Privacy Policy

Last updated: 21st July 2026

This Privacy Policy explains how Glen Dessary ("we", "us", "our") collects, uses and protects your personal data when you use our website
glen-dessary.com.

1. Who we are

Glen Dessary is the data controller for the personal data collected through this website.

Contact details
Name: Glen Dessary Estate
Address: Glen Dessary, Spean Bridge, Inverness-shire, PH34 4EL
Email: enquiries@glen-dessary.com
Telephone: 07774 932216

2. Personal data we collect

We collect and process the following types of personal data.

2.1 Information you provide to us

  • Enquiry form details When you contact us using our enquiry form or by email, we collect your name, email address, and any other information you choose to include in your message (for example, phone number, dates of stay, details of your enquiry).
  • Quote builder details If you use the “Create Your Stay” tool on our pricing page, we also receive the arrival and departure dates, number of guests and any activities you selected, together with the indicative estimate shown on screen, so that we can prepare an accurate quote for you.
  • Consent record When you tick the consent box on an enquiry form, we record that you consented, the date and time, your IP address, the page you submitted from and the exact wording you agreed to. We keep this so that we can demonstrate we had your permission to contact you, as data protection law requires.

2.2 Information we collect automatically

  • Website usage data (Google Analytics) We use Google Analytics to collect anonymised statistics about how visitors use our website. This includes information such as the pages visited, time spent on pages, the type of device and browser used, and rough location (for example, country or region). This data is collected using cookies and similar technologies.

2.3 Information collected for security

  • Spam protection Our enquiry forms are protected by Cloudflare Turnstile, which checks that submissions come from a real person rather than an automated system. To do this it processes technical information such as your IP address and browser characteristics. Our website is also delivered through Cloudflare, which processes connection data to serve pages and protect the site.

3. How we use your personal data

3.1 Enquiries and bookings

We use the information you provide when you contact us in order to:

  • Respond to your enquiry or request
  • Provide information about availability, pricing and services
  • Make or manage a provisional or confirmed booking where relevant

Legal basis: We rely on your consent, which you give by ticking the box on our enquiry forms, and on taking steps at your request before entering into a contract. You can withdraw your consent at any time by contacting us using the details in section 1. Withdrawing it will not affect anything we did before you withdrew it. We keep a record of your consent on the basis of our legal obligation to be able to demonstrate it.

3.2 Website analytics

We use Google Analytics in order to:

  • Monitor how the website is used
  • Improve the content, layout and performance of the site
  • Understand which pages and content are most useful to visitors

Legal basis: Our lawful basis is our legitimate interests in maintaining and improving our website and services.

4. Cookies and similar technologies

Cookies are small text files stored on your device when you visit a website. We use cookies only for basic site functionality and for Google Analytics.

You can control cookies through your browser settings, including blocking or deleting them. Please note that disabling certain cookies may affect how the site functions.

5. How long we keep your data

  • Enquiry emails We normally retain enquiry correspondence for up to two years, unless we need to keep it longer in case of a dispute or to comply with legal obligations.
  • Consent records We keep the record of your consent for as long as we hold the related enquiry, and normally for up to two years, so that we can show consent was given if we are ever asked to.
  • Analytics data Google Analytics data is retained according to our settings within Google Analytics. These retention periods are set to be no longer than necessary for analysing website performance and usage.

6. Sharing your personal data

We do not sell your personal data and we do not share it with third parties for their own marketing purposes.

We may share your data with:

  • Service providers such as email hosting providers and website hosting, who process data on our behalf and only in accordance with our instructions.
  • Analytics provider Google Analytics, for the purpose of website usage statistics. Analytics cookies are only set if you accept them in our cookie banner.
  • Cloudflare, which delivers our website and provides the Turnstile spam protection on our enquiry forms.
  • Availability calendar Our availability calendar is provided by Rentalbell and is displayed on our contact and pricing pages. Viewing the calendar involves a connection to their service.
  • Authorities where we are required to do so by law, or to protect our legal rights.

7. International transfers

Our website uses services provided by Google, which may process data outside the United Kingdom and the European Economic Area. Where this happens, Google is responsible for ensuring appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or UK authorities.

8. Your rights

Under UK data protection law, you have the following rights in relation to your personal data:

  • The right to access the personal data we hold about you
  • The right to have inaccurate or incomplete data corrected
  • The right to request deletion of your personal data in certain circumstances
  • The right to object to or restrict our processing in certain circumstances
  • The right to data portability in some situations
  • The right to withdraw consent where we rely on consent (we currently rely on legitimate interests as our main legal basis)
  • The right to lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact us using the details above.

9. Complaints

If you are unhappy with how we handle your personal data, please contact us first so that we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator:

Website: www.ico.org.uk

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in how we use personal data, or to comply with legal requirements. The updated version will always be posted on this page with a new "Last updated" date.