Book Now (opens in a new tab)

Legal

Privacy Policy

This policy explains what happens to the information you give us through this website, and what happens to it afterwards. It is written to describe what this website actually does.

Last updated: 24 October 2026

On this page

About this policy

This policy covers this website. It does not cover what happens after you leave us to make a booking, and it does not set out the conditions that apply to a booking once you have made one — those are given to you when you book.

We have kept it in plain English and specific to what this website does. If anything here is unclear, please ask us.

Who operates this website

This website is operated by The Hermitage Plantation Inn Ltd., trading as Hermitage Nevis (“we”, “us”, “our”), the operator of The Hermitage.

Hermitage Road, Saint John Figtree, Charlestown, Nevis, St. Kitts & Nevis
Telephone: +1 869 469 3477
WhatsApp: +1 869 662 2575
Email: contactus@hermitagenevis.com

What you send us

There are four forms on this website. Each one is a way of contacting us, and none of them makes or changes a booking.

The enquiry form on our Contact page. We ask for the kind of enquiry you are making, your name, your email address and your message. You may add a telephone number if you would like us to call you.

The restaurant reservation request form. We ask which service you would like, the date and time you would prefer, how many adults and how many children are in your party, your name, your email address and a telephone number so we can confirm. You may tell us about dietary requirements and add any other note, such as the occasion. Both of those fields are optional and you decide what to put in them.

The wedding enquiry form. We ask what you are planning, your preferred date and whether it is flexible, roughly how many guests you expect, whether guests might stay at Hermitage and roughly how many, whether you are working with a wedding planner, where you are thinking of holding the ceremony, your country of residence, how you would prefer us to reply, your name, your email address, an optional telephone or WhatsApp number, and your message.

The gatherings enquiry form, for celebrations and group visits other than weddings. We ask what you are planning, your preferred date and whether it is flexible, roughly how many guests you expect, your country of residence, how you would prefer us to reply, your name, your email address, an optional telephone or WhatsApp number, and your message.

We do not ask for guest names, passport details, dates of birth, payment card details or any account password anywhere on this website. Please do not send any of those through a website form.

Each form has a tick box confirming that we may use your details to reply to you. We cannot accept a submission without it, because replying is the only reason we are asking.

What is collected automatically

Website analytics — only with your consent. We use Google Analytics 4, a service provided by Google, to understand how many people visit this website, which pages they read, which of our links they follow (such as our booking, telephone, email and WhatsApp links), how often a form’s confirmation message is shown, and roughly where our visitors come from. It runs only if you accept statistics cookies in the cookie banner shown on your first visit. Until you accept, Google Analytics is not loaded on this website and no analytics data is sent from it. If you decline, the site works exactly the same without it. Google Analytics does not receive your name, email address, telephone number or anything you type into a form. We have set it up with Google’s advertising features switched off, so it is not used for advertising. We do not use advertising tags, tracking pixels, session recording or any other measurement service on this website.

Two technical things do happen automatically:

  • A record of your request reaches our hosting provider. Like every website, ours runs on servers that keep short-term records of the requests they receive, including the internet address the request came from, the page requested and the time. These are used to serve the site, keep it fast and protect it from attack.
  • A protection against automated abuse. When you send one of our forms we store a one-way scrambled version of your internet address so that we can tell when the same device is sending an unusual number of submissions. We do not store your actual internet address, and the scrambled version cannot be turned back into it. We do not record which browser or device you used.

If you have accepted statistics cookies, Google Analytics also records the pages you view, the links you follow, when the confirmation message is shown after you send one of our forms (never what you wrote, and never your contact details), your approximate location worked out from your internet address, your type of device and browser, and the website that referred you. Google processes this on our behalf and may do so on servers in the United States or elsewhere. The confirmation-message count is approximate: the message can also appear for a submission that our spam checks later set aside.

Why we use your information

We use what you send us to reply to you, to arrange what you have asked for, to keep an accurate record of the request, and to answer questions about it afterwards.

We do not use enquiries, restaurant requests or wedding enquiries to send marketing. Sending us a form does not add you to a mailing list, and this website has no newsletter sign-up.

What happens when you send a form

  • Your submission is saved in this website’s own database, in a table that only our team can open. It is not published anywhere, it is not available through any public address, and it is not sent to our booking system.
  • An email copy is sent to the Hermitage team so we can act on it.
  • We normally email you a copy of what you sent, with a reference number, so you have a record. To protect against misuse, we do not send this copy when a submission looks as though it was sent automatically, or once three copies have been sent to the same email address within 24 hours. Your submission still reaches our team either way.
  • If a submission triggers the hidden trap built into each form, it is treated as automated spam and discarded, and nothing is recorded at all. A submission that passes the form’s checks but looks as though it may have been sent automatically is still saved and sent to our team, marked for review, so that a genuine enquiry is never lost.

Only administrators of the website can view, delete or export submissions.

Booking with us through Cloudbeds

We do not take bookings or payments on this website. When you choose “Book Now”, or any similar link, you leave the Hermitage website and go to our booking system, which is provided by Cloudbeds.

This website does not send Cloudbeds your name, your email address or anything you type into our forms, and there is no Cloudbeds script or cookie on any of our pages. Some of our booking links carry which type of accommodation you were looking at.

If you have accepted statistics cookies on this website, our Google Analytics measurement may add a measurement identifier to the booking link you follow. This identifier is used to recognise your browser for analytics. It lets your visit to our website and your visit to the booking pages be measured as one journey — for example, so that we can see which of our pages led to a booking. If you have not accepted statistics cookies, no measurement identifier is passed from this website.

The booking pages are a separate website run by Cloudbeds. They have their own cookies, their own measurement — including Google Analytics, which reports booking activity to us — and their own consent arrangements. The choice you make in our cookie banner does not carry across to the booking pages.

Once you are on the Cloudbeds booking pages, whatever you enter there — including your booking details and your payment information — is handled through Cloudbeds’ systems, and Cloudbeds’ own privacy and service terms apply to it. You can read the Cloudbeds privacy policy on their website. We receive your booking from Cloudbeds and use it to administer your stay.

Cookies and browser storage

This website does not use advertising cookies or any cookie that profiles you or follows you to other websites. The only optional cookies are the Google Analytics cookies described below, and they are set only if you accept them in the cookie banner. Until you make a choice, statistics cookies stay off and Google Analytics does not run. You can change your mind at any time using the Manage consent link at the foot of every page. Your choice is normally remembered for twelve months, after which we ask again, unless you or your browser clear the consent cookies sooner. A full list of the cookies used on this website is on our Cookie Policy page.

What does exist:

  • Consent cookies. When you answer the cookie banner, a small set of cookies whose names begin cmplz_ records what you chose, so that we do not ask again on every page. They record your choices and are not used to identify you. They are set to expire after twelve months, unless you or your browser delete them sooner.
  • A short-lived cookie after you send a form. When you submit one of our forms we set one cookie so that we can show you the confirmation message on the next page. It holds a random one-time code and nothing about you. It lasts five minutes.
  • A small technical note in your browser’s own storage. The website software records whether your browser can display certain characters. It is cleared when you close the tab and contains nothing about you.
  • Hosting and security cookies. Our hosting provider uses a security and performance network in front of this site, which sets its own strictly necessary, short-lived cookie (named __cf_bm, typically lasting about 30 minutes) to tell real visitors from automated traffic. We do not control its contents and cannot read it.
  • Analytics cookies — only if you accepted them. Google Analytics sets cookies named _ga and _ga_14B8RFGMM5. Google Analytics uses them to distinguish browsers and visits; the identifier in them is generated by Google Analytics and is not your name or contact details. They are set to expire after up to two years, and some browsers shorten this. If you withdraw your consent using Manage consent, Google Analytics stops sending data from this website straight away and we ask your browser to delete these cookies. Browser settings can occasionally prevent that; you can also delete them yourself at any time in your browser settings.
  • Administrator cookies. People who sign in to manage the website receive standard sign-in cookies. These never apply to ordinary visitors.

You can block or delete cookies in your browser settings. Blocking them will not stop you using this website, though you may not see the confirmation message after sending a form.

Service providers

We use a small number of companies to run this website, and they can come into contact with the information described above:

  • Our hosting provider, which stores this website and its database, and the security and delivery network it uses in front of the site.
  • Our email provider, which delivers the enquiry emails and holds them in the mailbox our team works from.
  • Google (Google Analytics 4), which processes website-usage statistics on our behalf, only after you have accepted statistics cookies.
  • Website maintenance and technical support providers, who may have limited access to website systems where that is necessary to maintain, secure or support the site.
  • Cloudbeds, once you leave us to book, as described above.

We do not sell personal information, and we do not share it with anyone for their own marketing.

Where your information is held

This website and its database are hosted in the United States. Our hosting provider’s own service records are also held there. If you contact us from anywhere else, the information you send will therefore be stored outside St. Kitts & Nevis. Cloudbeds states that information handled through its systems may be transferred to the United States or elsewhere. If you accept statistics cookies, Google Analytics data is processed by Google, which may transfer it to the United States or other countries where Google operates.

We are telling you where things are held. We are not making promises about the legal protections that apply in each place.

How long we keep information

Enquiries, restaurant requests, wedding enquiries and gatherings enquiries stored on this website are normally kept for up to 12 months. After that they are removed by a scheduled clean-up that runs once a day, so a record is removed on the next run after it passes 12 months rather than at a precise moment.

Email copies of those messages are normally kept in the relevant mailbox for up to 12 months. Mailboxes are managed by our team rather than emptied automatically.

Information may be kept for longer where it has become part of something that is still live or that we are required to keep — an active booking, a wedding or event arrangement, a continuing guest relationship, or our accounting, legal and operational records.

Our hosting provider takes an automatic daily backup of the whole site, and each daily backup is kept for fourteen days. A copy of information can therefore remain inside a backup for up to fourteen days after we delete it from the live site. We cannot remove an individual record from a backup that has already been taken.

Booking records are held in our booking system and in our own business records for as long as we need them for your stay, for our accounts and for anything the law requires.

Keeping information safe

We take reasonable steps appropriate to a website of this kind. Access to submissions is limited to website administrators. The site runs on managed hosting behind a security network, over an encrypted connection. Every form is checked on the server and protected against automated abuse, and we store a one-way scrambled version of the sending address rather than the address itself. Backups are taken daily.

No website can promise complete security, and we do not.

Asking about your information

If you would like to know what we hold about you, have something corrected, or ask us to delete an enquiry you sent us, please write to Management of Hermitage Nevis at contactus@hermitagenevis.com. Tell us enough for us to find the record — the reference number from the email we sent you is the quickest way. We may need to check who you are before we act.

We will do what we reasonably can, subject to anything we have to keep for an active or recent booking, for our accounts, or because the law requires it. As explained above, we cannot reach into a backup that has already been taken; those expire on their own within fourteen days.

If you are unhappy with how we have handled a request, please tell us and we will look at it again.

Children

This website is not aimed at children and none of our forms asks a child for anything. The only thing we ask about children is how many are in your party for a restaurant reservation, which is a number and nothing more — no names, no ages, no other detail.

If you tell us about children as part of a booking or an enquiry, we use that information only to arrange your stay or your table. If you believe a child has sent us personal information through this website, please contact us and we will remove it.

Our pages link to a small number of other sites: our booking system, WhatsApp, our website developer, and a few Nevis tourism and heritage sources. Once you follow one of those links you are on someone else’s website, with its own terms and its own privacy practices. We do not control them.

Changes to this policy

If what we do changes, we will change this policy before or at the same time — not afterwards. In particular, if we ever add advertising measurement or a newsletter, this policy and our cookie position will be reviewed and updated first, and the date at the top of this page will change.

Contacting us

Privacy questions and requests may be sent to Management of Hermitage Nevis at contactus@hermitagenevis.com, or by post to Hermitage Road, Saint John Figtree, Charlestown, Nevis, St. Kitts & Nevis. You can also telephone +1 869 469 3477 or use our contact form.

See also our Website Terms and Conditions.