Privacy at Astraea House.

Who controls your information

Astraea House Ltd, company number 17382950, registered in England and Wales and trading as Astraea House, is the data controller. Its registered office is 45 High Street, Haverfordwest, Pembrokeshire, Wales, SA61 2BP. Privacy correspondence may be sent to Astraea House, 51 Nun Street, St Davids, Haverfordwest, SA62 6NU or privacy@astraea.house.

Information we collect

We collect information you provide when requesting dates, making or managing a booking, entering a competition, contacting us, joining an optional mailing list or using the private administration systems. This can include contact details, stay dates, guest information, payment references, competition submissions, referral information, consent records and correspondence.

How we use it

We use personal information to respond to enquiries, administer bookings and payments, provide guest communications, operate competitions, prevent fraud and duplicate entries, maintain security, meet legal and accounting obligations, and send optional marketing where valid consent or another lawful basis applies.

Payments

Card payments are processed by the selected payment provider. Astraea House does not store full card numbers or card security codes. We retain payment references and status information needed to administer a booking, competition entry, refund or accounting record.

Sharing and processors

Information may be shared with service providers that support hosting, email, payments, accounting, administration and prize fulfilment. They may only use the information for the agreed service and appropriate safeguards are required.

Retention

Booking, payment and accounting records are retained for the periods required for administration, tax and legal purposes. Unsuccessful competition entries are retained for 12 months after winner selection unless a longer period is needed for a dispute, audit or legal obligation. Optional marketing records are retained until consent is withdrawn or the record is no longer needed.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or transfer of your personal information, and may withdraw marketing consent at any time. Contact booking@astraea.house. You may also raise a concern with the UK Information Commissioner’s Office.

Website statistics and partner attribution

The public site works with essential technologies only. Optional first-party site statistics are aggregated and used to improve pages, campaigns and booking journeys; analytics does not store names, email addresses, IP addresses, card details or browser fingerprints. Raw anonymous events are retained briefly before aggregation.

Where a visitor follows a named partner or campaign link, Astraea may carry a random attribution reference through the current visit. With the visitor’s optional consent, a secure first-party cookie may remember that reference for the partner’s configured attribution window. If a booking results, the attribution and resulting commission become durable commercial and accounting records. Partner statements do not include guest contact details.

Cookies and privacy choices

Site statistics, partner attribution and embedded content can be controlled through Astraea cookie settings at any time.

Last updated: 5 August 2026.

House updates and marketing

When you ask to follow Astraea House, we use your email address, optional first name, stated room interest and signup source to send occasional room reveals, opening updates, early booking news and offers. The lawful basis is your consent.

We send a confirmation link before adding you to the active audience. Consent wording, source and confirmation history are retained so that we can demonstrate your choice. You can unsubscribe in every update. After withdrawal, we retain the minimum suppression record needed to avoid emailing you again by mistake.

Marketing subscriptions are separate from transactional messages about a booking, payment, purchase or competition entry.

Unique visitors and visits

When Site statistics is enabled, Astraea stores a random first-party browser identifier for up to 90 days and a separate visit identifier that renews after 30 minutes of inactivity. The server immediately converts both identifiers to one-way HMAC hashes. We do not store the original identifiers, IP addresses or browser fingerprints in Astraea Insights.

“Unique visitor” means an anonymous browser or device, not a named person. A phone and laptop count separately. Private browsing or cleared site data may create another visitor. Administrators can exclude a browser used for testing from the Insights dashboard.

Social links

Instagram and Facebook buttons use Astraea's own approved outbound links. We record only an aggregate platform and placement click before redirecting. No Meta Pixel, embedded social feed or third-party social script is loaded on Astraea House pages.