1. What Cookies and Similar Technologies Are
Cookies are small text files stored on your device. We may also use local storage, session storage, pixels, scripts, beacons, and similar browser technologies to remember notice choices, support reservations, process payments, prevent fraud, measure site performance, and keep essential website features working.
2. How We Categorize Technologies on This Website
- Necessary: technologies required for core website, reservation, security, payment, and fraud-prevention functionality. These remain active because the service cannot work correctly without them. This includes reservation-flow cookies and storage entries associated with the
reservation_*naming pattern, used to keep booking and reservation steps working correctly. - Payment and fraud prevention: technologies used by Stripe and payment-related services to process payments, authenticate transactions, reduce fraud, prevent loss, and protect the checkout flow. These are treated as necessary when they support payment security or reservation-payment functionality.
- Analytics: technologies used to measure traffic, page performance, payment-component performance where applicable, and general website usage so we can improve the website and booking experience.
3. Cookie Notice and Acceptance by Site Use
Our cookie notice explains that by continuing to use this site, interacting with the site outside the notice, scrolling, typing, or closing the notice, you accept the cookies and similar technologies described in this Cookies Policy and our Privacy Policy. The notice is not designed as a full preference center.
We store the notice decision in browser local storage so the notice does not need to show again in the same browser unless storage is cleared or the notice version changes. You can manage or block cookies and browser storage using your browser settings. Blocking necessary, reservation, or payment-security technologies may affect reservation and payment functionality.
4. Google Analytics 4
We may use Google Analytics 4 (GA4) to understand how visitors use the website. GA4 may process data such as page views, interactions, approximate location, browser and device information, and referral or source data.
- GA4 may use analytics cookies such as
_gaand_ga_*. - GA4 is used to measure website performance and reservation-flow usage, not to intentionally collect direct identifiers such as full name, email address, phone number, driving licence number, postal address, full card number, or card security code.
- You can use browser settings or the Google Analytics Opt-out Browser Add-on for additional browser-level control over GA4.
5. Cloudflare Web Analytics and Infrastructure Insights
We may also use Cloudflare Web Analytics, Cloudflare performance tools, and Cloudflare infrastructure insights to measure traffic, performance, security, and website reliability.
- Cloudflare states that Web Analytics does not collect or use visitors' personal data. For Cloudflare's description of the product, see the Cloudflare Web Analytics overview.
- Cloudflare documentation shows that Web Analytics dimensions can include data such as country, host, path, referer, device type, browser, and operating system. See Cloudflare Web Analytics dimensions.
- Depending on how the service is enabled, Cloudflare may add the Web Analytics beacon automatically or through a JavaScript snippet. See Cloudflare's setup documentation.
6. Stripe Payment, Security, and Fraud-Prevention Technologies
We use Stripe to process card and electronic payments. Stripe may use cookies, scripts, local storage, and similar technologies when you access payment features, including Stripe-hosted or embedded payment components.
Stripe states that Stripe.js may use cookies such as __stripe_mid, __stripe_sid, and m for fraud detection, and may use other technologies such as pay_sid, __Host-LinkSession, link.auth_session_client_secret, and elements_session depending on the Stripe products and payment methods enabled. The exact Stripe technologies may change as Stripe updates its services.
Stripe may collect transactional data and device or browser identifiers to operate payment services, authenticate transactions, prevent fraud and loss, improve payment-service performance, and secure its services. Learn more in the Stripe Privacy Policy, Stripe Privacy Center, Stripe Legal page, Stripe Services Agreement, and Stripe Data Processing Agreement.
For payment security and standards information, see Security at Stripe and Stripe's Integration Security Guide. Stripe describes PCI DSS as the global standard for cardholder-data security and states that Stripe is certified as a PCI Level 1 Service Provider.
7. Reservation Experience Continuity
Certain necessary technologies are required so that booking, reservation management, and payment flows work correctly. This includes cookies and browser storage used to preserve reservation context between steps, keep booking sessions active, and remember reservation inputs during the reservation flow.
For example, we may use a secure necessary cookie such as reservation_book_token and reservation-related browser storage entries associated with reservation_* to support reservation continuity and prevent the booking process from breaking unexpectedly.
8. Managing Cookies and Analytics
You can manage cookies and similar technologies through your browser controls, including blocking or deleting cookies, clearing local storage, and using browser-level privacy controls. Blocking necessary technologies, including reservation-flow cookies, Stripe payment or fraud-prevention technologies, or browser storage required for booking, may affect reservation and payment functionality.
For more information about Cloudflare, see Cloudflare's Privacy Policy and Cloudflare Cookies documentation. The cookies listed by Cloudflare only apply where the relevant Cloudflare service is enabled.
9. Third Parties and International Transfers
Analytics, payment, fraud-prevention, and infrastructure functionality may be provided by third parties, including Google, Cloudflare, and Stripe. Where personal data is transferred outside the EEA, UK, or Switzerland, recognized safeguards such as adequacy decisions, Standard Contractual Clauses, data processing agreements, or other lawful transfer mechanisms may be used where required.
10. Changes to This Policy
We may update this Cookies Policy when technologies, legal requirements, payment services, or website services change. The latest version is always published on this page.
11. Contact
For cookie or privacy questions, contact [email protected].