Privacy Policy

Last updated: 18 September 2026

Who we are

This website is operated by Christ’s College (company number RC000113) and Christ’s College Trading Limited (company number 09662638), registered in England, registered office Christ’s College, St Andrew’s Street, Cambridge CB2 3BU. We trade as Christ’s College Hospitality and we are the data controller for the personal information described in this notice.

This notice explains what personal information we collect when you visit this website, enquire about a stay or stay with us, how we use it, and what rights you have. It sits alongside the College’s wider Data Protection Policy.

If you have a question about how we use your personal information, contact the Reservations Office at reservations@christs.cam.ac.uk or +44 (0)1223 334926, or write to the Data Protection Officer, Christ’s College, St Andrew’s Street, Cambridge CB2 3BU.

Information we collect

• Enquiry and booking information — your name, email address, telephone number, postal address, the dates and room type you have asked for, the names of others in your party, and any dietary, accessibility or other requirements you tell us about.
• Payment information — the details needed to take payment for your stay. Card payments are processed by our payment provider; we do not store full card numbers on this website.
• Information about your stay — arrival and departure details, correspondence with the Reservations Office or the Porters’ Lodge, and any feedback, review or complaint you send us.
• Marketing preferences — if you sign up to our newsletter or tick the marketing opt-in on one of our forms, we record your name, email address and the fact that you consented.
• Website usage information — technical information collected automatically by our web server and, where you consent, by analytics cookies. This includes your IP address, the date and time of your visit, the pages you requested, the referring page, and your device, browser and operating system type.

If you book through a third-party channel such as Booking.com, that company collects your information under its own privacy notice and passes us the details we need to provide your stay.

Why we use it, and our lawful basis

• To take and manage your booking and to provide your stay — because it is necessary to perform our contract with you, or to take steps at your request before entering into one.
• To keep the College, our guests and our staff safe, including fire safety, security and incident records — because it is necessary for our legitimate interests in running safe premises, and to comply with our legal obligations.
• To keep accounting and tax records and to handle complaints, insurance claims or legal matters — because it is necessary to comply with legal obligations, and for our legitimate interests in defending our position.
• To send you marketing about Christ’s College Hospitality, such as our newsletter and special offers — with your consent, which you can withdraw at any time.
• To understand how our website is used and to improve it — with your consent, given through our cookie banner.

Who we share it with

We do not sell your personal information. We share it only where we need to:

• Third-party booking channels, where you booked through them.
• Our payment provider, to take and refund payments.
• Our website hosting, email delivery and email marketing providers, who process information on our instructions.
• Google, where you have consented to analytics cookies (see our Cookie Policy).
• Other departments of Christ’s College where this is needed to provide your stay, for example catering and the Porters’ Lodge.
• Professional advisers, insurers, auditors, and the police or other authorities where we are required or permitted by law to do so.

Some of these providers, including Google, may process information outside the UK. Where that happens we rely on the safeguards permitted by UK data protection law, such as UK adequacy regulations or standard contractual clauses.

How long we keep it

• Enquiries that do not lead to a booking: normally up to 12 months.
• Booking and financial records: for the duration of your stay and then for six years after the end of the financial year in which the stay took place, to meet our accounting and tax obligations.
• Marketing records: until you unsubscribe or withdraw your consent, after which we keep a minimal record so that we do not contact you again.
• Website server logs and analytics data: normally up to 26 months.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete information where there is no good reason for us to keep it;
• ask us to restrict how we use your information, or object to our using it on the basis of our legitimate interests;
• ask us to transfer certain information to another organisation;
• withdraw your consent at any time, where we rely on consent — for example by clicking “unsubscribe” in any marketing email, or by changing your cookie choices.

To exercise any of these rights, contact us using the details above. We will respond within one month.

If you are unhappy with how we have handled your personal information you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

Cookies

This website uses cookies. Essential cookies are needed for the site to work. Analytics cookies are set only if you agree through the cookie banner, and you can change your choice at any time. Full details, including the cookies we use and how to control them, are in our Cookie Policy.

Changes to this policy

We review this policy regularly. Any changes will be posted on this page with an updated date at the top.