Privacy Policy for Marton Meadow
Effective Date: 14/04/2026
Welcome to Marton Meadow (“we”, “us”, “our”). We are committed to protecting your personal data and handling it responsibly and transparently.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit www.martonmeadow.co.uk and make a booking with us. It is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are (Data Controller)
PA & PJ Ormerod is the data controller for the personal data collected through this website. This means we are responsible for deciding how and why your data is used.
Contact details:
- Business name: PA & PJ Ormerod
- Address: Pasture House Farm, Skipton, North Yorkshire, BD23 3UJ
- Email: hello@martonmeadow.co.uk
2. Information We Collect
We only collect personal data that is necessary for managing bookings. When you make a booking via our scheduling system, we collect:
- Your name
- Email address
- Phone number
This information is collected through our third-party booking provider, Acuity Scheduling (operated by Squarespace Inc.).
We do not collect payment card details or sensitive personal data as defined under UK GDPR.
When you visit our website, certain technical data is also collected automatically by Google Analytics, including:
- IP address (anonymised)
- Pages visited and time spent on each page
- Browser type and device information
- Referring website
This analytics data is only collected where you have consented to analytics cookies via our cookie banner.
3. Lawful Basis for Processing
We process your personal data on the following lawful bases under UK GDPR Article 6:
| Processing Activity | Data Used | Lawful Basis |
|---|---|---|
| Managing and confirming bookings | Name, email, phone number | Contract, Art. 6(1)(b): processing is necessary to fulfil the booking you have made with us |
| Contacting you about your booking | Name, email, phone number | Contract, Art. 6(1)(b) |
| Sending a follow-up visit survey | Email address | Legitimate Interests, Art. 6(1)(f): we have a legitimate interest in improving our service. You may opt out at any time |
| Website analytics (Google Analytics) | IP address, pages visited, session data | Consent, Art. 6(1)(a): collected only where you have accepted analytics cookies via our cookie banner |
Where we rely on Legitimate Interests, we have assessed that our interests do not override your rights and freedoms. You may object to this processing at any time; see Section 8 for how to do so.
4. How Your Data is Collected
Booking data is collected via our embedded booking system powered by Acuity Scheduling. We do not directly store booking data on our website servers.
Our website is hosted by Ionos on servers located in the United Kingdom.The hosting platform does not independently access or process visitor personal data. The server is built on a a Linux architecture running Ubuntu on a WordPress Platform.
5. How We Use Your Information
Your personal data is used strictly for:
- Managing and confirming your booking
- Contacting you regarding your booking (including reminders or changes)
- Sending a follow-up survey about your visit (you may opt out of this at any time)
- Improving our website through anonymised analytics (where consent has been given)
We do not sell your data, share it for marketing purposes, use it for advertising, or pass it to any third party other than those listed in Section 6.
6. Third-Party Services and Data Processors
We use the following third-party services to operate our website and booking system. Where these services process your personal data on our behalf, they act as data processors under UK GDPR Article 28, and we have satisfied ourselves that they provide appropriate data protection safeguards.
Acuity Scheduling (Squarespace Inc.)
Used to manage bookings. Acuity processes your name, email address, and phone number to create and manage your booking. Squarespace Inc. is a US-based company; data transfers are made under appropriate safeguards including Standard Contractual Clauses. See Acuity’s privacy policy at: squarespace.com/privacy
Google Analytics (Google LLC)
Used to understand how visitors use our website. Google processes anonymised usage data including IP addresses, pages visited, and session information. Data may be transferred to the United States under Standard Contractual Clauses. Analytics cookies are only set where you have given consent. See Google’s privacy policy at: policies.google.com/privacy. You may opt out using the Google Analytics opt-out browser add-on: tools.google.com/dlpage/gaoptout
Stripe (via Acuity Scheduling)
Stripe’s fraud prevention cookies may be loaded as part of the Acuity Scheduling embed. We do not process payment data directly. See Stripe’s privacy policy at: stripe.com/gb/privacy
Website Hosting Provider
Our website is hosted by Ionos on servers located in the United Kingdom.The hosting platform does not independently access or process visitor personal data. The server is built on a a Linux architecture running Ubuntu on a WordPress Platform.
7. International Data Transfers
Some of our third-party service providers are based outside the United Kingdom. Where your personal data is transferred internationally, we ensure appropriate safeguards are in place:
- Acuity Scheduling / Squarespace, US-based; transfers made under Standard Contractual Clauses
- Google Analytics / Google LLC, US-based; transfers made under Standard Contractual Clauses
You can request further information about the specific transfer mechanisms in place by contacting us using the details in Section 10.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy. Specifically:
- Booking records (name, email, phone number) are retained for 12 months following your visit, after which they are deleted from the Acuity Scheduling system
- Follow-up survey responses are retained for 12 months and then deleted
- Website analytics data (Google Analytics) is retained for 26 months in line with Google’s default retention settings
9. Data Security
We take the security of your personal data seriously. Security measures include:
- Booking data is stored within Acuity Scheduling’s secure infrastructure and is only accessible to authorised personnel
- Our website uses HTTPS encryption to protect data in transit
- Access to booking records is restricted to the business owner
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected individuals without undue delay.
10. Your Rights Under UK GDPR
Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access: to request a copy of the personal data we hold about you
- Right to rectification: to request correction of inaccurate or incomplete data
- Right to erasure: to request deletion of your data where there is no legitimate reason for us to continue processing it
- Right to restrict processing: to request that we limit how we use your data
- Right to object: to object to processing based on legitimate interests
- Right to data portability: to receive your data in a structured, machine-readable format where processing is based on consent or contract
- Right to withdraw consent: where we rely on consent as our lawful basis (e.g. analytics cookies), you may withdraw consent at any time without affecting the lawfulness of prior processing
- Right not to be subject to automated decision-making: we confirm that we do not use automated decision-making or profiling
To exercise any of these rights, please contact us at the details in Section 11. We will respond within one calendar month of receiving your request.
If you are not satisfied with our response, or believe we are processing your data unlawfully, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
- Website: www.ico.org.uk
- Telephone: 0303 123 1113
We would appreciate the opportunity to address your concern before you contact the ICO, so please contact us in the first instance.
11. Cookies
Our website uses cookies. For full details of the cookies we use, the purposes they serve, and how to manage your preferences, please see our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
- Business: Marton Meadow
- Address: Pasture House Farm, Skipton, North Yorkshire, BD23 3UJ
- Email: martonmeadow@gmail.com