Privacy Policy

Privacy Policy

Effective date: April 04, 2026

Last updated: April 04, 2026

 

Who we are

This website is operated by Hotel Maria, a family-run hotel based in Sandown, Isle of Wight.

 

What personal data we collect

We do not actively collect personal data through this website.


– There are no contact forms
– There are no user accounts
– There is no online booking system


However, limited data may still be collected automatically through technical processes, such as analytics data:

 

Analytics data

We use Google Analytics, which may collect:

– IP address (anonymised where possible}
– Browser type and device
– Pages visited and time spent on site


This data is used to understand website traffic and improve performance. It is processed in an aggregated and anonymised form.

 

Cookies

Our website uses cookies to ensure it functions correctly and to improve user experience.

 

These may include:
– Essential cookies (required for the website to work)
– Analytics cookies (via Google Analytics)
– Caching cookies (to improve page load speed)


You can control or disable cookies through your browser settings. Where required, we will request your consent before placing non-essential cookies.

 

Analytics

We use Google Analytics to help us understand how visitors use our website.


Google Analytics may store cookies on your device and process usage data. You can learn more about how Google uses your data here:
– https://policies.google.com/provacy


You can opt out of Google Analytics tracking by adjusting your browser settings or using Google’s opt-out tools.

 

Embedded content

Pages on this site may include embedded content (such as videos or images from third-party websites).


Embedded content behaves in the same way as if you visited the external website directly. These third-party sites may collect data, use cookies, and track your interaction.

 

Who we share your data with

We do not sell or share personal data for marketing purposes.


However, limited data may be processed by trusted third-party providers for website functionality, including:
– Website hosting provider (123 Reg)
– Google Analytics (Google)


These providers process data only as necessary to deliver their services.

 

How long we retain data

As we do not collect personal data directly, we do not store personal data ourselves.


Any data collected via analytics tools is retained according to the policies of those providers (e.g. Google Analytics retention settings).

 

Your data protection rights

Under UK data protection law, you have the right to:
– Request access to any personal data held about you
– Request correction or deletion of your data
– Object to processing of your data
– Request restriction of processing


To exercise any of these rights, please contact us.

 

Where your data is sent

Some data (such as analytics data) may be processed outside the UK or European Economic Area.

 

Where this occurs, we ensure appropriate safeguards are in place through our service providers (such as standard contractual clauses).

 

How we protect your data

We take appropriate security measure to protect this website, including:
– Secure hosting
– Website security plugins
– Regular software updates


As we do not collect sensitive personal data via this website, risk is minimal.

 

Data breach procedures

In the unlikely event of a data breach, we will investigate promptly and take appropriate action in line with applicable data protection laws.

 

Contact us

If you have any questions about this policy or how your data is handled, please contact us.