Legal
Privacy Policy
Starter text for internal review. Replace bracketed placeholders (for example [like this]) before publication. This page is not legal advice — have counsel review the final version.
1. Introduction and scope
This Privacy Policy describes how The Watermill Club("we", "us") collects and uses personal information when you use our website and related services — for example when you create an account, apply to host, browse listings, make a booking, or manage a Guild motorhome membership.
The operator responsible for processing is identified as [legal entity name and registration number — add], with principal contact details at [registered address — add]. Until those details are published here, you may reach us using the contact channels shown in the site footer (for example hello@thewatermillclub.com) for general enquiries.
2. Categories of information
Depending on how you use the platform, we may process:
- Account and profile data — such as name, email address, and authentication identifiers provided when you sign in or verify your email.
- Booking and membership data — details you submit in connection with reservations, messages to hosts, or Guild subscription billing handled by our payment provider.
- Host application data — information you send when applying to list an experience or host motorhome guests.
- Technical and usage data — such as IP address, device and browser type, and cookies or similar technologies as described in our cookie notice.
We do not ask you to send sensitive categories of data (such as health data) unless a specific feature clearly requires it and you choose to provide it.
3. Purposes and legal bases
We use personal information for purposes such as:
- operating the platform and delivering the services you request;
- processing payments and subscriptions where applicable;
- communicating with you about bookings, membership, and service messages;
- improving security, preventing abuse, and meeting legal obligations;
- where permitted, understanding how the site is used so we can improve it.
Depending on the situation, we rely on the legal bases recognised under applicable law (for example performance of a contract, legitimate interests balanced against your rights, or consent where we ask for it). The precise basis can be documented in a data-mapping table maintained internally and updated as features change.
5. International transfers
Some of our processors may process data outside the European Economic Area. Where that occurs, we aim to use mechanisms recognised under EU/UK data protection law (such as Standard Contractual Clauses) as appropriate to the services in use. [List sub-processors and transfer mechanisms — add when finalised.]
6. Retention
We keep information only as long as needed for the purposes above, including legal, accounting, and dispute-resolution requirements. Retention periods should be documented in an internal schedule and reflected here in summary once confirmed.
7. Your rights
If you are in the EEA, UK, or Switzerland, you may have rights including access, rectification, erasure, restriction, objection, and data portability, and the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the details in the footer. We may need to verify your identity before responding.
8. Security
We apply technical and organisational measures appropriate to the nature of the data we process. No online service can guarantee absolute security; you should use a strong password and protect your account credentials.
9. Children
The platform is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have, please contact us so we can delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the bottom will change when we do; material changes may be communicated by email or a notice on the site where appropriate.
Last updated: [date — add on publication]