Privacy policy.

Edinburgh Festival Rooms (“EFR”, “we”) is the data controller for personal data collected via edinburghfestivalrooms.com. This notice explains what we collect, why, and how long we keep it.

What we collect

• Email addresses you give us — newsletter signups and operator enquiries.
• Operator enquiry details — name, property count, anything you write in our list-your-property form.
• Server logs — IP address, user agent, requested URL. Used to detect abuse and diagnose errors. Retained for 30 days.
• Strictly necessary cookies — authentication for admin users, CSRF protection for forms. See our cookie page.

What we don’t do

• We don’t run third-party advertising trackers.
• We don’t sell your data to anyone.
• We don’t set non-essential cookies.

Why we collect it

Email addresses are processed on the basis of your consent (newsletter) or our legitimate interest in following up on a sales enquiry (operator leads). Server logs are processed on the basis of legitimate interest in keeping the site running.

How long we keep it

• Newsletter subscriptions: until you unsubscribe.
• Operator leads: 24 months after last contact.
• Server logs: 30 days.

Who we share it with

Our email service provider (for newsletter sends) and Azure (for hosting). Both process data on our behalf under appropriate data-processing agreements and within the UK / EU. We do not share data with anyone else unless legally required to.

Your rights

Under UK GDPR you can ask us for a copy of any personal data we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we’ll come back within 30 days. If you’re unhappy with how we’ve handled your request you can complain to the Information Commissioner’s Office.