Legal
Privacy Policy
NEOCR LTD · Last updated: July 2026
This policy explains how NEOCR LTD (“we”, “us”), a company registered in England & Wales (Company No. 15664816), collects and uses personal data when you use www.neocr.co.uk, make an enquiry, or book a stay with us. We are the data controller for the personal data described here, and we process it in accordance with UK data protection law, including the UK GDPR and the Data Protection Act 2018.
What we collect
Information you give us
- Contact details submitted through our enquiry form: name, email address, phone number (optional), enquiry type, and the content of your message.
- Booking details when you reserve a stay: name, contact details, party size, dates, and payment information processed by our booking provider.
- Correspondence you send us by email or through the site.
Information collected automatically
- Technical data such as IP address, browser type, device type, and pages visited, collected through cookies and similar technologies as described in our Cookie Policy.
How we use your data
- To respond to enquiries and provide the information or services you request (legal basis: taking steps at your request before entering a contract, or legitimate interests).
- To take, manage, and fulfil bookings, including guest communication before and during your stay (legal basis: performance of a contract).
- To operate, secure, and improve the website (legal basis: legitimate interests).
- To meet legal and regulatory obligations, including accounting and tax record-keeping (legal basis: legal obligation).
We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects.
Bookings through Your.Rentals
Online bookings on this site are processed through the Your.Rentals direct-booking platform. When you complete a booking, your details and payment are handled by Your.Rentals under its own terms and privacy policy, and the booking information is shared with us so that we can host your stay. Payment card details are processed by the booking platform’s payment provider; we do not store full card numbers ourselves.
Who we share data with
- Service providers who help us run the business, such as our website host, email provider, booking platform, and cleaning and maintenance partners, and only to the extent needed to deliver the service.
- Professional advisers, and authorities where we are legally required to disclose information.
Where providers process data outside the UK, we ensure appropriate safeguards are in place, such as UK adequacy regulations or standard contractual clauses.
How long we keep it
Enquiry data is kept for as long as needed to handle your enquiry and for a reasonable period afterwards. Booking and financial records are kept for up to six years to meet legal and accounting obligations. We delete or anonymise data when it is no longer needed.
Your rights
Under UK data protection law you have the right to request access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it at any time. To exercise any of these rights, contact us using the details on our contact page. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and reputable third-party providers. No online service can be guaranteed completely secure, but we take reasonable steps to protect your information.
Changes to this policy
We may update this policy from time to time. The latest version will always be published on this page with the date above.
Contact
Questions about this policy or your data can be sent via our contact form, addressed to NEOCR LTD, London, England.