This policy explains what personal data Stratford Hotel Ltd ("we", "us", "our") collects through this website, why, and what rights you have over it. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Stratford Hotel Ltd
43 Romford Rd, Stratford, London, E15 4LY
Company number: [INSERT COMPANY NUMBER]
Email: reservations@stratfordhotelltd.co.uk
Phone: 020 8522 7347

What data we collect, and why

1. Enquiries and bookings made via WhatsApp

We don't take bookings or payments through this website. The "Book" button links out to WhatsApp, a messaging service operated by WhatsApp Ireland Limited (part of Meta). When you message us there, you share your phone number, name, and whatever you tell us (dates, room type, guest numbers) directly with us via WhatsApp. That conversation is also subject to WhatsApp's own privacy policy, which we don't control. We use the details you send us only to check availability, confirm your booking, and communicate with you about your stay. Our lawful basis for this is taking steps to enter into a contract with you (Article 6(1)(b) UK GDPR).

2. Guest reviews

If you leave us a review — in person, by message, or elsewhere — we may ask your permission to publish your first name, general location (e.g. "London"), star rating, and comments on this website, and, where you've provided one, a link to a video you're happy for us to embed. We only publish reviews with the reviewer's consent, and we never publish a review that wasn't genuinely left by a real guest. Our lawful basis is your consent (Article 6(1)(a) UK GDPR), which you can withdraw at any time by contacting us — we'll remove the review.

3. Cookies and similar technologies

See our Cookie Policy for full details. In short: we don't set any cookies for ordinary visitors browsing the site. A cookie is only set (a) for hotel staff logging into the admin area, which is strictly necessary for that login to work securely, or (b) if you choose to load an embedded YouTube or Vimeo video review, which then sets its own third-party cookies under that provider's policy, not ours.

4. Server logs

Like virtually all websites, our hosting provider's web server automatically logs technical information for every visit — IP address, browser type, pages requested, and timestamps — for security and troubleshooting purposes. This is standard technical operation of the server (legitimate interest, Article 6(1)(f) UK GDPR) and isn't used to build a profile of you.

Who we share data with

• WhatsApp / Meta — any conversation you start with us over WhatsApp is also held by WhatsApp under their own privacy policy.
• YouTube / Vimeo — only if you choose to load an embedded video review, at which point that provider may set cookies and process your IP address per their own policy.
• Our web hosting provider — hosts the site and its database on our behalf and can access data only to provide that hosting service.

We do not sell personal data to anyone, and we don't use it for advertising or share it with marketing companies.

International transfers

YouTube and Vimeo are US-based services; if you load an embedded video, some data (such as your IP address) may be processed outside the UK, under those providers' own safeguards. We don't otherwise transfer personal data outside the UK.

How long we keep data

WhatsApp booking conversations are kept for as long as reasonably needed to handle your stay and deal with any post-stay queries, then deleted. Published reviews are kept until you ask us to remove them or we no longer need them for the site.

Your rights

Under UK GDPR you have the right to: access the personal data we hold about you; ask us to correct or delete it; restrict or object to our processing of it; and receive a copy in a portable format. To exercise any of these, contact us at reservations@stratfordhotelltd.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) if you think we've mishandled your data.

Children

This website isn't directed at children, and we don't knowingly collect personal data from anyone under 18.

Changes to this policy

We may update this policy from time to time; the "last updated" date at the top will always reflect the latest version.