Privacy Policy | ABC Hyde Park Hotel

Who We Are

ABC Hyde Park Hotel is operated by ACE Hotels Trading Ltd, a company registered in England and Wales. Our registered address is 119–121 Sussex Gardens, Paddington, London W2 2RU.

We are the data controller for personal information collected through this website and during your stay with us. If you have any questions about this policy or how we handle your data, please contact us at info@abchydeparkhotel.co.uk.

VAT No: GB 242 142 840

Information We Collect

We collect personal information when you make a reservation, contact us, or use our website. This may include:

Name, email address, phone number and postal address
Booking details including dates, room type and number of guests
Payment information (processed securely — we do not store full card details)
Special requests, dietary requirements or accessibility needs you share with us
Identification documents where required by law (e.g. passport details for international guests)
Communications you send us by email, phone, WhatsApp or through our contact form
Technical data such as IP address, browser type and pages visited on our website

How We Use Your Information

We use your personal data to:

Process and manage your reservation and stay
Process payments and issue invoices or receipts
Communicate with you about your booking, including any changes or special arrangements
Comply with legal obligations, including those under the Immigration (Hotel Records) Order 1972 and anti-money laundering regulations
Improve our website and services through anonymised analytics
Send you marketing communications where you have given us consent to do so
Respond to enquiries, complaints or requests

Legal bases: We process your data on the basis of contractual necessity (to fulfil your booking), legal obligation (UK law requirements), legitimate interests (improving our services and preventing fraud), and consent (marketing communications).

Payment Processing

Payments made through our website are processed by Stripe, a PCI DSS compliant payment provider. When you pay online, your card details are entered directly on Stripe's secure servers and are never transmitted to or stored by us. You can review Stripe's privacy policy at stripe.com/gb/privacy.

For bank transfer payments, your transfer confirmation screenshot is temporarily hosted by ImgBB to facilitate delivery to our accounts team. Images are stored for up to 6 months and are accessible only via a private link.

Sharing Your Information

We do not sell your personal data. We may share it with:

Our booking and property management system (Guestline) to manage reservations
Payment processors (Stripe) to handle transactions securely
Email and communication service providers used to contact you about your booking
Government authorities where we are legally required to do so (e.g. UK Border Force, police)
Professional advisors such as accountants or lawyers, under strict confidentiality obligations

All third parties are contractually required to handle your data in accordance with applicable data protection law.

Cookies & Website Analytics

Our website uses cookies — small text files stored on your device — to ensure the site functions correctly and to understand how visitors use it. We use anonymised analytics data only and do not track you across other websites.

You can control cookies through your browser settings. Disabling cookies may affect some website functionality.

How Long We Keep Your Data

We retain personal data for as long as necessary to fulfil the purposes described in this policy, and in accordance with our legal obligations:

Guest registration records — 12 months (as required by the Immigration (Hotel Records) Order 1972)
Financial and booking records — 7 years (as required by HMRC)
Marketing consent records — until you withdraw consent or 3 years of inactivity
Website analytics data — anonymised and retained indefinitely

Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right of access — request a copy of the personal data we hold about you
Right to rectification — ask us to correct inaccurate or incomplete data
Right to erasure — ask us to delete your data in certain circumstances
Right to restrict processing — ask us to limit how we use your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — withdraw marketing consent at any time

To exercise any of these rights, please contact us at info@abchydeparkhotel.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Our website uses HTTPS encryption for all data transmission. Payment processing is handled by PCI DSS compliant providers.

Despite these measures, no internet transmission is completely secure. If you have concerns about a specific transmission, please contact us directly.

International Transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, to protect your data to UK GDPR standards.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review it periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.

Contact Us

For any questions, concerns or requests relating to this Privacy Policy or your personal data, please contact us:

Email: info@abchydeparkhotel.co.uk
Telephone: +44 20 7706 4660
Post: ACE Hotels Trading Ltd, 119–121 Sussex Gardens, Paddington, London W2 2RU