Place Hotels
View over Edinburgh — privacy and data protection across Place Hotels

Privacy Policy

How we use the information we collect about you.

Effective 28 May 2026

This policy applies to the placehotels.co.uk website as a whole, including The Place Hotel (placehotels.co.uk/the-place) and The Inn Place (placehotels.co.uk/the-inn). It explains how we use the information we collect about you and the procedures we have in place to safeguard your privacy.

Both hotels are operated by K & S Mir Limited (company number SC541041), trading as The Place Hotel and as The Inn Place. Our registered office is 8 Johns Place, Edinburgh EH6 7EL, United Kingdom. We are the data controller for any personal information we hold about you.

You can contact us at either of our hotels:

1

Information we collect

Information we collect

We may collect information about you through our website, including information you submit (such as through online booking and contact forms), and information collected by web logs (which monitor site traffic and use) or by cookies.

We may also collect information about you by other means, including information you provide over the phone, in person, by email, through our social media platforms and by way of any CCTV systems in operation on our premises.

The information we collect may include special category data under the UK General Data Protection Regulation. For instance, in order to provide the best service possible, we may collect and store information about any disability you have, or about dietary requirements that relate to a medical condition. We only process special category data on the basis of your explicit consent or where it is necessary for a substantial public interest set out in law.

2

How we use your information

How we use your information

We may use information collected about you to:

  • process your bookings and look after you during your stay;
  • ensure that our website is presented to you effectively;
  • analyse how our site and services are used;
  • provide you with information you have requested;
  • send you marketing information about products and services we think you may be interested in;
  • administer and maintain our records;
  • detect and prevent crime; and
  • meet our legal obligations.

We will only collect and process information about you if at least one of the following applies:

  • you have consented to us collecting and processing your information (for example, you have ticked a box to receive email newsletters);
  • we need the information in order to perform our contract with you (for example, we hold your name and contact details to maintain a reservation you have made);
  • we have a legitimate interest to collect and process the information in a way you would reasonably expect as part of running a hotel and which does not significantly impact on your rights (for example, the operation of CCTV to prevent crime on our premises, or contacting you about products and services we think may be of interest); or
  • we are legally required to collect and process the information (for example, where this is necessary to comply with our liquor licence or to register guests visiting from outside the UK).

3

Sharing your information

Sharing your information

We may share information we hold about you with any contractor or supplier we appoint to provide services to us, with any prospective buyer of our business, with our professional advisers, or with other third parties where the law requires or permits us to do so. Otherwise, we will not share your information with third parties unless you authorise us to do so.

The main service providers we use are:

  • Mailchimp (operated by Intuit Inc.) — to deliver our email newsletter when you sign up. Mailchimp processes your email address in the United States.
  • Google — to provide website analytics (Google Analytics 4), advertising and remarketing (Google Ads) and search performance reporting (Google Search Console).
  • CookieYes — to record and manage your cookie consent choices.
  • Vercel — to host this website and serve it to your browser.
  • RMS— our third-party booking engine and payment processor. Bookings made through our website are taken on RMS’s system, and payment card details are entered on RMS’s pages rather than ours. We do not store full payment card details on our website.
  • Our business email provider, used to correspond with you about your booking or enquiry.

4

How long we keep your information

How long we keep your information

We only keep your personal information for as long as we need it for the purposes set out in this policy, or for as long as the law requires. Indicative retention periods are:

  • Booking and stay records — typically 7 years from the end of the tax year in which your stay took place, to meet our obligations under UK tax and accounting law.
  • Marketing list (newsletter) — until you unsubscribe, after which we retain a suppression record so that we do not contact you again.
  • Contact form enquiries — typically up to 24 months from the date of your enquiry, unless it becomes part of a booking record.
  • CCTV footage — typically 30 days, unless retained for longer in connection with an incident or a request from law enforcement.
  • Website analytics — Google Analytics 4 retains user-level data for 14 months from the date of collection.

If you are aware of any inaccuracy in the information we hold about you, please let us know using the contact details above.

5

Your rights

Your rights

Under the UK General Data Protection Regulation, you have the following rights in respect of the personal information we hold about you:

  • Right of access — you can ask us for a copy of the information we hold about you.
  • Right to rectification — you can ask us to correct information that is inaccurate or incomplete.
  • Right to erasure — you can ask us to delete information we hold about you in certain circumstances.
  • Right to restrict processing — you can ask us to stop using your information for particular purposes.
  • Right to data portability — where we hold your information on the basis of your consent or to perform a contract with you, you can ask us to provide it in a structured, commonly used and machine-readable format.
  • Right to object — you can object to our use of your information where we rely on legitimate interests, and you have an absolute right to object to direct marketing at any time.
  • Right to withdraw consent — where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it.
  • Rights in relation to automated decision-making — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any of these rights, please contact us using the details above. We will respond within one month. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.

If you do not provide information we need, or you ask us to stop using your information, that may impact on the services we are able to provide to you.

6

Automated decision-making

Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Bookings, refunds, complaints and any other significant decisions are reviewed by our team.

7

Cookies and similar technologies

Cookies and similar technologies

We use cookies and similar tracking tools on our website for essential functionality, analytics and advertising. The main tools we use are Google Analytics 4, Google Tag Manager and Google Ads (including remarketing).

When you first visit our website, our cookie banner (powered by CookieYes) asks for your consent for non-essential cookies. You can change or withdraw your consent at any time using the cookie preferences icon in the footer of any page.

For full details — including the categories of cookies we use, the third-party services that set them and how to manage them in your browser — please see our Cookie Policy.

8

Security

Security

The internet is not a secure medium, but we maintain industry-standard security measures on our website and systems and review them regularly. Although we will do our best to protect your personal information, we cannot guarantee the security of any information transmitted online or through our website. Transmission of information is at your own risk. We accept no liability if our electronic security is breached despite our reasonable measures.

9

International transfers

International transfers

Some of the service providers we use are based outside the United Kingdom, in particular Google (analytics, advertising and search tools) and Intuit Inc. (which operates Mailchimp). When we transfer your information to these providers, your data may be processed in the United States or other countries outside the UK.

We only make these transfers where one of the safeguards required by UK GDPR is in place, for example:

  • the UK Extension to the EU-US Data Privacy Framework (also known as the UK-US Data Bridge), where the recipient is certified under it; or
  • the UK Information Commissioner’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, supplemented by any additional measures the recipient applies.

We keep transfers outside the UK to the minimum practicable and take steps to ensure that the same level of protection is applied to your information as would be the case if it remained within the UK.

10

Complaints

Complaints

If you have any queries about the manner in which your information is dealt with, please contact us using the details above. If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner’s Office, which you can do by visiting ico.org.uk/concerns.

11

Changes to this policy

Changes to this policy

We reserve the right to amend or replace this privacy policy at any time. Your continued use of our website and services will be considered acceptance of the privacy policy in place at the relevant time.