Ross Farm
Borgue
Kirkcudbright
DG6 4TR
07973 255279
rossbayretreat@aol.com
Last updated: 7 September 2026
Ross Bay Retreat respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how Ross Bay Retreat collects, uses, stores and protects personal information when you visit or use our website, https://rossbayretreat.com/, contact us, enquire about a stay, make or manage a booking, or otherwise interact with us.
This policy is intended to provide information in accordance with applicable UK data protection and electronic communications law, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (“PECR”), as applicable.
For the purposes of applicable data protection legislation, the organisation responsible for your personal information is:
Ross Bay Retreat
Ross Farm
Borgue
Kirkcudbright
DG6 4TR
Scotland, UK
Telephone: 07973 255279
Email: rossbayretreat@aol.com
References in this Privacy Policy to “Ross Bay Retreat”, “we”, “us” or “our” mean Ross Bay Retreat.
Depending on how you interact with us, we may collect some or all of the following information:
This may include:
Please do not provide sensitive personal information unless it is genuinely necessary for us to deal with your enquiry or booking.
When you visit our website, certain technical information may be collected automatically, depending on the website technologies and services in use. This may include:
We only use this information in accordance with applicable law and, where required, with your consent.
We may use personal information to:
Where you have given valid consent to receive marketing communications, we may also use your contact details to send you relevant marketing communications. You can withdraw your marketing consent at any time.
We will only process your personal information where we have a lawful basis to do so.
Depending on the circumstances, this may include:
We may need to process your information to enter into or perform a contract with you, including administering a holiday booking and providing the accommodation or services you have requested.
We may process information where this is necessary for us to comply with a legal or regulatory obligation.
We may process information where it is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your rights and interests.
Examples may include administering and improving our business, maintaining website security, responding to enquiries and protecting our legal rights.
Where required by law, we will ask for your consent before processing your information for a particular purpose.
For example, certain non-essential cookies and similar technologies require consent under PECR.
You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before you withdrew it.
Our website includes a booking/availability function.
Depending on the booking system used by Ross Bay Retreat, some booking information may be processed through a third-party booking or accommodation-management provider.
Where a third party processes your information on our behalf, we will take appropriate steps to ensure that the processing is carried out lawfully and that appropriate contractual and security arrangements are in place.
When you make a booking, information necessary to administer the booking may include your name, contact details, booking dates, accommodation selected, number of guests and relevant booking information.
Where payment is processed by a third party, payment information may be handled directly by the relevant payment provider. We do not intend to store complete payment-card details ourselves unless this is specifically required and lawfully undertaken.
You should also review the privacy information of any third-party booking or payment provider presented to you during the booking process.
Our website may use cookies and other technologies that store or access information on your device.
Some cookies are strictly necessary for the website to function, for example to provide requested functionality, maintain security or support a booking process.
Other cookies or similar technologies may be used for purposes such as:
Where applicable law requires consent, we will obtain your consent before placing or using non-essential cookies or similar technologies.
You should be given a genuine choice about whether to accept non-essential cookies, and you should be able to withdraw or change your consent.
We may use third-party services that set cookies or use similar technologies. Where this happens, the relevant third parties should be identified through our cookie-consent mechanism or cookie information.
Our use of cookies may change from time to time. We will update our cookie information when necessary.
Important: our website’s cookie settings should be configured so that non-essential cookies and similar technologies are not activated before the appropriate consent has been obtained.
Where analytics services such as Google Analytics are used on the website, they may collect information about how visitors interact with the website.
Any non-essential analytics cookies or similar technologies will only be used where the required legal basis and consent have been obtained.
Analytics information is generally used to understand website usage, improve website performance and improve the experience provided to visitors.
The specific analytics services currently active on the website should be checked and accurately reflected in the site’s cookie notice and consent mechanism.
We may contact you with marketing information where we are legally permitted to do so.
Where consent is required, we will only send electronic marketing communications after obtaining the appropriate consent.
You can unsubscribe from marketing communications at any time by:
We will respect your request and will not continue sending marketing communications where you have withdrawn consent or otherwise objected, except where we are permitted or required by law to retain your information for another purpose.
We do not sell your personal information.
We may share personal information where reasonably necessary with:
Where another organisation processes personal information on our behalf, we will take appropriate steps to ensure that it processes that information in accordance with applicable data protection requirements.
Some third-party service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place, as required by applicable data protection law.
Depending on the circumstances, these safeguards may include an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.
We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including where necessary to meet legal, accounting, tax, insurance or reporting requirements.
Different categories of information may therefore be retained for different periods.
For example:
When personal information is no longer required, we will take reasonable steps to securely delete or anonymise it.
We take reasonable technical and organisational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include appropriate access controls, secure systems, software updates, backups and other measures appropriate to the nature of the information and the risks involved.
However, no transmission or storage system can be guaranteed to be completely secure.
Subject to certain legal conditions and exemptions, you may have rights under UK data protection law including:
Where we process your information on the basis of consent, you have the right to withdraw that consent at any time.
These rights are not absolute and may be subject to legal exceptions.
To exercise a right, please contact us using the details provided in Section 1.
We may need to ask for reasonable information to verify your identity before responding to a request.
You have an absolute right to object to the processing of your personal information for direct marketing purposes.
If you object to direct marketing, we will stop using your personal information for that purpose, subject to any limited circumstances where the law permits otherwise.
If you have concerns about the way we use your personal information, please contact us first so that we have an opportunity to address your concerns.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
The ICO provides information about data protection rights and how to make a complaint.
Our website may contain links to websites operated by third parties, including tourism organisations, social-media services, booking services and other external websites.
We are not responsible for the privacy practices, security or content of third-party websites.
You should review the privacy policy of any third-party website before providing personal information to it.
Our website may contain links or embedded content relating to social-media services, including Instagram.
If you interact with social-media content or follow a link to a third-party social-media platform, that platform may collect information about you in accordance with its own privacy policy and terms.
Where embedded third-party content involves cookies or similar technologies that are not strictly necessary, the relevant technology should be controlled through our cookie-consent mechanism where required by law.
Our website and accommodation services are not specifically directed at children.
We do not knowingly seek to collect children’s personal information through the website unless it is necessary for a legitimate purpose, such as administering a booking made by an adult.
If you believe that a child has provided us with personal information inappropriately, please contact us.
We may update this Privacy Policy from time to time to reflect:
The latest version will be published on this page with the date it was last updated.
We recommend checking this page periodically for changes.
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we use your personal information, please contact:
Ross Bay Retreat
Ross Farm
Borgue
Kirkcudbright
DG6 4TR
Scotland, UK
Telephone: 07973 255279
Email: rossbayretreat@aol.com
Last updated: 7 September 2026
Error: No feed found.
Please go to the Instagram Feed settings page to create a feed.
Overdale Cottage is a cosy pet friendly cottage in the charming village of Harome, 3 miles from the Helmsley on the edge of the North York Moors National Park.
Destination Balcary is a self catering holiday house in Dumfries and Galloway, with breathtaking scenery when you wish to stay in a place like no other...