhatsApp, enquiries, complaints or incident reports
Marketing preferences: newsletter sign-up and consents
Data we collect automatically:
Website usage: IP address, device/browser, pages viewed, referral source, cookie identifiers (see our Cookie Policy)
CCTV: images or recordings in communal areas of the Site for safety and security
Data we receive from third parties:
Inn Style: booking details, payment confirmation, communications
Payment processors (via Inn Style): authorisation and fraud checks
4) Why we use your data and lawful bases
| Purpose | Examples | Lawful basis |
|---|---|---|
| Manage bookings and your stay | Confirm bookings, allocate accommodation, communicate with you | Contract |
| Provide facilities/services | Pool, sauna, fitness, classes, treatments | Contract; Legitimate interests |
| Treatments/fitness (health data) | Health questionnaires, fitness readiness | Explicit consent; Vital interests |
| Customer service | Enquiries, complaints, incident handling | Contract; Legitimate interests |
| Payments & fraud prevention | Payment processing via Inn Style | Contract; Legitimate interests |
| Site safety & security (CCTV) | Prevent/investigate incidents | Legitimate interests |
| Legal/insurance | Tax records, claims handling | Legal obligation; Legitimate interests |
| Marketing | Email/SMS updates and offers | Consent; or legitimate interests (soft opt-in under PECR) |
| Website operation/analytics | Performance and experience improvement | Legitimate interests; Consent for non-essential cookies |
Withdrawing consent: Where we rely on consent (e.g. marketing, health information), you can withdraw it at any time by contacting us or using unsubscribe links.
5) Children
Bookings must be made by persons over 18. We do not knowingly market to children.
6) Who we share your data with
We may share your data with:
- Inn Style (booking platform provider)
- Payment processors (via Inn Style)
- IT hosting, cloud and email providers
- Therapists, instructors or partners delivering services you book
- Professional advisers and insurers
- Regulators or law enforcement where required
- Successors in the event of a business sale or reorganisation
We do not sell your data.
7) International transfers
Some providers may be based outside the UK (e.g. cloud hosting, email, analytics). Where this happens, we use lawful safeguards such as:
- UK adequacy regulations; or
- UK International Data Transfer Agreement (IDTA) / Standard Contractual Clauses with UK Addendum
8) How long we keep your data
- Booking and guest records: 7 years
- CCTV: typically 30 days (longer if required for an incident)
- Health questionnaires/consents: up to 3 years after your visit (or longer where needed for legal claims)
- Marketing data: until you unsubscribe or after 24 months of inactivity
- Incident/claims files: as required for legal purposes
9) Security
We take appropriate technical and organisational measures to protect your data. No system is entirely secure, and you should keep your own devices and booking details safe.
10) Your rights
You have the right to:
- Access your data and receive a copy
- Correct inaccurate data
- Request deletion (in certain circumstances)
- Restrict processing (in certain circumstances)
- Data portability
- Object to processing or direct marketing
- Withdraw consent at any time
To exercise your rights, email info@alltybela.com. We may need to verify your identity.
You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk
11) CCTV
CCTV operates in communal areas at Allt y Bela for safety and security. Images may be shared with law enforcement or insurers if required. Typical retention is 30 days unless an incident requires longer.
12) Marketing
Email and SMS marketing is sent only with your consent, or under the “soft opt-in” where you have booked with us and we are promoting similar services.
Email addresses provided when making a booking may be added to our Mailchimp mailing list so that we can share updates, news and relevant offers from Allt y Bela. You can opt out at any time using the unsubscribe link included in every email or by contacting us directly.
You can opt out at any time via unsubscribe links or by contacting us.
We do not share your data with third parties for their own marketing without your consent.
13) Cookies
We use cookies and similar technologies on our website. Non-essential cookies require your consent and can be managed via our cookie banner. See our Cookie Policy.
14) Third-party links
Our website and booking process include links to third-party sites such as Inn Style. These sites have their own privacy policies. We are not responsible for their content or practices.
15) Updates to this policy
We may update this policy from time to time. The latest version will always be available on our website, with the updated date noted. Significant changes may also be communicated by email where appropriate.
16) Contact us
Questions or requests about this policy?
Email: info@alltybela.com
Postal: Allt y Bela, Usk, Monmouthshire, NP15 1EZ, UK