We are Grape Vibes Ltd, a company incorporated in England and Wales and whose registered address is Bath House, 16 Bath Row, Stamford, England, PE9 2QU (referred to herein as Louma Farm and Retreat, “we”, “us” or “our”, as the context requires).
This Privacy Policy (together with our terms and any other documents referred to on them) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. It applies to our guests, customers, and other individuals whose data we may process.
For the purposes of GDPR and UK GDPR, we are the controller of our guests’ and prospect guest’s CRM data to the extent it pertains to natural persons. In some cases, for certain activities offered at Louma, we may act as joint controllers with the activity provider for the purposes of arranging and coordinating the provision of the relevant services. Where this applies, you may still exercise your GDPR and UK GDPR rights against any of the parties. We have established a joint controller agreement that sets out our respective roles and responsibilities. If you require further information about this, please contact us at dpo@aphaia.co.uk. Louma is part of the Steyn Group and may act as joint controller with other entities within the group where personal data is shared with them for internal administrative purposes.
We may change this Privacy Policy from time to time so please, check our website from time to time for any updates. If we make material changes in the way we use your personal data, we may notify you by posting a notice on our website or sending you an email at the email address provided at the time of registration.
The Basis for the Processing of Your Data and the Purposes of Processing
Louma Farm and Retreat processes your data for the performance of the contract that you have entered into for the provision of our services, and/or in order to take steps at your request to enter into the contract with us.
Some data is processed based on Louma Farm and Retreat’s legitimate interest, notably our website visitors’ data, such as website data for cybersecurity and/or error-tracking purposes.
Your consent will be required in case we process or share some of your data with third parties for a purpose different from those comprised in this Privacy Policy and that is not indispensable for the provision of our services.
We may ask for your consent in other cases where we process your data. Such consent can be revoked at any time by contacting us at hello@loumafarmandretreat.co.uk.
In particular, we may process your personal data for the following purposes:
- To manage booking and enquiries.
- To deliver any activities you may have booked or expressed interest in.
- To communicate with you, send service-related information and provide customer support.
- To send you information about future events and special offers, according to the “Marketing” section below.
- To administer and protect our business and services.
- To comply with our legal and regulatory obligations.
- To improve our services and customer experience.
Data We Collect about You
We may collect and process your personal data to operate our website and to provide the services you have requested. We may collect, use, store and transfer different kinds of personal data about you, which may include but are not limited to:
Information you provide to us
- Personal contact details: including name, email address, residential/postal address, phone number and country of residence.
- Family/Other contact details: including name, email address, residential/ postal address, phone number and country of residence.
- Financial data: including bank account, payment card and billing address.
- Transaction data: including details about payments from you and other details of services you have required from us.
- Interaction and correspondence: including the information you send us via email, survey, social media, customer service communications or other methods.
- Preferences and other data: age, dietary, accessibility, personal preferences and medical conditions.
- Professional Data in case of corporate booking: company working for and address, designation, colleagues.
Sources we collect your data from
- Directly from you: when you voluntarily provide this information to us (for example, when you contact us, interact with us on social media, visit us, or book to stay with us directly).
- Directly from the person who made the booking: if another person has made a booking on your behalf to stay with us, attend an event or otherwise visit us and has provided us with information about you in order to make the booking.
- From other publicly available sources: from time to time, we access and store information which is available from public sources including some personal data (for example, we may have access to information on your social media profile when you interact with us on any social media platform we use).
- From third party service providers or partners: we engage with third parties that provide services to us for specific functions and in certain instances, they will share personal data you provide to them with us.
Information we collect automatically
We may automatically collect the following information when you visit our website: your computer’s IP address, browser type and version, source of traffic and/or previous webpage before visiting our website, the pages visited and actions taken within our website, the time spent within our website, access times and dates, page response times, errors and other statistics and technology on the devices you use to access our websites, your location as part of website analytics.
Contact and Complaints
Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to hello@loumafarmandretreat.co.uk
You can contact our Data Protection Officer by using the contact details below:
Aphaia Ltd
The Brew
Eagle House
163 City Rd
London EC1V 1NR
Contact email: dpo@aphaia.co.uk
Contact telephone: (+44) (0)20 3917 4158
You may always launch a complaint regarding our processing of your data by contacting the UK Information Commissioner’s Office with ico.org.uk
June 2025
