Andrew Brownsword Hotels ‘ABH’ (referred to as “we”, “our” or “us”) is committed to protecting your personal data in accordance with applicable UK data protection law; The UK GDPR, Data Protection Act 2018, Privacy and Electronic Communications Regulations 2003 (‘PECR’) and the Data (Use and Access) Act 2025. This also includes (and is not limited to) other applicable laws such as the EU GDPR and e-Privacy Directive.
This privacy notice has been designed with an individual’s (‘data subjects’) right to be informed on how we collect and process personal data, how we use it, secure it and what rights individuals have.
This privacy notice also applies to other hotels that form part of our group:
Each hotel group member is a data controller and for certain activities such as reservations and bookings, each will act as a joint-data controller with ABH head office based in Bath.
We are registered with the Information Commissioner’s Office (ICO) under registration numbers:
Head Office:
4 Queens Square
Bath, Somerset
BA1 2HA
United Kingdom
Email: info@brownswordhotels.co.uk
Tel: +44(0)1225 320470
Contact information for each individual hotel can be found on their respective website.
Data Protection Officer (DPO):
RA Data Protection Ltd
Email: ravi@radataprotection.com
Website: https://radataprotection.com
The lawful basis for which we will process personal data includes:
We may also process special category personal data where required (e.g., health information for dietary purposes).
We may process personal data of the following individuals (“data subjects”):
We do not rent or sell personal data. We may share data with contracted third parties, such as:
We may also share data with law enforcement or regulatory bodies where legally required.
Bookings may be made directly or via third parties (e.g., Booking.com). We only share availability information externally.
Our systems may contain personal data including:
We do not market to children. For family bookings we only ask for the number and ages of children for room suitability and pricing. We do not collect children’s names.
Some activities such as reservations, HR and finance activities are processed jointly across the hotel group with appropriate agreements in place.
We use CCTV to prevent/detect crime, ensure health and safety and defend legal claims. CCTV signage is displayed across our properties.
Calls may be recorded for training and monitoring and deleted after the retention period.
We advertise roles on our websites and external platforms. Recruitment processing details are available in our recruitment privacy notice.
Marketing is only sent where consent is captured. We also use social media for communication and promotion. Interactions may make your profile publicly visible depending on your privacy settings.
Where required, data may be transferred outside the UK under appropriate safeguards and lawful mechanisms.
For details on cookies used on this website, please refer to our cookie notice.
We are not responsible for external websites linked from this site. Please check their privacy notices.
Personal data is retained as long as necessary to fulfil legal, contractual or legitimate interest requirements. After this, data is deleted or anonymised.
We implement appropriate technical and organisational measures to protect personal data from loss, unauthorised access or alteration.
We use accredited third-party payment providers for secure payment processing.
Requests may require ID verification. Where needed, we may extend the response time and will notify you accordingly.
If you have concerns, please contact us. You may also complain to the ICO at: https://ico.org.uk/make-a-complaint/
We will review this notice and make changes to it from time to time. We recommend that you check this notice to see where changes have been made and to ensure you are able to review updated information at all times.