The customer service was good before our arrival, as we were expecting to be later than 11 pm (reception is closed after this time). We arranged a key collection for when we arrived, which was straightforward. We then located our room, and the door was open. We knocked and found nobody in here- strange. The shower was dripping, and the base was soaked as if someone had had a shower, and the bathroom mirror was dirty (toothpaste spat on). I also found stains on the sheets- unsure if the room was cleaned before our arrival or if this is standard. Then, later discovered the door didn't lock and the key card didn't work. As there was nobody on reception, we couldn't complain/switch rooms. Luckily, there was a lock inside that worked, but this meant my partner had to move the bags from the car himself, as we didn't want to leave the room unlocked with our belongings in. We had an early morning flight, so we left at 4am, not sleeping or using the facilities, so we can't comment on these. When we left, we passed reception to drop our key card, and whilst looking for the box noticed that there were sheets left on the side with details of every customer staying and what room they were in. Our room was a different number, so unsure if last minute we were changed to a dodgy room that didnt lock? Regardless, this is a massive GDPR issue. We have complained to the hotel directly and are awaiting a response.