Privacy Policy

Last updated: 21 October 2026. Version 1.0.

1. Who we are

1.1 Get Unplugged Limited ("Unplugged", "we", "us") is the controller of your personal data. We are registered in England and Wales under number 12382035. Our registered office is 167-169 Great Portland Street, London, W1W 5PF, and our ICO registration number is ZB370960.

1.2 This policy covers anyone whose personal data we handle, including guests, website visitors, members, voucher buyers and recipients, newsletter and waitlist subscribers, landowners, and job applicants. For privacy questions, contact hello@unplugged.rest.

1.3 Our Spanish site, unpluggedcabins.es, has its own privacy policy.

2. What we collect

2.1 Information you give us. This includes your name, email, phone number and billing postal address. It also includes booking details, such as dates, cabin, the other Guests' names, any dogs, Add-ons and special requests. We also collect membership and voucher details, messages to us, reviews and survey answers, and your answers to our cabin quiz.

2.2 Payment information. Card payments are handled by our payment provider, Stripe. We do not store full card numbers.

2.3 Information from others. Employers in our Out of Office scheme give us employees' names and work emails. Someone who books for you, or buys you a gift voucher, gives us your name and contact details.

2.4 Information collected automatically. This includes IP address, device and browser type, pages viewed, referring site and booking-funnel activity. We collect it through cookies and similar technologies (see section 12). We also use it to detect fraudulent or automated bookings.

2.5 Landowners and job applicants. For landowners, this includes contact details, land location and details of your enquiry. For job applicants, it includes your CV and anything else you send us.

2.6 Accessibility needs. If you tell us about an accessibility need, we use it only to help with your stay. Our cabins are self-catered, so we do not collect information about allergies or dietary needs.

3. How we use it and our lawful basis

• Take and manage bookings, send check-in details, provide your stay, handle lost property and damage claims: Contract

• Manage memberships, vouchers and Out of Office codes: Contract (the employer's code: our legitimate interests)

• Take payments and prevent fraud, chargebacks and automated or bot bookings: Legitimate interests

• Answer enquiries and complaints: Legitimate interests

• Send marketing emails and our newsletter: Consent, or the "soft opt-in" for past customers (see section 4)

• Personalise the marketing we send you, using your booking history and website activity: Legitimate interests (you can object at any time); consent for website activity collected through cookies

• Analytics and improving our website and cabins: Consent (for cookies); legitimate interests (for aggregated internal reporting)

• Show Unplugged adverts on other platforms: Consent

• Meet accessibility requests: Explicit consent

• Keep financial records and meet legal obligations: Legal obligation

• Assess landowner enquiries and job applications: Legitimate interests; steps before a contract

3.1 We combine data from our booking, payment, marketing and website systems into a central analytics database. We use it to understand demand, set prices and plan new cabins. We may also use it to personalise the marketing we send you (see section 4).

3.2 We do not make decisions about you using solely automated processing that have legal or similarly significant effects.

4. Marketing

4.1 We send marketing emails only if you have opted in, or if you have booked or bought from us and did not opt out at the time. In that case, we send only news about similar stays and offers.

4.2 You can unsubscribe at any time using the link in any email or by contacting stay@unplugged.rest. Booking-related emails are not marketing and will still be sent.

4.3 We may use your booking history and, where you have accepted cookies, your website activity to tailor the marketing we send you. You can object to this at any time by contacting hello@unplugged.rest, and we will stop.

5. Who we share it with

• Booking platform (Mews): Takes and manages bookings, vouchers and codes, and sends booking emails

• Payment provider (Stripe): Processes payments and fraud checks

• CRM platform (Glu): Manages memberships, vouchers and codes

• Email marketing (Mailchimp): Marketing emails and our newsletter

• Local changeover and host teams: Prepare cabins and help guests on site (name, dates, Guest count, requests)

• Landowners hosting our cabins: Only where needed for site access or safety

• Google (Analytics, Ads, Tag Manager, Cloud / BigQuery): Analytics, advertising and data storage

• Meta (Facebook and Instagram): Advertising and measurement

• Datadog: Website performance and error monitoring

• Typeform: Runs our cabin quiz and surveys

• Freshworks: Website chat and customer messaging

• PostHog and RudderStack: Website analytics

• LinkedIn: Advertising and measurement

• YouTube and Vimeo: Embedded videos

• Cloudflare: Website security and bot protection

• Cookiebot (Usercentrics): Records your cookie choices

• Senja: Shows guest reviews on our website

• Atlist: Runs the cabin map on our booking pages

• Professional advisers, insurers, and police or authorities: Where needed for legal claims or required by law

• A buyer or investor in our business: Only if we sell or restructure all or part of the business, under confidentiality

5.1 We do not sell your personal data.

6. International transfers

6.1 Some of our providers process data in the United States or elsewhere outside the UK, including Google, Meta, Stripe, Mailchimp, Datadog, Freshworks, LinkedIn and our analytics tools. Where they do, we rely on the UK–US Data Bridge, UK adequacy regulations, or the ICO’s International Data Transfer Agreement or Addendum. Contact us for a copy of the relevant safeguard.

7. How long we keep it

7.1 We keep personal data only as long as we need it for the purposes in section 3. At the end of each period, we delete it or anonymise it so it can no longer identify you. If we need data for a legal claim, an investigation or a regulator, we may keep it until that is resolved.

• Guest profile (contact details, stay history, preferences): 3 years after your last stay, then anonymised. Booking again restarts the clock.

• Booking, payment and invoice records: 6 years from the end of the financial year of your stay

• Accident, incident and damage records: 6 years after the incident. If the person involved was under 18, until they turn 21.

• Accessibility needs you share with us: Deleted 30 days after your stay

• Marketing (you opted in): Until you unsubscribe. We stop emailing after 2 years with no opens, clicks or bookings.

• Marketing (past customers): 3 years after your last booking or purchase, or until you unsubscribe

• Unsubscribe list: Email address only, kept indefinitely so we never email you again

• Membership records: For the membership, then as for guest profiles and payment records above

• Out of Office employee details: 12 months after the code is used or expires

• Gift voucher buyer and recipient details: 12 months after the voucher is used or expires

• Enquiries and complaints: 2 years after the matter is closed

• Landowner enquiries: 2 years after last contact, unless we enter an agreement

• Job applications: 6 months after the role is filled, unless you agree to longer

• Security and fraud-prevention logs: 12 months

• Website analytics: 14 months. Aggregated, anonymous reports are kept indefinitely.

• Session replays: 30 days

8. Your rights

8.1 You have the right to access your data, correct it, delete it, restrict its use, move it (portability), and object to its use for legitimate interests or direct marketing, including personalised marketing. Where we rely on consent, you can withdraw it at any time.

8.2 To exercise a right, contact hello@unplugged.rest. We will respond within one month, and there is usually no fee.

8.3 If you are unhappy, please contact us first. You can also complain to the Information Commissioner's Office at ico.org.uk.

9. Keeping data secure

9.1 We use access controls, encryption in transit, and reputable providers to protect your data. We limit staff and contractor access to what their role needs. We have a process for handling data breaches, including notifying the ICO and affected people where required.

10. Children

10.1 Bookings must be made by adults. We do not knowingly collect data from children except as Guests named in a booking.

11. Changes

11.1 We will update this policy when our practices change and show the date at the top. We will email you about significant changes.

12. Cookies

12.1 We only set strictly necessary cookies until you choose otherwise. Analytics, functional and advertising cookies load only after you accept them in our cookie banner. You can change your choice at any time using the Cookie settings link in the footer of any page.

12.2 The cookies and similar technologies we use are listed below.

Strictly necessary

• Cookiebot (CookieConsent): Remembers your cookie choices. Lasts: 1 year.

• Stripe (__stripe_mid, __stripe_sid, m): Processes card payments securely and prevents fraud. Lasts: 1 day to 400 days.

• Cloudflare (__cf_bm, __cflb, _cfuvid, cf_clearance, cf.turnstile.u): Detects bots, protects bookings from abuse and balances server load. Lasts: from your browser session up to 1 year.

• Unplugged (dmn_chk_#): Assigns you to a server and detects server errors. Lasts: until you close your browser.

• Typeform (cabin quiz) (AWSALBTG, AWSALBTGCORS, quiz progress items in local storage): Saves your quiz answers as you go and balances server load. Lasts: 7 days; persistent.

• Freshworks (_zg#, test, debug, localforage): Runs the website chat widget. Lasts: browser session; persistent.

Appearance (no consent needed; you can opt out)

• Unplugged (country): Remembers your country and language. Lasts: until you close your browser.

Functional (consent)

• Typeform (tf_respondent_cc, tf_random_id): Makes our forms and quiz work. Lasts: 6 months; persistent.

• Freshworks (localforage#keyvaluepairs): Remembers chat widget settings. Lasts: persistent.

• LinkedIn (lidc): Routes you to the right LinkedIn server. Lasts: 1 day.

Analytics (consent)

• Google Analytics (_ga, _ga_#, _gid, _gat): Counts visits and shows how people use the site. Lasts: 1 day to 2 years.

• PostHog (ph_#posthog, ph#window_id, ph#_primary_window_exists): Records how visitors use the site, including session replay of clicks and scrolling. Form inputs are masked. Lasts: until you close your browser.

• Datadog (_dd_s): Measures site performance and errors. Lasts: up to 4 hours.

• Typeform (dd_cookie_test_#, tracking_session_id, rl_* in local storage): Measures how people use the quiz and forms. Lasts: 1 day; persistent.

• Freshworks (first_session): Tells new visitors from returning ones. Lasts: 1 month.

Advertising (consent)

• LinkedIn (bcookie, li_gc): Identifies your browser for LinkedIn advertising and stores your LinkedIn consent choice. Lasts: 180 days to 1 year.

• Google (test_cookie): Checks your browser accepts Google advertising cookies. Lasts: 1 day.

• Google Ads (_gcl_au, _gcl_ls, IDE, conversion and remarketing pixels): Measures ad conversions and shows Unplugged ads on other sites. Lasts: from your browser session up to 400 days.

• Meta Pixel (_fbp, lastExternalReferrer, lastExternalReferrerTime): Measures Facebook and Instagram ad conversions and builds remarketing audiences. Lasts: 3 months; persistent.

• YouTube (YSC, VISITOR_INFO1_LIVE, __Secure-YNID, __Secure-ROLLOUT_TOKEN, __Secure-BUCKET, __Secure-YEC, TESTCOOKIESENABLED, LAST_RESULT_ENTRY_KEY): Plays embedded videos and tracks viewing. Lasts: from your browser session up to 180 days.

• Vimeo (__cf_ob, _cfPre_tabId): Plays embedded videos. Lasts: until you close your browser.

• RudderStack (rudder_cookies, test_rudder, __tld__): Sends website activity to our marketing tools. Lasts: from your browser session up to 1 year.

• Freshworks (_fw_crm_v, pageViewCookie): Links site visits to our customer messaging. Lasts: 1 year; persistent.

• Typeform (attribution_user_id, #-visitorId): Tracks how quiz and survey visitors reached us. Lasts: 1 year; persistent.

• Atlist (cabin map) (ajs_user_id, h): Records how visitors use the cabin map. Lasts: browser session; persistent.

12.3 We use Google Tag Manager to load tags on our site. It does not set cookies itself, and it only fires our analytics and advertising tags once you have given consent. Before you choose, Google Analytics may send basic pings that do not use cookies.

12.4 For more on cookies, including how to block them in your browser, visit ico.org.uk/for-the-public/online/cookies.