Privacy & Cookie Policy


Highland and Hebridean Holidays is owned by Don Michie.  We are committed to ensuring the best standards of practice in all of our activities and business functions.  Visitors to our website and guests who book our accommodation can be assured that the protection of privacy and confidentiality are given the highest priority. 

This policy sets out how we collect and process personal data from you, or indeed that you provide to us.

For the purposes of the Data Protection Act 1998 and General Data Protection Regulation (GDPR) 2018, the data controller is Highland & Hebridean Holidays.


We will never share or sell your details to other companies or businesses for marketing purposes other than for our own business use, such as keeping you informed on news and offers by email or post (with your express permission).  Detailed in this document you will find information on when and why we collect your personal information, how we use it, the conditions under which we are required to disclose your information and how we keep your details secure.


Our website uses HTTPS protocol which means any information provided to us is securely transferred from you to us. 


A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

We use cookies to collect statistical information on how visitors use our website. Anonymous information is collected, such as the number of visitors to the website in a given period or details of properties and dates selected for online bookings, but it is purely statistical and cannot be used to identify an individual user. Storage of cookies is held within Google Analytics.

To find out more about cookies, visit


When someone visits we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Any data collected by Google Analytics that is associated with cookies, user identifiers or advertising identifiers is retained for a period of up to 26 months.

You can learn more about Google Analytics or opt out if you wish.


If you provide your email address to us or complete a form on our website with personally identifiable information, your details will be stored to allow a response to your enquiry. These forms would be an online enquiry form or entry to our mailing list.


When you book accommodation with us, whether by telephone, email, social media or through our website, your name, address data, email and contact telephone number will be stored securely in our Property Management System, Freetobook. Your payment information will also be stored within Freetobook using a service called Stripe. This payment information is secure, encrypted and PCI compliant. This is a requirement of your booking with us and your details are stored securely online.

In addition to our booking system, our website has been built by a marketing agency called Source Marketing who have access to our databases and systems.  They will never share or use your details for any purposes other than our own, as outlined here.

Social media channels like Facebook, Instagram and Google + are all third parties that we liaise with. Please view their individual privacy policy statements to find out more about how they process personal data.



Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.


Unfortunately, the transmission of information via the internet is not completely secure and while we will do our best to protect your personal data, we cannot guarantee its security. Any transmission is done at your own risk.



If you provide us with your email address we may send you emails, either in reply to specific enquiries (such as one made using a contact form) or if you have opted in to our email newsletters. You have the ability to opt out of any of this communication at any time.

We will never provide your personal information or email address to any third parties except where they are specifically employed to help deliver our own services.



We take appropriate measures to safeguard the information we hold from unauthorised access or improper use. Our database is stored in a secure, password protected location. Only users authorised by us have access to this data.


We take all reasonable measures to ensure that the information we hold is accurate. In particular we use reliable collection methods and destroy or convert to an anonymous form, any out-of-date data. Individuals may request details of all personal information held by us so as to contest inaccurate or incomplete data, verify the information and have it corrected as appropriate.


Free WiFi is available in all of our properties for guest use.  We do not collect personally identifiable details when you use this service.


As part of the registration process for our email newsletters, we collect personal information. We use that information for a couple of reasons: to tell you about news and offers from Highland & Hebridean Holidays; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don’t rent or trade email lists with other organisations and businesses.

We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe from general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing us on


You are entitled to view, amend, or delete the personal information that we hold. Email your request to

This privacy policy was created in April 2020 and we will review the terms periodically to ensure we remain compliant with Data Protection laws.