Privacy Policy

Last updated: 31 October 2026

Cosy Retreats (a CR17 company) respects your privacy. This policy explains what personal data we collect when you use this website or make an enquiry, and how we protect it, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

Cosy Retreats runs short-stay holiday accommodation in the Maidenhall area, Luton, Bedfordshire. For privacy questions, email cosyretreats@cr17stays.co.uk.

What we collect

Details you send through our enquiry form: your name, email address, phone number (if given), dates of stay, number of guests and your message. Basic technical data when you visit the site, such as browser type, device and pages viewed, collected through cookies (see below).

How we use your data

We use your details only to reply to your enquiry, manage your booking and stay, and meet our legal and accounting obligations. Our lawful bases are taking steps to enter a contract with you, our legitimate interest in running and improving our business, and your consent for optional cookies. We never sell your data.

Who we share it with

Only trusted providers who help us run the business, such as our website and email host (IONOS) and booking platforms like Airbnb, and only as needed. They must keep your data secure.

How long we keep it

Enquiries are kept for up to 12 months. Booking records are kept for up to 6 years for tax and accounting purposes, then deleted.

Cookies

Our website uses essential cookies to make it work, and, only with your consent, analytics cookies to understand how visitors use the site. When you first visit, a banner lets you accept or decline non-essential cookies. You can change your choice at any time by clearing cookies in your browser.

Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its use, to data portability, and to withdraw consent at any time. To use these rights, email cosyretreats@cr17stays.co.uk. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Security

We take sensible technical and organisational measures to keep your data safe.

Changes

We may update this policy from time to time. The latest version will always be on this page.