Your privacy matters to us. This Privacy Policy (“Policy”) explains how Waverley Hostel collects, uses, stores, and shares personal information when you interact with us, including when you make a booking, or use our services.

​

1. Who We Are

​

Waverley Hostel is operated by TARKA Edinburgh Limited a company registered in England and Wales under company number 14532739.

​

We are responsible for managing and protecting the personal data collected in connection with Waverley Hostel.

​

2. The Information We Collect

​

We collect information that you choose to share with us, as well as certain information generated through your use of our services.

​

This may include:

• Your name and contact details

• Your address, telephone number, and email address

• Your date of birth and nationality

• Booking details, preferences, itinerary, and party size

• Payment information, such as card type, expiry date, and the last four digits of your payment card

• Special requests and marketing preferences

• Technical and usage data generated when you use our website or Wi-Fi, such as your IP address and device identifiers

In some circumstances, we may also collect limited sensitive personal information, such as accessibility or health-related details, where this is necessary to support your stay.

​

3. How We Use Your Information

​

We may use your personal information to:

• Manage and administer your bookings and account

• Process reservations and payments

• Send booking confirmations, updates, and service-related communications

• Improve our services and personalise your experience

• Maintain the performance and security of our  Wi-Fi

• Send relevant marketing communications where you have chosen to receive them

• Meet our legal, regulatory, and operational obligations

​

3. How Long We Keep Your Information

​

We retain personal information only for as long as reasonably necessary to meet our legal, operational, and business requirements.

​

In most cases, personal information may be retained for up to two years following your last stay or interaction with us. Certain information may be retained for a longer period where required by law, needed to resolve a dispute, or necessary for legitimate business purposes.

​

Where you have chosen to receive ongoing marketing communications, we may retain the relevant contact information until you withdraw your consent, unsubscribe, or ask us to delete it.

​

4. Sharing Your Information

​

We may share your personal information with:

​

• Trusted service providers that support our operations, such as booking-system providers, payment processors, IT providers, and communications platforms

• Accommodation or business partners where services are arranged on your behalf

• Government authorities, regulators, law-enforcement agencies, or other third parties where disclosure is required by law

• Professional advisers, insurers, auditors, or parties involved in a business sale, transfer, or restructuring

• Fraud-prevention and security providers

• Marketing and advertising partners where you have provided the necessary consent

• ​

We require service providers handling personal information on our behalf to use it only for the agreed purposes and to protect it appropriately.

​

7. Your Rights

​

Under applicable UK and, where relevant, EU data-protection laws, you may have the right to:

​

• Access the personal data we hold about you

• Correct or update inaccurate or incomplete information

• Request the deletion of your personal data

• Request that the processing of your personal data be restricted

• Object to certain types of processing, including direct marketing

• Withdraw your consent at any time where processing is based on consent

• Request a portable copy of certain personal data

• Make a complaint to the relevant data-protection authority

​

These rights may be subject to legal conditions or exemptions. You can exercise your rights by contacting us using the details provided at the end of this Policy.

​

8. How We Protect Your Data

​

We use appropriate technical and organisational measures designed to protect your personal information during collection, storage, use, and transmission.

​

These measures may include access controls, secure systems, staff procedures, and safeguards applied to the service providers with whom we work.

​

Although no system can be guaranteed to be entirely secure or risk-free, protecting your personal information is a priority for us.

​

9. International Transfers

​

Your personal data may be transferred to or processed in countries outside the United Kingdom or European Economic Area.

​

Where this occurs, we take steps to ensure that appropriate safeguards are in place and that your information continues to receive an adequate level of protection in accordance with applicable data-protection laws.

​

10. Changes to This Policy

​

We may update this Privacy Policy from time to time to reflect changes to our services, practices, or legal obligations.

​

Contact Us

​

If you have questions about this Policy, wish to exercise your data-protection rights, or have concerns about how your information is handled, please contact us:

Email: stay@waverleyhostel.com
Address: 11a South St Andrews Street, Edinburgh. EH2 2AZ

Last updated: 31.07.2026