Mythe Farm Ltd – Privacy Policy

Last updated: 10 November 2026

1. Important information and who we are

Mythe Farm Ltd respects your privacy and is committed to protecting your personal data. This policy explains how we collect and use personal data when you visit www.mythefarm.co.uk, store a caravan, motorhome or trailer with us, stay in our accommodation, or otherwise contact us. It also explains your privacy rights under the UK GDPR and the Data Protection Act 2018. Our website and services are not intended for children. We do not knowingly collect data about children, except where a child stays in our accommodation as part of a booking made by an adult (see section 2). Please read this policy together with any other privacy notice we give you when we collect your data, such as our caravan storage agreement or accommodation terms and conditions. This policy supplements those notices and does not override them.

Controller

Mythe Farm Ltd is the controller and is responsible for your personal data (referred to as “we”, “us” or “our” in this policy). We have appointed a data protection lead who is responsible for questions about this policy. Contact them using the details below if you have any questions or wish to exercise your legal rights.

Contact details

• Full name of legal entity: Mythe Farm Ltd
• Email address: info@mythefarm.co.uk
• Postal address: Mythe Farm, Pinwall Lane, Sheepy Magna, Atherstone, Warwickshire, CV9 3PF
• Telephone: Caravan storage 01827 215 209; accommodation 01827 215 201

You have the right to complain at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would appreciate the chance to deal with your concerns first, so please contact us in the first instance.

Third-party links

Our website may include links to third-party websites, plug-ins and applications, including our sister businesses Mythe Barn Ltd and 4 Events UK Ltd. Please read the privacy policy of every website you visit.

2. The data we collect about you

Personal data means any information about an individual from which that person can be identified. It does not include anonymised data. We may collect, use, store and transfer the following kinds of personal data:

• Identity Data: first name, last name, title, and copies of photographic ID (for example a passport or driving licence) provided for caravan storage.
• Contact Data: home address, billing address, email address and telephone numbers, and proof of address such as a utility bill.
• Vehicle Data: make, model and registration of your caravan, motorhome, trailer or towing vehicle; CRiS or V5 registration documents; chassis or identification numbers; insurance details and policy documents; and records of when your vehicle enters or leaves the site.
• Booking Data: the wedding or event you are attending, room allocation, dates of stay, number of guests in your party (including any children or travel cot needs), and arrival and departure details.
• Financial Data: payment card or bank details used to pay storage fees or accommodation charges.
• Transaction Data: details of payments to and from you, invoices, and the storage or accommodation services you have bought from us.
• CCTV and Security Data: images of you, your vehicle and its registration captured by our 24-hour CCTV, and site access and visit records.
• Technical Data: IP address, browser type and version, time zone and location, operating system and other technology on the devices you use to access our website.
• Usage Data: information about how you use our website.
• Marketing and Communications Data: your preferences for receiving marketing from us, waiting-list requests, and your communication preferences.

We also use Aggregated Data, such as statistics on website visits or occupancy. This does not identify you and is not personal data in law, unless we combine it with your personal data.

Special categories of personal data

We do not routinely collect special category data. The exceptions are information you choose to give us about dietary requirements or allergies (so we can provide breakfast safely) and accessibility needs (for example, if you request our accessible room). We use this only to provide your stay and with your explicit consent. We do not collect information about criminal convictions and offences.

Children

Where a booking includes children, we hold only the information needed to provide the stay, such as the number of children and any cot or extra bed. This is provided by the adult making or holding the booking.

If you fail to provide personal data

Where we need personal data by law or under a contract and you do not provide it, we may be unable to provide the service. For example, we cannot accept a caravan into storage without proof of identity, address, ownership and insurance. We will tell you if this is the case.

3. How your personal data is collected

• Direct interactions. You give us data when you fill in our website forms, join our caravan storage waiting list, sign a storage agreement, send us documents, pay us, or contact us by phone, email, post or in person.
• Bookings made by others. Accommodation at Mythe Farm is only for guests attending weddings and events at Mythe Barn. Your name and booking details may therefore be passed to us by the couple, the event organiser, Mythe Barn Ltd or Eventurous Ltd when they allocate rooms.
• On site. Our CCTV and site access systems record images and vehicle movements.
• Automated technologies. When you use our website we automatically collect Technical and Usage Data through cookies, server logs and similar technologies.
• Third parties. We may receive Technical Data from analytics providers such as Google, and Contact, Financial and Transaction Data from payment providers.

4. How we use your personal data

We only use your personal data when the law allows us to. Most commonly, we rely on one of these lawful bases:

• Contract: to perform a contract we have with you, or are about to enter into, such as a storage agreement or accommodation booking.
• Legitimate interests: where it is necessary for our legitimate interests (or a third party’s) and your interests and rights do not override them.
• Legal obligation: where we must comply with the law, for example tax, accounting or insurance requirements.
• Consent: for dietary, allergy and accessibility information, and for certain marketing. You can withdraw consent at any time by contacting us.

Purposes and lawful bases

Marketing

You will receive marketing from us only if you have asked for information or bought services from us and have not opted out. We will get your express consent before sharing your data with any third party for their marketing. You can opt out at any time by using the unsubscribe link in any message or by contacting us. Opting out does not affect data we hold to provide a storage agreement or booking.

Change of purpose

We will only use your personal data for the purposes we collected it for, unless we reasonably consider that we need to use it for another, compatible reason. If we need to use it for an unrelated purpose, we will tell you and explain the legal basis that allows us to do so.

5. Disclosures of your personal data

We may share your personal data with the parties below for the purposes set out in section 4:

• Group businesses: Mythe Barn Ltd, Eventurous Ltd and Venue Catering and Events Ltd, which operate from the same site, to coordinate accommodation for weddings and events and to share administration and IT systems.
• Wedding couples and event organisers: to confirm room allocations for their event.
• Service providers: IT, email, website hosting, booking, CRM and accounting system providers, payment processors and banks, and our CCTV and security system providers.
• Professional advisers: lawyers, accountants, auditors and insurers.
• Our insurers and yours: where needed to handle a claim or incident involving a stored vehicle or a guest.
• CaSSOA (Caravan Storage Site Owners’ Association): where needed for site accreditation and audits.
• Police, HMRC and other authorities: where we are required by law, or to prevent or detect crime, including sharing CCTV footage.
• Buyers or successors: if we sell, transfer or merge any part of our business, the new owner may use your data in the same way as set out in this policy.

We require all third parties to respect the security of your data and to treat it in line with the law. We do not allow our service providers to use your data for their own purposes. We only permit them to process it for specified purposes and on our instructions.

International transfers

Some of our service providers (for example cloud email, analytics and payment providers) may store or process data outside the UK. Where this happens, we make sure a similar degree of protection is in place, by using countries with UK adequacy regulations or approved contractual safeguards such as the UK International Data Transfer Agreement or Addendum.

6. Data security

We have put appropriate security measures in place to prevent your personal data from being lost, used or accessed without authorisation, altered or disclosed. Access is limited to staff and contractors who need it for business purposes, and they must keep it confidential. Copies of ID, vehicle and insurance documents are stored securely and access is restricted. We have procedures for dealing with any suspected data breach and will notify you and the ICO where we are legally required to.

7. CCTV

We operate 24-hour CCTV across the caravan storage site and around the farm to protect people, property and stored vehicles and to prevent and detect crime. Signs are displayed where CCTV is in use. Cameras are not placed inside guest bedrooms or bathrooms. Footage is normally kept for 30 days and then automatically overwritten, unless it is needed to investigate an incident, an insurance claim or a request from the police.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purposes we collected it for, including any legal, tax, accounting, insurance or reporting requirements. Typical periods are: In some circumstances we may anonymise your personal data for research or statistical purposes, in which case we may use it indefinitely without further notice to you.

9. Cookies

Our website uses cookies to distinguish you from other users, help it work properly and help us understand how it is used (for example through Google Analytics). We only set non-essential cookies with your consent, which you can give or withdraw through our cookie banner. You can also set your browser to refuse some or all cookies, but parts of the website may then not work properly.

10. Your legal rights

Under data protection law you have the right to:

• Request access to the personal data we hold about you (a subject access request).
• Request correction of incomplete or inaccurate data.
• Request erasure of your data where there is no good reason for us to keep it. We may not always be able to agree, for example where we must keep records for legal or tax reasons.
• Object to processing where we rely on legitimate interests, and to object at any time to direct marketing.
• Request restriction of processing, for example while we check the accuracy of your data.
• Request transfer of data you provided to us, in a structured, machine-readable format, to you or a third party.
• Withdraw consent at any time where we rely on consent. This does not affect processing carried out before you withdrew it.

To exercise any of these rights, contact us using the details in section 1. You will not usually have to pay a fee. We may need to confirm your identity before responding. We aim to respond within one month, or within three months if your request is complex or you have made several requests, in which case we will keep you updated.

11. Changes to this policy and your duty to tell us of changes

We keep this policy under regular review and will publish any updates on this page. This version was last updated on the date shown at the top. Please keep us informed if your personal data changes during your relationship with us, for example a new address, phone number, vehicle or insurance policy.

12. Glossary of lawful bases

• Legitimate interest means our interest in conducting and managing our business so we can give you the best service and a secure site. We consider and balance any potential impact on you and your rights before relying on it.
• Performance of contract means processing your data where it is necessary to perform a contract you are party to, or to take steps at your request before entering into one.
• Legal obligation means processing your data where it is necessary to comply with a legal obligation that we are subject to.
• Consent means you have given clear, specific permission for us to process your data for a particular purpose.