Privacy and external services

Haldane's fonts are local. Its toolkit makes no automatic third-party requests on visitor pages with the default setup.

Default behaviour

The theme and toolkit include no visitor analytics, tracking pixels or booking-engine API connection. Fonts, scripts, styles and bundled images are served from your WordPress site. The default booking engine is Enquiry only.

The browser requests calendar data and enquiry form tokens from your own WordPress site. Booking selections are kept in the visitor's sessionStorage for the current browser session. The toolkit does not set a separate tracking cookie.

WordPress itself, your host and other plugins have their own behaviour. Features such as avatars, embedded content, analytics or an added newsletter service can introduce other requests. Review the whole site after adding services.

Map and directions

The Hotel map block does not contact OpenStreetMap until the visitor selects Load map. After that click, its iframe sends connection and browser information to OpenStreetMap, including the visitor's IP address. The block does not remember a lasting map-consent choice.

A Get directions link is separate. Following it opens your configured directions service or OpenStreetMap. The destination then receives an ordinary web request. Explain any map or directions service you choose in your site's privacy notice.

Booking providers

Opening the booking dialog does not contact Cloudbeds, SiteMinder, Little Hotelier or Mews. When the guest submits the booking selection, the browser opens the configured provider link with dates, guest counts and supported currency, language or promotion settings. The provider also receives the normal connection and browser information for that visit.

A Custom URL template sends the values represented by the tokens you include. A room-specific direct booking link follows the URL you set. Your booking provider manages any further personal details, payments, cookies and reservation records under its own terms.

The MotoPress preset sends guests to the configured Search Results page on your own site. Any payment gateway, channel service or email provider used by MotoPress is configured separately.

Enquiries and email

On submission, the toolkit sends the guest's name, email, optional phone, message and selected stay details through your WordPress mail system to the configured recipient. It does not save a submission record in the website database.

Spam protection temporarily stores a salted hash of the connection IP address, an attempt count and an expiry for up to one hour. The toolkit does not store the raw address. Your host and security tools may keep their own access logs.

Your mailbox and mail delivery service may retain the enquiry. If an SMTP plugin records message contents, include that too when describing storage and retention. Review the suggested enquiry text in Settings → Privacy and complete it for your own operation.

Services you can choose as the site owner

Installing recommended directory plugins contacts WordPress.org. This is an administrator-initiated installation. The default demo importer copies local placeholder illustrations. If you configure a remote demo-media source, the server requests JPEG files from that source when you run the import.

Adding remote fonts, third-party embeds, analytics or subscription forms changes the site's behaviour. Haldane's supplied newsletter pattern is a link to an email enquiry until you connect your own service.

Review before publication

• Replace the draft privacy policy with wording for your hotel and services.
• Identify your booking, mail and map providers where used.
• Explain how long you keep enquiries in mailboxes and logs.
• Give guests an appropriate contact for privacy requests.
• Check the public site in a private browser window after all plugins and embeds are configured.

Deleting the toolkit is not an enquiry-mail deletion process. Its Advanced setting can remove its own options and temporary rate-limit data on uninstall, but mailboxes, third-party records, room content and media remain separate.