Legal
Privacy Notice
Last updated: 20 August 2026
Who we are
Buckthorns is a self-catering holiday rental in Overstrand, Norfolk, NR27 0PQ.
The data controller for this website is Isabella Hicks, who can be contacted at hello@buckthorns.co.uk or by post at Buckthorns, Overstrand, Norfolk, NR27 0PQ.
Day-to-day enquiries and availability are handled by others on her behalf. Whoever you happen to deal with, your rights are exercised against the controller, and an email to hello@buckthorns.co.uk will always reach the right person.
What we collect, and why
When you send a booking enquiry
Your name, email address, phone number (if you give one), the dates and number of guests you're asking about, and anything you write in the message box.
- Why:
- To answer your enquiry and, if you go on to book, to arrange your stay.
- Lawful basis:
- Taking steps at your request before entering into a contract, and our legitimate interest in running the property.
When you register interest in specific dates
The same details, plus the dates you're watching.
- Why:
- To email you if those dates become available. That is the thing you asked us to do.
- Lawful basis:
- Our legitimate interest in responding to the request you made. This is a service message, not marketing — we do not use it to advertise anything else.
If you tick the marketing box
We record that you ticked it, when, which form it came from, and which version of the wording you were shown.
- Why:
- To email you occasionally about availability, offers and news.
- Lawful basis:
- Your consent. You can withdraw it at any time, and we keep the record so we can show what you agreed to.
We do not use tracking cookies, advertising pixels or website analytics. The only cookie this site sets is a login cookie for our own staff admin page, which is strictly necessary and is never set for visitors.
Who we share it with
We do not sell your data or pass it to anyone for their own marketing. We use these service providers, who process data on our instructions:
| Provider | What for |
|---|---|
| Supabase | Stores enquiries and registrations (database) |
| Resend | Sends our emails |
| Twilio | Sends an SMS alert to the owner when an enquiry arrives |
| Vercel | Hosts the website |
| Calendar, used to manage availability |
Our database is hosted in Ireland. Some of our other providers are based outside the UK; where that is the case, transfers are covered by those providers' standard data protection terms.
The map on our Location page is embedded from Google Maps. If you interact with it, Google may receive data about that; their handling is governed by Google's own privacy policy.
How long we keep it
| Data | Kept for |
|---|---|
| Booking enquiries | 24 months from your enquiry |
| Date registrations | 24 months after the end date you registered for |
| Marketing consent | 36 months, then we ask again or remove you |
| Unsubscribe records | Indefinitely — this is how we make sure we don’t email you again |
If you unsubscribe we keep only enough information to honour that. Deleting it entirely would let a later sign-up add you back by mistake.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. If we rely on your consent, you can withdraw it at any time — either by using the unsubscribe link in any marketing email, or by emailing us.
Withdrawing consent doesn't affect anything we did before you withdrew it.
Email hello@buckthorns.co.ukand we'll respond within one month.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk, or call 0303 123 1113.