Privacy Policy

Effective Date: January 2024

This Privacy Policy outlines how BM Property Group ("we", "us", or "our") collects, uses, and protects any personal data you provide when using our services or visiting our website.

We are committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, you can be assured that it will only be used in accordance with this privacy statement and in line with UK data protection laws.

Who We Are

BM Property Group Ltd is a provider of short-term holiday accommodation in the United Kingdom. Our registered office is at:

Windrush View, Lansdowne, Bourton on the Water, GL54 2AR
Email: marcus@bmpropertygroup.co.uk

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

We may collect and process the following categories of personal data:

Personal Information

  • Full name

  • Contact details (email address, phone number, postal address)

  • Payment details (processed securely via third-party payment providers)

  • Booking information (dates, property booked, number of guests)

Identity Verification (If Applicable)

  • Copy of ID or passport

  • Proof of address

Technical Data

  • IP address

  • Browser type and version

  • Operating system

  • Device information

  • Cookies and usage data (see Section 7)

How We Collect Your Data

We collect your data when you:

  • Make a booking through our website, by phone, or via third-party platforms (e.g., Airbnb, Booking.com)

  • Fill in a contact or enquiry form

  • Communicate with us via email, phone or social media

  • Subscribe to our newsletter (if applicable)

  • Browse our website (via cookies and analytics)


Why We Collect Your Data

We collect and use your personal data for the following purposes:

  • To manage bookings and provide our accommodation services

  • To communicate with you about your reservation

  • To comply with legal obligations (e.g. guest registration)

  • To improve our services and website

  • For marketing purposes (with your consent)

  • To handle complaints, disputes, or legal claims

Legal Basis for Processing

We rely on the following lawful bases for processing your personal data:

  • Contract – Processing is necessary for a booking or other agreement with you

  • Legal Obligation – We may be legally required to process certain data (e.g. for tax or guest registration purposes)

  • Consent – Where you have given us clear permission (e.g. to receive marketing)

  • Legitimate Interests – To improve our services or ensure security (provided this does not override your rights)

How We Share Your Data

We do not sell or rent your data to third parties. We may share your data with:

  • Trusted third-party service providers (e.g. payment processors, booking platforms, IT services)

  • Regulatory bodies or authorities where required by law

  • Maintenance, housekeeping, or property management personnel (where necessary for your stay)

All third parties are required to respect the confidentiality and security of your personal data and process it only in accordance with our instructions.

Cookies and Website Analytics

We use cookies and similar technologies to:

  • Improve website functionality and user experience

  • Monitor traffic and usage via analytics tools (e.g. Google Analytics)

You can manage your cookie preferences through your browser settings.

Data retention

We retain personal data only for as long as necessary:

  • For the purposes it was collected for

  • To meet legal, tax, or accounting requirements

  • To resolve any disputes

Typically, booking-related data is retained for 6 years in line with HMRC guidance

Your Rights

You have the following rights under the UK GDPR:

  • Right to access your personal data

  • Right to rectification (correct inaccurate data)

  • Right to erasure (in certain circumstances)

  • Right to restrict processing

  • Right to object to processing

  • Right to data portability

  • Right to withdraw consent (where processing is based on consent)

  • Right to lodge a complaint with the Information Commissioner’s Office (ICO)

Updates to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, and where appropriate, we will notify you of significant changes.