
Privacy Policy
How we use the information we collect about you.
Effective 28 May 2026
This policy applies to the placehotels.co.uk website as a whole, including The Place Hotel (placehotels.co.uk/the-place) and The Inn Place (placehotels.co.uk/the-inn). It explains how we use the information we collect about you and the procedures we have in place to safeguard your privacy.
Both hotels are operated by K & S Mir Limited (company number SC541041), trading as The Place Hotel and as The Inn Place. Our registered office is 8 Johns Place, Edinburgh EH6 7EL, United Kingdom. We are the data controller for any personal information we hold about you.
You can contact us at either of our hotels:
- The Place Hotel, 34-38 York Place, Edinburgh EH1 3HU — frontdesk@yorkplace-edinburgh.co.uk / 0131 556 7575
- The Inn Place, 20-30 Cockburn Street, Edinburgh EH1 1NY — frontdesk@theinnplaceedinburgh.co.uk / 0131 526 3780
1
Information we collect
Information we collect
We may collect information about you through our website, including information you submit (such as through online booking and contact forms), and information collected by web logs (which monitor site traffic and use) or by cookies.
We may also collect information about you by other means, including information you provide over the phone, in person, by email, through our social media platforms and by way of any CCTV systems in operation on our premises.
The information we collect may include special category data under the UK General Data Protection Regulation. For instance, in order to provide the best service possible, we may collect and store information about any disability you have, or about dietary requirements that relate to a medical condition. We only process special category data on the basis of your explicit consent or where it is necessary for a substantial public interest set out in law.
2
How we use your information
How we use your information
We may use information collected about you to:
- process your bookings and look after you during your stay;
- ensure that our website is presented to you effectively;
- analyse how our site and services are used;
- provide you with information you have requested;
- send you marketing information about products and services we think you may be interested in;
- administer and maintain our records;
- detect and prevent crime; and
- meet our legal obligations.
We will only collect and process information about you if at least one of the following applies:
- you have consented to us collecting and processing your information (for example, you have ticked a box to receive email newsletters);
- we need the information in order to perform our contract with you (for example, we hold your name and contact details to maintain a reservation you have made);
- we have a legitimate interest to collect and process the information in a way you would reasonably expect as part of running a hotel and which does not significantly impact on your rights (for example, the operation of CCTV to prevent crime on our premises, or contacting you about products and services we think may be of interest); or
- we are legally required to collect and process the information (for example, where this is necessary to comply with our liquor licence or to register guests visiting from outside the UK).
4
How long we keep your information
How long we keep your information
We only keep your personal information for as long as we need it for the purposes set out in this policy, or for as long as the law requires. Indicative retention periods are:
- Booking and stay records — typically 7 years from the end of the tax year in which your stay took place, to meet our obligations under UK tax and accounting law.
- Marketing list (newsletter) — until you unsubscribe, after which we retain a suppression record so that we do not contact you again.
- Contact form enquiries — typically up to 24 months from the date of your enquiry, unless it becomes part of a booking record.
- CCTV footage — typically 30 days, unless retained for longer in connection with an incident or a request from law enforcement.
- Website analytics — Google Analytics 4 retains user-level data for 14 months from the date of collection.
If you are aware of any inaccuracy in the information we hold about you, please let us know using the contact details above.
5
Your rights
Your rights
Under the UK General Data Protection Regulation, you have the following rights in respect of the personal information we hold about you:
- Right of access — you can ask us for a copy of the information we hold about you.
- Right to rectification — you can ask us to correct information that is inaccurate or incomplete.
- Right to erasure — you can ask us to delete information we hold about you in certain circumstances.
- Right to restrict processing — you can ask us to stop using your information for particular purposes.
- Right to data portability — where we hold your information on the basis of your consent or to perform a contract with you, you can ask us to provide it in a structured, commonly used and machine-readable format.
- Right to object — you can object to our use of your information where we rely on legitimate interests, and you have an absolute right to object to direct marketing at any time.
- Right to withdraw consent — where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it.
- Rights in relation to automated decision-making — you have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
To exercise any of these rights, please contact us using the details above. We will respond within one month. There is no fee for exercising your rights, unless your request is manifestly unfounded or excessive.
If you do not provide information we need, or you ask us to stop using your information, that may impact on the services we are able to provide to you.
6
Automated decision-making
Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. Bookings, refunds, complaints and any other significant decisions are reviewed by our team.
8
Security
Security
The internet is not a secure medium, but we maintain industry-standard security measures on our website and systems and review them regularly. Although we will do our best to protect your personal information, we cannot guarantee the security of any information transmitted online or through our website. Transmission of information is at your own risk. We accept no liability if our electronic security is breached despite our reasonable measures.
9
International transfers
International transfers
Some of the service providers we use are based outside the United Kingdom, in particular Google (analytics, advertising and search tools) and Intuit Inc. (which operates Mailchimp). When we transfer your information to these providers, your data may be processed in the United States or other countries outside the UK.
We only make these transfers where one of the safeguards required by UK GDPR is in place, for example:
- the UK Extension to the EU-US Data Privacy Framework (also known as the UK-US Data Bridge), where the recipient is certified under it; or
- the UK Information Commissioner’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, supplemented by any additional measures the recipient applies.
We keep transfers outside the UK to the minimum practicable and take steps to ensure that the same level of protection is applied to your information as would be the case if it remained within the UK.
10
Complaints
Complaints
If you have any queries about the manner in which your information is dealt with, please contact us using the details above. If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner’s Office, which you can do by visiting ico.org.uk/concerns.
11
Changes to this policy
Changes to this policy
We reserve the right to amend or replace this privacy policy at any time. Your continued use of our website and services will be considered acceptance of the privacy policy in place at the relevant time.