1. What personal information are we likely to collect about you?
2. How do we use your personal data and on what basis?
When you visit our Website, whether to browse our content or make a reservation (the Service), we may use the personal information that you provide for the following purposes: Processing: Account creation & administration Purpose: To enable you to use the Service, to contact you with information about your account and the Service, to enable you to make reservations and to enable you to raise support queries. Lawful Basis: To allow us to perform our Service contract with you. Processing: Transactional correspondence Purpose: To notify you that your registration for an account is successful, and to provide information in relation to your use of the Service, including confirmation of reservations. Lawful Basis: To allow us to perform our Service contract with you. Processing: ID verification Purpose: To confirm your identity when registering for an account. Lawful Basis: Legitimate interests of our own or of third parties to operate our business Processing: Customer support Purpose: To respond to your support queries. Lawful Basis: To allow us to perform our Service contract with you. Processing: Service usage monitoring (including Analytics) Purpose: To monitor performance of the Service, identify errors, and improve the Service. Lawful Basis: Legitimate interests of our own to operate our business Processing: Lead Generation Purpose:To market the Service to prospective customers and business partners. Lawful Basis: Legitimate interests of our own or of third parties to operate our business Processing: Marketing Purpose: To market the Service to prospective customers and business partners. Lawful Basis: Legitimate interests of our own or of third parties to operate our business Processing: Targeted Marketing Purpose: To understand your interests so that we can render more relevant advertisements to you through online advertising platforms including social media. Lawful Basis: Consent Where we rely on legitimate interests as a lawful basis for processing your personal data, we will always consider whether or not our interests are overridden by your rights and freedoms.
3. Do we share your personal information with anyone else?
4. Your choices and rights in relation to personal data which we process relating to you
You have the following rights over the way we process personal data relating to you. We aim to comply without undue delay, and within one month at the latest: to ask for a copy of data we are processing about you and have inaccuracies corrected; to ask us to restrict, stop processing, or to delete your personal data; to request a machine-readable copy of your personal data, which you can use with another service provider. Where it is technically feasible, you can ask us to send this information directly to another provider if you prefer; and to make a complaint to a data protection regulator. You may contact them at: https://ico.org.uk/concerns/ To make a request in relation to any of the aforementioned rights, please email us at firstname.lastname@example.org You are under no statutory or contractual obligation to provide any of your personal data to us. However, if you do not provide the personal information requested, we will not be able to provide you with the services that we offer. If you are unhappy with the way that we are processing your personal data or if you’d prefer not to receive certain marketing information or limit the use of your personal information to a particular purpose, please let us know. The best way to bring this to our attention is by emailing us at email@example.com.
We do not knowingly use the Website to solicit data from or market to children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with information or may be receiving communications from us without consent of a parent or guardian, we ask that this be brought to our immediate attention. We will make it our priority to address this situation and delete information relating to a child as soon as practicable. In such an event, please contact us at firstname.lastname@example.org
We will take appropriate technical and organisational measures to ensure a level of security appropriate to the risk that could be encountered via the use of our Website and services. All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone. Please be aware that, while we make the security of our Website and your personal information a high priority, no security system can prevent all security breaches. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
In accordance with data protection laws and good commercial practice, we do not retain data in a form that permits identification of the person(s) to whom it relates for any longer than is necessary. Once the purpose for which information has been collected has been fulfilled, we will either permanently delete your personal information or remove all identifiers within it so that it is no longer personal data. We may use such anonymised data for research and/or business analysis purposes. Where you have provided us with personal information in order to set up an account with us, we will retain those details for as long as your account remains active. Where we obtain your personal data in relation to the use or purchase of our services, including VAT or invoicing information, we are obligated by law to keep this for a minimum of 6 years.
8. International Data Transfers
Our servers are located in the European Union and the information that we collect directly from you will be stored in these servers. We may also transfer your personal data to our third-party service providers, many of whom may be located outside of the EU, operate from multiple locations including non-EU based operations or engage sub-processors located outside the EU, including Postmark (based in the US). There are agreements in place with all of our third-party service providers to ensure that those parties process personal data using appropriate safeguards that meet the requirements of data protection laws.
9. Changes to this Policy
This policy may be updated from time to time. We will notify you of any changes to our policy by posting the new policy on our Website. You are advised to consult this webpage regularly for any changes to the policy.
10. Contact Us
Questions, comments and requests in relation to this policy are welcome and should be sent to email@example.com.