Last reviewed in August 2026
The short version. You can read every page of this site without telling us anything. The only personal data we hold is what you hand over on purpose, which is an address if you join the club and an address plus a question if you write to the desk.
No account, no sign in, no profile, no questionnaire about what you like, and nothing to log into. Pages are counted, which is described under measurement further down, and the counting holds nothing that ties one of your visits to the next, so no picture of you is built up over time.
Joining is double opt in. You type an address, one email goes out with a link, and nothing is added anywhere until you follow that link. The link stops working after seven days and an address that was never confirmed falls out on its own.
Three things are stored. The address you typed. The language of the page you were reading, which decides which of the four versions of the letter you get. The page you were on when you joined, which tells us which part of the site is worth writing more of. Nothing else.
Brevo is our email processor. Your address sits on their systems as well as ours and they handle it under our instruction, for our sending and for nothing of their own.
Every letter carries a link at the foot to leave, and one click is enough. After that we keep the address only for as long as the mail service needs it to be sure nothing else goes out to you.
The form stores your question, the address to reply to and the page you wrote from. It is kept so the question can be answered and so we can see which questions come back often enough to deserve a page of their own. It is never added to the club list and it is never passed on.
We count pages, countries and where a visit came from, and the count is aggregate. It carries no name, no email address and no postal address, it is not joined to anything you typed into a form, and it is neither sold nor shared. Beyond that, our host keeps the ordinary server records needed to serve a page and to keep the site standing.
The counting is done by a small script we load from our own measurement server. It is our software on our machine, not an advertising network and not a third party who gets to keep a copy. It writes nothing to your browser, so there is no cookie for it and no identifier stored on your device, and that is why a second visit is not recognised as the same person.
What it sends is the page you are on, the page that sent you here if there was one, the campaign name if the link you followed carried one, your screen size, your time zone and whether your browser asks for a dark theme. Your address reaches our server the way it reaches any server you ask for a page, and it is not written down. We also count the click that leaves for a booking platform, because that click is the only thing this site earns from and counting readers without it would tell us nothing worth knowing.
A booking link takes you off this site. From that click the destination platform applies its own privacy policy and its own cookies, and we have no view of what you do there, no access to your booking and no access to your payment details.
The link carries our affiliate identifier so that the booking is attributed to us. We earn a commission on it and your price is the same either way. The identifier says which site sent the visit and says nothing about who you are.
None of ours, and two preferences kept in your browser storage. The full list, what each entry is for and how long it lasts has its own page. Cookies and storage
When you press Save, this browser keeps only the editorial keys for the experiences, hotels and places you chose. The shortlist is not attached to a name, email address or account, and it is not sent to Linen Harbour. Removing an item or clearing this site's browser data removes it.
You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, ask for a copy in a portable form, and object to a use you did not expect.
All of it goes through the same form, which is the only route in. Say what you want done and give the address the request concerns, because that address is the only key we have to find a record. The desk
If our answer does not satisfy you, the data protection authority of the country you live in will take a complaint about it.
An unconfirmed club address expires by itself after seven days. A confirmed address stays until you leave the list. A question to the desk is kept while it is useful as a record of what readers ask, and it comes out on request.
The date at the top is the date of the last review, and a change takes effect when it appears here.
Insurance
Country, activity, altitude, evacuation and cancellation can change the answer. We are not a broker. This is a quiet pre-booking checklist.