Latest Offers

Privacy Policy

Last updated: September 2026

Sandburn Hall is committed to protecting your personal information and handling it in accordance with UK data protection law, including the UK GDPR, Data Protection Act 2018 and applicable privacy legislation.

Who we are

Sandburn York Ltd., trading as Sandburn Hall and Griffon Forest 
Flaxton, York, North Yorkshire, England, YO60 7RB
Company number: 01691631
ICO Registration Number: ZB920733

For privacy enquiries, contact:
Email: info@sandburnhall.co.uk 
Telephone: 01904 469922

Information we collect

We may collect personal information when you:

  • stay at our hotel;
  • book or use our restaurant;
  • join or visit our golf club;
  • book or attend a wedding, conference or event;
  • visit our website or use guest Wi-Fi;
  • contact us or subscribe to marketing.

This may include your name, contact details, booking information, payment details, golf membership or handicap information, event details, vehicle registration, CCTV images and website usage information.

We may also receive information about dietary requirements, allergies, disabilities or accessibility needs where this is necessary to provide our services.

How we use your information

We use personal information to:

  • manage hotel, restaurant, golf and event bookings;
  • provide our services and process payments;
  • administer golf memberships and competitions;
  • respond to enquiries and complaints;
  • meet dietary and accessibility requirements;
  • protect our guests, staff and property;
  • prevent fraud and maintain security;
  • comply with legal and regulatory obligations;
  • improve our services; and
  • send marketing where permitted by law.

We process information where necessary to perform a contract, comply with a legal obligation, pursue legitimate business interests, protect vital interests or where you have given consent.

Sharing your information

We may share personal information where necessary with trusted service providers such as:

  • booking and reservation systems;
  • payment providers;
  • golf administration and handicap systems;
  • event suppliers;
  • IT and website providers;
  • professional advisers;
  • insurers;
  • law-enforcement bodies and regulators.

Where suppliers process information on our behalf, we require appropriate data-protection safeguards.

Some suppliers may process information outside the UK. Where this happens, we use appropriate legal safeguards for international transfers.

CCTV and security

CCTV may operate across our premises for safety, crime prevention and protection of people and property.

Vehicle registration information may also be collected.

Recordings are kept only for as long as reasonably necessary, unless required for an investigation or legal claim.

Marketing and cookies

We may send you information about our hotel, golf, restaurant and event services where permitted by law.

You can opt out of marketing at any time using the unsubscribe link in our emails or by contacting us.

Our website uses cookies and similar technologies. Where required, we will ask for your consent. More information is available in our Cookie Policy.

How long we keep information

We keep personal information only for as long as necessary for the purpose for which it was collected and to meet legal, accounting, tax, insurance and regulatory requirements.

Different types of information are retained for different periods in accordance with our retention policy.

Your rights

Depending on the circumstances, you may have the right to:

  • access your personal information;
  • correct inaccurate information;
  • request deletion or restriction;
  • object to certain processing;
  • receive certain information in a portable format;
  • withdraw consent; and
  • object to direct marketing at any time.

To exercise your rights, contact us at info@sandburnhall.co.uk

Complaints

If you have concerns about how we use your information, please contact us first at:

info@sandburnhall.co.uk

We will ensure that privacy enquiries and data protection requests are directed to the appropriate person within our organisation.

We will handle data-protection complaints in accordance with applicable UK law.

You also have the right to complain to the Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be available on our website.

Sign up to our newsletter

Sign up once. Receive all the latest news, events, special offers
direct to your Inbox: As simple as that.

Preferences