PRIVACY & COOKIES

Castlehill Aparthotel Privacy & Cookies Policy

Last updated: August 2026

Castlehill Aparthotel is committed to protecting your privacy and handling your personal information responsibly, transparently and securely.

This Privacy & Cookies Policy explains how we collect, use, store and share personal information when you visit our website, make a reservation, communicate with us or stay at Castlehill Aparthotel.

For the purposes of applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is:

Castlehill Group Limited
Trading as Castlehill Aparthotel
2 Castlehill
Campbeltown
Argyll
Scotland

Email: hello@castlehillaparthotel.com


1. Information We Collect

We may collect personal information when you visit our website, make or manage a reservation, contact us, use our digital guest services or stay at Castlehill Aparthotel.

This may include:

  • Your name and contact details, including email address and telephone number 
  • Billing and payment information 
  • Reservation details, including arrival and departure dates, suite selection and number of guests 
  • Information you choose to provide about preferences or requirements relating to your stay 
  • Communications between you and Castlehill Aparthotel 
  • Information relating to additional services or experiences you request 
  • Technical information associated with your use of our website, such as IP address, browser, device and website usage information 
  • Information collected through cookies and similar technologies 

Where you choose to provide information concerning accessibility requirements or other information that may constitute sensitive personal data, we will use that information only where necessary to assist with your requirements and in accordance with applicable data protection legislation.


2. How We Collect Your Information

We may receive information directly from you when you:

  • Make a reservation through our website or booking engine 
  • Make a reservation through an approved third-party booking partner 
  • Contact us by email, telephone or digital messaging 
  • Complete online check-in or other pre-arrival information 
  • Request additional services 
  • Subscribe to marketing communications 
  • Use our website or digital guest services 

We may also receive information from booking partners and technology providers involved in administering your reservation.


3. How We Use Your Information

We use personal information where necessary to operate Castlehill Aparthotel and provide our services.

This may include:

  • Processing and managing reservations 
  • Processing payments 
  • Providing booking confirmations and pre-arrival information 
  • Facilitating digital check-in and secure property access 
  • Communicating access codes and arrival instructions 
  • Responding to enquiries and guest requests 
  • Providing services requested during your stay 
  • Managing cancellations, amendments and refunds 
  • Maintaining the security of our property, systems and guests 
  • Maintaining appropriate financial and business records 
  • Improving our website, services and guest experience 
  • Understanding how visitors use our website 
  • Sending marketing communications where permitted 
  • Meeting our legal and regulatory obligations 


4. Our Legal Basis for Processing Your Information

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending upon the circumstances, we may process information because:


Contract: it is necessary to process your information to make or administer your reservation and provide accommodation or other services you have requested.


Legal obligation: we are required to process or retain certain information to comply with legal, taxation, accounting or regulatory requirements.


Legitimate interests: processing is reasonably necessary for operating and improving Castlehill Aparthotel, protecting our business and guests, preventing misuse and providing effective customer service, provided those interests do not override your rights.


Consent: where required, we will ask for your consent, for example for certain marketing communications or non-essential cookies. You may withdraw consent at any time.


5. Reservations and Payments

Our website, booking engine and property management services are provided using Cloudbeds technology.

When you make a reservation, information required to administer your booking may be processed through Cloudbeds and relevant payment-processing providers.

Payment card information is processed through appropriate payment systems and providers. Castlehill Aparthotel does not intentionally retain complete payment card details independently of the secure systems used to process reservations and payments.


6. Digital Guest Services

Castlehill Aparthotel operates a digital-first guest experience.

We may use your contact and reservation information to provide essential communications relating to your stay, including booking confirmations, online check-in information, arrival instructions, secure access information, operational updates and responses to guest enquiries.

These communications form part of providing your accommodation and are separate from marketing communications.


7. Marketing

Where permitted by law, we may use your contact information to communicate news, offers or information about Castlehill Aparthotel.

Where consent is required, marketing communications will only be sent where you have chosen to receive them.

You can unsubscribe from electronic marketing communications at any time using the unsubscribe facility contained within the communication or by contacting us.

Opting out of marketing will not prevent us from sending essential communications relating to an existing reservation or stay.


8. Sharing Your Information

We do not sell your personal information.

We may share information where necessary with trusted organisations that help us provide our services, including:

  • Property management and booking technology providers 
  • Payment processors 
  • Approved booking and distribution partners 
  • Guest communication and digital experience providers 
  • Website hosting and technology providers 
  • Analytics providers 
  • Professional advisers and service providers 
  • Government, regulatory, law-enforcement or other authorities where legally required 

Service providers are expected to process personal information only for appropriate purposes and in accordance with applicable data-protection requirements.


9. International Data Transfers

Some of the technology and service providers we use may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we expect appropriate safeguards to be used in accordance with UK data protection legislation, such as recognised adequacy arrangements or approved contractual safeguards.


10. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, accounting, taxation and regulatory obligations.

Different types of information may therefore be retained for different periods.

When information is no longer required, it will be securely deleted, anonymised or otherwise disposed of in accordance with our data-retention practices.


11. Your Data Protection Rights

Depending upon the circumstances, UK data protection law provides you with rights including the right to:

  • Request access to personal information we hold about you 
  • Ask us to correct inaccurate or incomplete information 
  • Request deletion of your personal information in certain circumstances 
  • Request restriction of processing 
  • Object to certain types of processing 
  • Request transfer of information in an appropriate machine-readable format where applicable 
  • Withdraw consent where processing relies upon consent 

These rights are subject to certain legal exemptions.

To exercise your rights, please contact us at hello@castlehillaparthotel.com.

You also have the right to raise a complaint with the Information Commissioner's Office (ICO) if you are concerned about how your personal information has been handled.


12. Security

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

We also use specialist technology providers to deliver elements of our website, reservation, payment and digital guest experience securely.

No internet-based system can be guaranteed to be completely secure, but we continually seek to use appropriate measures and reputable technology partners to protect guest information.


Cookie Policy

13. What Are Cookies?

Cookies are small data files placed on your computer, smartphone or other device when you visit a website.

They help websites operate correctly, remember preferences and provide information about how visitors use a website.14. Cookies We May Use

Our website may use several types of cookies:

Essential cookies are necessary for the website, booking functionality and associated services to operate correctly.

Functional cookies may remember preferences and improve the functionality of the website.

Analytics cookies help us understand how visitors use the website, which pages they visit and how the website performs.

Third-party cookies may be used by technology providers whose services are incorporated into the website


15. Google Analytics

We may use Google Analytics to help us understand how visitors interact with our website.

Google Analytics may collect information such as pages visited, approximate location derived from technical information, device and browser information, referral source and interaction with the website.

This information helps us understand website performance and improve the experience for future visitors.

Where required, analytics cookies will only be activated in accordance with the choices made through our cookie-consent mechanism.


16. Managing Your Cookie Preferences

Where available, you can manage non-essential cookies through the cookie controls provided on our website.

You can also control or delete cookies through your web browser settings. Disabling certain cookies may affect the operation or functionality of parts of the website.


17. Third-Party Websites and Services

Our website may contain links to external websites and services, including booking partners, local businesses, attractions and other third-party services.

Those organisations operate their own websites and privacy practices. Castlehill Aparthotel is not responsible for the privacy practices or content of third-party websites, and we encourage you to review their privacy information where appropriate.


18. Changes to This Policy

We may update this Privacy & Cookies Policy periodically to reflect changes to our services, technology or legal requirements.

The latest version will be published on this website together with the date it was last updated.


19. Contact Us

If you have questions about this Privacy & Cookies Policy, wish to exercise your data-protection rights or require assistance regarding how your information is handled, please contact:


Castlehill Group Limited
Trading as Castlehill Aparthotel
2 Castlehill
Campbeltown
Argyll
Scotland

Email: hello@castlehillaparthotel.com