Privacy Notice
Last updated: 9 September 2026
This Privacy Notice explains how Peter and Denise Matthews, trading as The Courtyard, collect and use personal information.
1. Who we are
Peter and Denise Matthews, trading as The Courtyard, are responsible for the personal information described in this notice.
Correspondence address:
The Courtyard
167–169 Great Portland Street
Fifth Floor
London
W1W 5PF
Email: peter.matthews@mac.com
The accommodation is located in Aston Clinton, Buckinghamshire. The full property address is provided as part of the booking process and is not published on the website for privacy and security reasons.
2. Information we collect
Depending on your enquiry or booking, we may collect:
- Your name;
- Email address;
- Telephone number;
- Company name;
- Arrival and departure dates;
- Number and names of guests;
- Payment and transaction information;
- Booking correspondence;
- Vehicle details where operationally necessary;
- Information about reasonable adjustments or access requirements that you choose to provide;
- Details of damage, incidents, complaints or insurance matters; and
- Technical website information collected through cookies and similar technologies.
Card payments are processed through our payment provider. We do not receive or store your complete card details.
Please do not provide medical information unless it is necessary for us to understand and support an access or safety requirement.
3. How we use your information
We use personal information to:
- Respond to enquiries;
- Check availability;
- Prepare quotations;
- Administer and confirm bookings;
- Take and record payments;
- Communicate arrival information;
- Provide and manage the accommodation;
- Make reasonable adjustments;
- Protect guests, the property and our legal rights;
- Handle damage, complaints, insurance claims or disputes;
- Maintain financial and tax records;
- Prevent or investigate fraud, misuse or illegal activity; and
- Comply with legal and regulatory requirements.
We do not sell personal information.
4. Our lawful bases
We generally process personal information because:
- It is necessary to take steps at your request before entering into a contract;
- It is necessary to perform our contract with you;
- We must comply with legal obligations; or
- It is necessary for our legitimate interests in operating, securing and protecting the accommodation, provided those interests do not override your rights.
If you voluntarily provide sensitive information concerning health or accessibility, we will use only what is reasonably necessary to support your requirements. Where required, we will seek your explicit consent or rely upon another lawful condition permitted by data-protection law.
We will not use booking information for unrelated email marketing without an appropriate lawful basis and compliance with electronic-marketing rules.
5. Who receives your information
Where necessary, information may be shared with:
- Wix, which hosts the website and enquiry form;
- Our email and communications providers;
- Stripe or another secure payment provider;
- Our bank;
- Accountants and professional advisers;
- Insurers;
- IT and website-support providers;
- Emergency services, law-enforcement bodies or regulatory authorities where necessary; and
- Other parties where disclosure is legally required or needed to establish, exercise or defend legal claims.
These organisations receive only the information reasonably necessary for their role.
6. International processing
Some technology providers may process information outside the United Kingdom.
Where this occurs, we rely on the provider’s contractual and legal safeguards intended to protect personal information in accordance with UK data-protection requirements.
7. How long we retain information
We retain information only for as long as reasonably necessary.
Our general retention periods are:
- Unsuccessful enquiries: up to 12 months after the last communication;
- Booking, payment and accounting records: up to six years after the relevant financial year;
- Routine guest and access information not required for accounting: normally deleted within 12 months after the stay;
- Sensitive accessibility information: normally deleted within 30 days after departure unless it is required in connection with an incident, complaint or legal obligation;
- Complaints, damage and insurance records: for as long as reasonably necessary to resolve and document the matter.
Information may be retained for longer where required by law or where a dispute or legal claim is ongoing.
8. Security
We take reasonable organisational and technical measures to protect personal information from loss, misuse, unauthorised access, alteration or disclosure.
Access is limited to people and service providers who reasonably need the information.
9. Your rights
Depending on the circumstances, you may have the right to:
- Ask for access to your personal information;
- Ask us to correct inaccurate information;
- Ask us to delete information;
- Restrict or object to certain processing;
- Receive certain information in a portable format; and
- Withdraw consent where consent is the basis used.
These rights are not absolute and may be subject to legal exceptions.
To exercise a right, contact peter.matthews@mac.com.
10. Complaints
Please contact us first if you have a concern about how your information is being used.
You also have the right to complain to the Information Commissioner’s Office:
Website: ico.org.uk
Telephone: 0303 123 1113
11. Cookies
Our website uses essential cookies needed for its operation.
Analytics, advertising or other non-essential cookies will only be used in accordance with applicable consent requirements. More information is provided in our Cookie Notice and through the website’s cookie controls.
12. Changes to this notice
We may update this Privacy Notice when our services, suppliers or legal obligations change. The latest version and revision date will be published on this website.