↓
Last updated: 18 September 2026
This policy explains how Little Cat Lettings Limited collects and uses personal information in connection with Moy Lodge, Moy Cottage, the website at moylodge.com, enquiries, bookings and stays.
Little Cat Lettings Limited is the data controller for the personal information described in this policy.
In this policy, “we”, “us” and “our” refer to Little Cat Lettings Limited, trading as Moy Lodge.
We may collect:
We collect information directly from you when you use the website, contact us or make a booking. We may also receive it from a person organising a group stay, SuperControl, a payment provider, or a booking platform through which you made or enquired about a reservation.
If you give us information about another guest, please make sure they know about this policy and that you are authorised to provide their information.
| Purpose | Information used | Lawful basis |
|---|---|---|
| Responding to enquiries, checking availability and taking steps towards a booking | Contact, enquiry and proposed-stay details | Steps at your request before entering into a contract |
| Confirming and managing bookings, payments, deposits, changes and cancellations | Contact, booking, transaction and correspondence details | Performance of our contract with you |
| Preparing for and providing your stay, including communicating practical information to relevant staff and suppliers | Contact, booking, party and preference details | Performance of our contract with you; our legitimate interests in running the accommodation safely and effectively |
| Handling dietary, allergy, accessibility or health-related information you choose to provide | Relevant special-category information | Your explicit consent. You may withdraw it at any time, although this may affect our ability to meet the relevant request |
| Keeping financial, tax and business records and complying with lawful requests | Booking, payment and transaction records | Legal obligation |
| Preventing fraud, protecting guests, securing the website, troubleshooting and defending legal claims | Contact, booking, security, device and log information | Our legitimate interests in operating securely and protecting our business and guests; legal obligation where applicable |
| Understanding how people use the website and improving its content and booking journeys through Google Analytics 4 | Cookie identifiers and website usage, device and approximate-location information | Your consent |
| Sending optional email marketing, if offered | Name, email address and marketing preferences | Your consent, or the limited existing-customer exception where permitted by law. You can opt out at any time |
Where we rely on legitimate interests, we consider the effect on your rights and use information only where those interests are not overridden by your interests or fundamental rights.
We do not use your information for solely automated decisions that produce legal or similarly significant effects.
Dietary, allergy, accessibility and similar details can reveal information about your health. Please provide only what we reasonably need to prepare for your stay.
We use this information with your explicit consent and share it only with people who need it to fulfil the request, such as relevant Moy Lodge staff or a caterer. You can withdraw your consent by contacting us. Withdrawal does not affect processing that took place before it was withdrawn.
If one guest provides this information about another person, the person providing it must have that person’s permission to do so.
The website is built with WordPress and Elementor and is hosted through Elementor Cloud. Cloudflare provides content-delivery and website-security services. These services may process technical information such as IP addresses, device and browser details, request logs and security signals so the site can be delivered reliably and protected from abuse.
Website administrators may access website, form, analytics or booking information only where needed to maintain, secure, troubleshoot and improve the site and connected systems. They act under contractual confidentiality and data-protection obligations.
We use SuperControl to manage availability, enquiries and bookings. Information entered into or supplied to the booking process may be stored in our SuperControl account. SuperControl Limited processes guest information on our behalf under contract as our data processor.
SuperControl may connect the booking process to payment providers, booking platforms and other services we have enabled. A payment provider processes card details on its secure systems; we generally receive confirmation and transaction information rather than your full card details.
You can read SuperControl’s privacy notice.
We use Google reCAPTCHA on our enquiry form solely to protect the
website against spam, fraud and automated abuse. When reCAPTCHA is
executed, it may process technical and security information including
your IP address, browser and device information, request details and
interactions with the form. It also sets the
_GRECAPTCHA cookie to help assess whether a submission is
likely to be genuine.
Google processes this information on our behalf for security, fraud and abuse prevention. We use reCAPTCHA on the basis of our legitimate interests in protecting the website and receiving genuine enquiries.
If you consent to analytics cookies, we use Google Analytics 4 (“GA4”) to understand visits and interactions, such as pages viewed, approximate location, device and browser information, referral source and engagement. Google states that for UK users GA4 uses an IP address to derive general location and then discards it before the address is logged or stored.
GA4 uses first-party cookies including _ga and cookies
beginning _ga_ to distinguish users and maintain session
information. We do not intentionally send names, email addresses or
other directly identifying contact details to Google Analytics.
You can refuse or withdraw analytics consent at any time through the site’s cookie controls. Refusing analytics does not prevent you from using the website or making a booking. You can read Google’s information about privacy and data in Analytics.
If you book through a third-party platform, such as Airbnb, Booking.com or Vrbo, that platform processes information under its own privacy notice and may give us the information needed to manage your booking. Links to other websites are governed by those sites’ own privacy policies.
Where necessary for the purposes above, we may share information with:
We do not sell your personal information.
Some providers may process information outside the United Kingdom. Where personal information is transferred internationally, we use a lawful transfer mechanism where required, such as a UK adequacy regulation, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with appropriate safeguards.
You may contact us for more information about the safeguards relevant to your information.
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and claims requirements. Our normal periods are:
We may keep information longer where required by law, where a dispute or claim is reasonably anticipated, or where necessary to protect someone’s vital interests. Information in protected backups may remain until the normal backup cycle expires.
Cookies are small files placed on your device. We also use related technologies that store or access information on a device.
Strictly necessary technologies support security, network delivery, cookie choices, forms and the booking process. They do not require consent where they are essential to provide a service you request. Analytics technologies are optional and are used only with your consent.
| Cookie or technology | Provider | Purpose | Typical duration | Category |
|---|---|---|---|---|
__cf_bm |
Cloudflare | Distinguishes legitimate traffic from automated or malicious traffic | About 30 minutes | Strictly necessary |
_GRECAPTCHA |
Google reCAPTCHA | Assesses whether an enquiry-form submission is genuine and helps prevent spam, fraud and automated abuse | Typically up to 6 months | Strictly necessary |
moy_cookie_consent |
Moy Lodge website | Remembers whether you accepted or rejected analytics | 180 days | Strictly necessary |
| Booking/cart/session technologies | SuperControl and connected booking services | Availability, booking steps, basket/session state, security and payment hand-off | Session or as stated in the cookie controls | Strictly necessary unless identified otherwise |
_ga |
Google Analytics | Distinguishes website users | Up to 2 years | Analytics - consent required |
_ga_* |
Google Analytics | Maintains session state | Up to 2 years | Analytics - consent required |
On your first visit, the cookie banner lets you accept or reject optional cookies. You can change your decision later using the “Cookie settings” link in the website footer. You can also delete or block cookies using your browser, although blocking strictly necessary technologies may affect forms or bookings.
The exact cookies used by the booking service can change as its configuration changes. The live cookie controls provide the current information.
Depending on the circumstances, you may have the right to:
These rights are not absolute and exemptions may apply. We may need to verify your identity before responding. There is normally no fee, and we aim to respond within one month.
You have an absolute right to object to direct marketing at any time.
To exercise a right, contact katrina@humanitydirect.org.
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office (“ICO”), the UK data-protection regulator:
If you are in the European Economic Area, you may also have the right to complain to the data-protection authority where you live or work.
We use appropriate technical and organisational measures designed to protect personal information. However, no internet service or method of transmission can be guaranteed completely secure.
We may update this policy when our services, providers or legal obligations change. The current version will be published on this page with its last-updated date.
Choose your stay at Moy
Explore our two large holiday homes by Loch Laggan in the Scottish Highlands.
A ten-bedroom, fully catered holiday home that sleeps up to 20 — a bespoke exclusive-use stay for your gathering.
A five-bedroom self-catering holiday cottage that sleeps up to 10 — a relaxed retreat you can book online.