Holmes Estate Group Ltd (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, store, and protect your information when you visit our website, make a booking, or enter a partnership with us.

1. Information We Collect We may collect and process the following types of personal data: a. Information you provide directly: Name, address, and contact details (email, phone number, etc.) Payment or billing information (processed securely via trusted payment providers) Booking details and preferences Identification documents, where required by law (e.g. for guest verification) b. Information collected automatically: Website analytics data such as IP address, browser type, and visit duration Cookies and similar tracking technologies (see our Cookie Policy for details) c. Partner and landlord information: Property details, bank information (for rental payments), and business correspondence

2. How We Use Your Data We use your personal data to: Process and manage bookings or partnership agreements Communicate with you regarding your stay, enquiry, or property management Manage our business operations and improve our services Ensure compliance with legal and regulatory requirements Send occasional updates, promotions, or newsletters (only if you have opted in) We never sell or rent your data to third parties.

3. Legal Basis for Processing We process your data under one or more of the following legal bases: Contractual necessity – to fulfil our service or partnership agreements Legitimate interests – to operate and improve our business responsibly Legal compliance – to meet obligations under UK law Consent – when you opt in to receive marketing or communications You may withdraw consent at any time by contacting us.

4. Data Sharing and Third Parties We only share data with trusted third parties when necessary for our business operations, such as: Payment processors and booking platforms (e.g., Airbnb, Booking.com) Property maintenance and cleaning teams Legal, accounting, or compliance service providers All third parties are required to handle data securely and in accordance with UK data protection laws.

5. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or to meet legal and regulatory requirements. When data is no longer required, it is securely deleted or anonymized.

6. Data Security We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, or disclosure. This includes secure servers, encryption, limited access controls, and regular policy reviews.

7. Your Rights Under UK data protection law, you have the right to: Access a copy of your personal data we hold Request correction of inaccurate information Request deletion of your data (where legally permissible) Object to certain types of processing or withdraw consent Request data portability (transfer of your data to another provider) To exercise your rights, please contact us using the details below.

8. Cookies Our website uses cookies to enhance functionality, analyse traffic, and personalize your experience. For more information, see our Cookie Policy. 9. Changes to This Policy We may update this policy from time to time to reflect changes in law or our business practices. All updates will be published on this page with a revised “last updated” date. 

If you believe your data has not been handled correctly, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at https://www.ico.org.uk/