Privacy Policy

This Privacy Policy explains how Pure Cornwall collects, uses and protects your personal data when you use our website, contact us, make an enquiry or booking, or use The Oracle (our online cottage‑finding assistant).

1. Who we are

Pure Cornwall is a trading name of Cornish Secrets Ltd (registered in England, company number 13296861), whose registered office is Brooklyn, Helscott Road, Marhamchurch, Bude, Cornwall, EX23 0JE. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Cornish Secrets Ltd is the data controller for the personal data described in this policy.

If you have any questions about this policy or your data, contact us at info@purecornwall.co.uk or on 01288 362172.

2. The personal data we collect

We collect personal data that you give us directly, and a limited amount of technical data collected automatically:

• Enquiries & contact form — your name, email address, telephone number (if provided), and the content of your message.
• Property & listing enquiries — your name, email, phone, the dates and party details you give, and your message. For owner‑managed listings, this is shared with the relevant property owner so they can respond to you.
• Availability alerts (“notify me”) — your email address and the dates/property you are interested in.
• Newsletter — your email address, if you choose to subscribe.
• The Oracle (AI assistant) — the messages you send, the cottages you view or shortlist, and any name, email or telephone number you choose to share in the conversation. We store a one‑way hashed (irreversible) version of your IP address with conversation logs for security and abuse‑prevention only.
• Shortlist — the cottages you save, and your email address if you ask us to email your shortlist to you.
• Technical data — basic information such as pages visited and (where you consent to analytics cookies) anonymous usage statistics. See our Cookie Policy.

We do not knowingly collect data from children, and the website is intended for adults booking holidays.

3. How and why we use your data (legal bases)

What we do	Why	Legal basis
Respond to enquiries and manage bookings	To deal with your request and provide the service you asked for	Contract / steps prior to a contract; legitimate interests
Pass listing enquiries to the relevant property owner	So the owner can respond and arrange your stay	Legitimate interests / your request
Operate The Oracle and remember your shortlist	To help you find and shortlist cottages	Legitimate interests; consent where you share contact details
Send availability alerts and newsletters	To send you information you asked for	Consent (you can unsubscribe at any time)
Security, fraud and abuse prevention	To keep the website and our services safe	Legitimate interests
Analytics (only with your consent)	To understand and improve the website	Consent

We do not sell your personal data, and we do not use it for automated decision‑making that produces legal or similarly significant effects about you.

4. The Oracle and AI processing

The Oracle is powered by third‑party AI services. When you chat with The Oracle, the text of your messages is sent to Anthropic (the provider of the underlying language model) so it can generate a reply. To power our natural‑language property and guide search, the words of your search query may also be sent to OpenAI to generate a numerical “embedding”. These providers process the data only to return a result to us and act as our processors / sub‑processors. Please avoid entering sensitive personal information into the chat. We retain conversation logs only for the period set out in section 7.

5. Who we share your data with

We share personal data only as needed to run our business, with the following categories of recipient, each acting under appropriate contractual safeguards:

• Property owners — where you make a listing enquiry, so they can respond to you.
• Third‑party booking providers (affiliate partners) — if you book an affiliate property you will be transferred to their website, and your data is then handled under their privacy policy.
• SuperControl — our booking and availability platform, used to check availability and process bookings for managed lettings.
• Anthropic and OpenAI — AI providers that power The Oracle and search (see section 4).
• Google Analytics — website analytics, loaded only if you accept analytics cookies.
• Mapbox — to display maps and resolve place names you search for.
• Our email, hosting and IT providers — to deliver emails and host the website.

We may also disclose data where required by law, or to establish, exercise or defend legal claims.

6. International transfers

Some of our providers (including Anthropic, OpenAI and Google) are based in, or process data in, the United States or other countries outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as the UK’s International Data Transfer Agreement / Addendum or the UK extension to the EU‑US Data Privacy Framework, so your data continues to be protected.

7. How long we keep your data

• Enquiries and booking records — kept for as long as needed to handle your enquiry/booking and to meet our legal and accounting obligations.
• Oracle conversation logs — automatically deleted after around 180 days.
• Lead and shortlist records — kept for up to around 24 months from your last activity, then deleted, unless you remain in active contact with us.
• Newsletter — until you unsubscribe.

We can also delete your data sooner on request (see section 8).

8. Your rights

Under UK data protection law you have the right to: access a copy of your data; have inaccurate data corrected; have your data erased; restrict or object to certain processing; data portability; and withdraw consent at any time (where we rely on consent). To exercise any of these rights, email info@purecornwall.co.uk. We will respond within one month. There is normally no charge.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk — though we’d appreciate the chance to put things right first.

9. Cookies

We use cookies and similar technologies. Analytics cookies are off by default and only used if you accept them. Full details, including how to change your choices, are in our Cookie Policy.

10. Security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, hashing of IP addresses in our logs, and rate limiting. No internet service can be guaranteed 100% secure, but we work to keep your data safe.

11. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it was last revised. Significant changes will be made clear on this page.

12. Contact

Pure Cornwall (a trading name of Cornish Secrets Ltd)
Brooklyn, Helscott Road, Marhamchurch, Bude, Cornwall, EX23 0JE
Email: info@purecornwall.co.uk
Telephone: 01288 362172