Opal Cloud Ltd (trading as Court House Farm Retreats)
Last updated: February 2026
Opal Cloud Ltd (“OC Ltd”, “we”, “us”, “our”) is committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Opal Cloud Ltd, Court House Farm Retreats, Portishead, North Somerset BS20 6PU
Email: hello@courthousefarm.com
We are the data controller for the personal data you provide when booking or attending our retreats.
2. What information we collect
We may collect:
- name;
- email address;
- phone number;
- billing address;
- emergency contact details;
- dietary, medical or accessibility information (where voluntarily provided);
- payment information (processed via third-party payment providers);
- photographs or video (where applicable);
- photographic identification (e.g. driving licence or passport) where required for security or eligibility verification.
3. Identity verification data
We may request a copy of photographic identification prior to arrival.
Purpose of processing. We process identification documents to:
- verify guest identity prior to granting access to private property;
- confirm eligibility for Local Day Guest Passes;
- protect the safety of guests and staff;
- protect our historic property assets;
- comply with insurance or licensing requirements where applicable.
Legal basis. Our lawful basis is legitimate interests (Article 6(1)(f) UK GDPR) – specifically, ensuring the security, safety and proper administration of our retreats.
Data minimisation. Guests may redact licence numbers or unrelated information where this is not required for verification.
Retention. Identification documents are retained only until verification is complete and no longer than 30 days after the retreat has commenced, unless required for the investigation of a security incident. A record that “ID has been verified” may be retained as part of booking records.
Security. Access to identification documents is restricted to authorised personnel only. Documents are stored securely and deleted in accordance with our internal data handling procedures.
4. How we use your information
We use your data to:
- administer bookings;
- communicate retreat information;
- manage dietary and health requirements;
- maintain safety and security;
- process payments;
- comply with legal and tax obligations.
5. How long we keep data
- Booking and financial records: retained in line with UK tax law (currently 6 years).
- Health/dietary data: deleted after the retreat unless legally required.
- ID documents: deleted within 30 days after retreat commencement.
- Media: retained unless you withdraw consent.
6. Data security
We implement appropriate technical and organisational measures, including:
- restricted access controls;
- password protection and two-factor authentication;
- secure storage systems;
- scheduled deletion procedures.
7. Your rights
You have the right to:
- access your data;
- request correction;
- request erasure;
- restrict processing;
- object to processing;
- lodge a complaint with the ICO (ico.org.uk).
8. Third parties
We may use third-party providers for payment processing, email hosting and booking systems. These providers process data on our behalf under appropriate safeguards. Online payments are handled by Stripe; you can read Stripe’s privacy policy.
9. Cookies and this website
A cookie is a small file stored by your browser. Our website uses cookies that are needed for it to work, such as remembering your basket and keeping you signed in to your account.
With your permission, we also use Google Analytics to understand how visitors use the website, and the Meta (Facebook) Pixel to measure and improve our advertising. These only run if you choose “Accept” in the cookie banner. You can change your choice at any time using the “Cookie settings” link at the bottom of every page.
Most browsers also let you block or delete cookies in their settings. Blocking all cookies may stop parts of the website, such as booking, from working.
10. Third-party websites
Our website contains links to other websites. We are not responsible for the privacy policies or practices of third-party websites.
11. Changes to this policy
We may update this privacy policy from time to time by posting a new version on our website. Please let us know if the personal information we hold about you needs to be corrected or updated.