The short version
No ads, no third-party trackers, and the site itself sets no cookies. There are exactly three places where any data comes into play: the contact form, the hotel map, and an anonymous visit counter. That's it.
The person responsible for all of it (the "data controller", in the official language) is me, Chris Naylor, the one-man band behind this site. The easiest way to reach me about anything on this page is the contact form.
The contact form
If you send me a note through the form on the main page, the name, email address and message you type are stored by Netlify (who host this site) so I can read it and reply. I use them for nothing else: no newsletters, no lists, never passed on. I keep messages only while our conversation is live, then delete them, and at the very latest within a year of receiving them. If you'd like a message you sent deleted sooner, just say so via the same form and I'll remove it.
The hotel map
The where-to-stay map is provided by Stay22, and nothing from them loads until you press the agree button. If you do, your browser connects to Stay22 and its booking partners, who may set cookies and process your IP address; that side of things is covered by the Stay22 privacy policy. The map contains affiliate links, and I may earn a small commission if you book through it, at no extra cost to you.
Your choice is stored only in your own browser, and you can withdraw it any time using the link below the map. Say no and the map simply stays off; the rest of the site works exactly the same.
Visit counting
I count visits on this site's own server, not through any analytics company. When a page loads, it tells my server which page it was, which site (if any) sent you here, and which outbound links get clicked. To estimate how many different people visit each day, the server combines your IP address and browser type into a scrambled code using a secret key that changes every day, keeps only an anonymous tally, and throws the details away. The raw IP address is never stored, the code can't be reversed, and there's no way to recognise the same visitor from one day to the next.
No cookies are involved, browsers asking not to be tracked are left alone, and every counter is deleted after 90 days. What I end up with is nothing more personal than "the hotels page got 40 views on Tuesday".
Hosting
The site is hosted by Netlify. Like any hosting provider, they process standard technical logs (such as IP addresses) to serve the pages and keep things secure, under their own privacy policy.
Netlify is an American company, so anything they handle for me — contact form messages and those technical logs — is processed in the United States. They're certified under the EU–US Data Privacy Framework, the arrangement the EU recognises as giving your data equivalent protection over there.
Your rights
The only personal data I ever hold about you is a contact form message, if you've sent one. Even so, the law gives you rights over it and I'm happy to honour every one: you can ask what I have, have mistakes corrected, have it deleted, or object to my keeping it at all. Send me a note and it's done — no forms, no fuss.
And if you ever feel I've handled your data badly, you have the right to complain to the data protection authority where you live. I'd appreciate the chance to fix it first, but that door is always open to you.
Questions about any of this? Send me a note.