Privacy Policy

Privacy Policy of The Lion Hotel (Criccieth) Ltd

Policy Statement

  • We take your privacy seriously and this policy (Privacy Policy) sets out how we will handle your personal data securely and in accordance with your rights.
  • Lion Hotel Criccieth Ltd are registered data controllers under the terms of the General Data Protection Regulation (GDPR). Details of our notifications to the data protection regulator may be found in the Information Commissioner’s Office Public Register of Data Controllers at we are registered under registration number ZA232047
  • Our registered office address is at Lion Hotel, Y Maes, Criccieth, Gwynedd, LL52 0AA

Our Data Protection Officer is: Jordan Burnett

General Information

    • This Privacy Policy explains what information we collect about you when you visit our site and/or when you make a reservation with us and how we handle your information to ensure that we protect your rights. Please read this Privacy Policy carefully to understand how we will treat your personal data. In this Privacy Policy, references to you or your shall mean you as a user of our site and/or as a user of our accommodation services.
    • This Privacy Policy should be read together with our terms and conditions:
    • By using our site and/or using our services, you will be regarded as having accepted the terms of this Privacy Policy. Please do not use our site and/or our services if you do not agree to the terms of this Privacy Policy.

What information do we collect?

  • The personal information we collect may include:-
  • name, email address, home and/or business address, phone number;
  • bank account and payment card information;
  • booking history;
  • transactional data including details about payments to and from you and other details of products and services you have purchased from us;
  • information relating to your use of our services, such as room preferences, special requests, feedback and survey responses;
  • marketing preferences.
  • When you visit our site we may also collect information on an ongoing basis through Google Analytics about what pages you access or visit, and information about your use of our site, for example the pages viewed, the website from which you came to visit our site, changes you make to information you provided to us and your transactions including by use of cookies.

How is our customers’ personal data collected?

  • We will collect this data from you when you provide it to us by phone, email, post, through our website or in person.

Legal basis for processing our customers’ information 

We will only use your personal information as the law permits. By law we are required to tell you the legal bases upon which we rely in processing your personal information. The legal bases we principally rely upon are these:-

  • it is necessary for the performance of a contract between us for the provision of services or in order to take steps at your request prior to entering into such a contract; and/or;
  • it is necessary for the purposes of the legitimate interests of pursuing and developing our business, where such interests are not overridden by your rights or interests.

Occasionally we may also rely upon the following legal bases for processing:-

(i) you have given your consent to the processing; and/or

(ii) it is necessary for us to comply with a legal obligation on us; and/or

(iii) it is necessary to protect your vital interests or those of another individual.

Where we rely on consent to process your personal information, you may withdraw that consent at any time by contacting us via email 

What do we use your information for?

We may use your information for the following purposes:

  • to fulfil your bookings and/or to provide services or facilities you request from us;
  • to collect payment from you
  • to administer and manage our relationship with you, which may include asking you to complete surveys or feedback forms;
  • where you have made a reservation with us, to send you information before your visit to confirm the reservation and to provide you with other information relating to your reservation which we think you may find of interest;
  • to allow us to analyse your personal preferences and personalise our services to you;
  • to store your data to pre-populate fields to make it easier for you to provide information when you return to our sites;
  • to send you marketing and promotional material where we think this may be of interest to you (unless you have objected to receiving this by contacting us using the contact details set out under “HOW TO CONTACT US” below or by emailing
  • in pursuit of our legitimate interests, to record CCTV footage to ensure the safety and security of our premises, staff and customers;
  • where required by law;
  • where necessary to protect your health or well-being or that of another individual.

The provision of certain personal information is mandatory if you are to use our services. If you fail to provide such data we shall be unable to provide our services.

Who do we share your information with?

    • As part of using our services, you consent to us sharing your personal information with the following parties:
      • our agents, other service providers and third party partners, who process and store data on our behalf;
      • professional advisors;
      • law enforcement agencies;
      • We may also share your personal information with third parties:in the event that we, our business, or substantially all of its assets are acquired by a third party (in which case personal information about customers will be one of the transferred assets);
      • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply any contract with you; or to protect our rights, property, or safety of our employees, customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
      • We may transfer your personal data outside of the European Economic Area (EEA). We shall ensure that any such transfers are lawful and that your information is kept secure in accordance with the GDPR.

How long do we store your personal data for?

    • We only store your personal information for as long as necessary for the purposes listed in paragraph

What are your rights?

    • Access to your personal data: You may request access to a copy of your personal data.
    • Right to withdraw: Where you have given your consent for us to use your personal data, you may withdraw your consent at any time. Please contact us using the details located at section 13 of this policy if you would like to withdraw your consent and we will delete your data in line with your right to erasure at 7.4 below.
    • Rectification: You may ask us to rectify inaccurate information held about you. If you would like to update the data we hold about you, please contact us using the details below and provide the updated information.
    • Erasure: You may ask us to delete your personal data. If you would like us to delete the personal data we hold about you, please contact us using the details below, specifying why you would like us to delete your personal data.
    • Portability: You may ask us to provide you with the personal information that we hold about you in a structured, commonly used, machine readable form, or ask for us to send such personal data to another data controller.
    • Right to object: You may object to our processing of your personal data pursuant to this Privacy Policy. Please contact us using the details below, providing details of your objection.
    • Make a complaint: You may make a complaint about our data processing activities to a supervisory authority, for the UK this is the Information Commissioner’s Office, at
    • To make enquires and/or to exercise any of your rights in this Privacy Policy please contact our customer service team at

Cookies policy

    • Cookies are small files saved to your computer’s hard drive that track, save and store information as well as your interactions and usage of our website. The primary purpose for collection of data from users to our site is to allow us to provide a smooth efficient and personalised experience while using our site. Where applicable this website uses a cookie control system allowing you on your first visit to the website to allow or disallow the use of cookies on your computer/device.
    • You are advised that if you do not consent to the use and saving of cookies from this website on to your computer hard drive then you should take necessary steps within your web browser security settings to block all cookies from this website and its external serving vendors.
    • Our website uses cookies software provided by Google Analytics to monitor visitor usage to better understand how the website is used. The software will save a cookie to your computer hard drive in order to track and monitor your engagement and usage of our website, but will not store, save or collect personal information. If you would like to read Google’s privacy policy please see here: Google privacy policy.
    • Other cookies may be stored on your computer hard drive by external vendors when this website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. It should be noted that no personal information is stored, saved or collected.

Security and Data Storage

We will treat all of your information in strict confidence and we will endeavour to take all reasonable steps to keep your personal information secure once it has been transferred to our systems.  We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information, and data stored on the website and associated database.

Please note that the internet is not a secure medium and we cannot guarantee the security of any data you disclose online. You accept the inherent security risks of providing information and dealing online over the Internet and will not hold us liable for any data breach.

Changes to this Privacy Policy

    • We may modify this Privacy Policy from time to time, so please review it regularly.
    • If we change this Privacy Policy we shall notify you by means of notice on our site homepage.
    • This Privacy Policy was last amended on 24th May 2018.

How to Contact us

If you have any queries relating to this Privacy Policy or our use of your personal data, please contact our Data Protection Officer OR our customer services team at