Privacy policy.

Who we are

This website (lesuquet.co and the subdomains from which it is served) is operated by the legal entity that owns and runs the Manoir du Suquet holiday estate in Bardou, France. The estate operates five self-catering houses and hosts events, retreats, and residencies.

If you have any question about how we handle your personal data, or if you want to exercise any of the rights described in this policy, the fastest way to reach us is email. We aim to reply within a few working days.

What data we collect, and why

We collect and process personal data in the following specific situations, and only for the purposes described:

When you send an enquiry by email

If you contact us at reservations@lesuquet.co or via any of the other email addresses on our contact page, we receive your name, email address, and whatever information you share in the message. We use this data to reply to your enquiry, to keep track of ongoing correspondence, and to fulfil any booking or contractual relationship that results.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)) when responding to a booking; legitimate interest (Art. 6(1)(f)) for general correspondence.

Retention: enquiry correspondence is retained for up to three years after the last contact. Accounting records linked to actual bookings are retained for ten years under French tax law.

When you make a booking

Bookings are processed via our booking page at lesuquet.co/book.html, which uses a HotelRunner search widget. When you complete a booking, HotelRunner processes your name, address, email, telephone, booking dates, party size, and payment details on our behalf. We receive the same data from HotelRunner to manage your stay.

Legal basis: performance of a contract (Art. 6(1)(b)).

Retention: booking records are retained for ten years for French tax and accounting compliance.

HotelRunner maintains its own privacy policy; data is processed in accordance with GDPR under a data processing agreement we have with them.

When you visit the website

We use Google Analytics to understand which pages are read, how visitors arrive at the site, and how they move through it. This helps us write better journal posts and improve the parts of the site that aren't working. Google Analytics processes data including your IP address (anonymised before storage), device type, browser, approximate location (country/city only), pages viewed, and duration of visit.

Legal basis: consent (Art. 6(1)(a)), requested via the cookie banner.

Retention: Google Analytics retains aggregated data for 14 months by default. You can opt out at any time via our cookies page, or by installing the Google Analytics opt-out browser add-on.

We do not use behavioural advertising, retargeting, or cross-site tracking. Google Analytics is configured with IP anonymisation enabled.

Who we share data with

We share your personal data with third parties only where necessary to operate the site and run the business. We do not sell personal data. Below is a complete list of where your data may be processed outside our direct systems:

If we ever add a new third-party service that processes personal data — a newsletter tool, a booking-adjacent service, anything equivalent — we will update this page and, where required, request your consent.

Cookies

The main site itself sets no cookies. Third-party services embedded on the site (Google Analytics, Google Fonts) may set cookies, and you can accept or reject these via our cookie banner the first time you visit.

A full list of what is and isn't set — and how to clear it — is on the dedicated cookies page.

Your rights under GDPR

If you are in the European Union, the United Kingdom, or any jurisdiction with equivalent law, you have the following rights in relation to the personal data we hold about you:

• Right to access — you can ask us for a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct data that is inaccurate or incomplete.
• Right to erasure — you can ask us to delete your data, subject to any legal retention obligations (e.g. booking records retained under French tax law).
• Right to restrict processing — you can ask us to pause processing your data while a dispute or correction is resolved.
• Right to data portability — you can ask for a copy of your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interest.
• Right to withdraw consent — where we process data based on consent (e.g. analytics), you can withdraw that consent at any time via our cookies page.
• Right to lodge a complaint — you can complain to the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), or to your own country's supervisory authority.

To exercise any of these rights, email us at reservations@lesuquet.co. We will reply within one month, as required by GDPR Art. 12(3), and in most cases much faster.

Data transfers outside the EU

Some of our service providers (Netlify, Google) are based in or transfer data to the United States. Where that happens, the transfer is covered by the EU–US Data Privacy Framework and by standard contractual clauses approved by the European Commission. We do not transfer your data to any country without adequate protection.

Security

The website is served over HTTPS. Email to reservations@lesuquet.co travels over TLS-encrypted connections where the sender supports it (most modern email clients do). Bookings made via HotelRunner are processed on their PCI-DSS compliant infrastructure.

We store booking records on password-protected accounts with third-party providers. Paper records (such as printed confirmation emails for on-site use) are kept at the estate and destroyed after the stay concludes.

Children

This site is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has submitted data, contact us and we will remove it.

Changes to this policy

We will update this page if our practices change — for example if we add a new service provider, change cookie behaviour, or revise our retention periods. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be flagged on the homepage for a short period.

Questions

The fastest way to reach us about anything data-related is an email to reservations@lesuquet.co. We're two people running an estate — not a large company with a DPO helpdesk — and we aim to answer within a few working days, often faster.