Bed and Breakfast Data Protection Policy Generator

Willowmere House is a business and a home. Guests eat breakfast at the same table where the proprietor's family dines. They share a hallway, a garden, and sometimes a bathroom. That intimacy means the proprietor naturally learns guests' dietary requirements, travel reasons, daily routines, and personal preferences through direct observation and conversation. All of it is personal data. This policy governs how Willowmere handles both formally collected records and the personal knowledge inherent in small-scale hospitality.

The proprietor, employed or casual housekeeping staff, breakfast service staff handling dietary information, booking administrators, and third-party maintenance contractors or tour guides receiving guest information are all covered.

Guests provide names, contact details, home addresses, passport or ID information where legally required, dietary requirements, accessibility needs, payment details, and booking platform profile data. Booking platform intermediaries share account manager contacts. Employees have payroll records, right-to-work documentation, and DBS checks on file. Suppliers share contact and payment details.

Willowmere House complies with data protection legislation alongside any guest registration requirements imposed by local tourism or law enforcement regulations. Some jurisdictions require accommodation providers to maintain guest registers with names, nationalities, and passport details. Willowmere distinguishes between data collected for statutory registration and data collected for commercial purposes, ensuring transparency about each processing purpose.

Willowmere is the data controller. Online travel agency platforms, booking management software, payment gateways, and review management services operate under data processing agreements addressing guest data sharing, retention, and restrictions on using platform-sourced data for direct marketing.

A Record of Processing Activities documents booking inquiry through guest stay, checkout, and post-stay communications. Impact assessments precede CCTV in common areas, guest Wi-Fi with login tracking, smart room controls logging usage, or guest data integration across booking platforms. Staff training covers the personal nature of the B&B environment, treating observed guest preferences and conversations as confidential personal data, appropriate handling of passports, and secure storage of dietary and accessibility information.