The type of personal information we collect
We currently collect and process the following information:
When you browse our website we collect the Internet protocol (IP) address used to connect your computer to the Internet.
If you perform a transaction such as a booking or a subscription on our website then we collect additional information such as name, email and phone number.
We may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page.
How we get the personal information and why we have it
Most of the personal information we process is provided to us directly by you when you make a booking, contact us or subscribe to our newsletter.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
Legitimate Interest: If you contact us it is clearly in your legitimate interest for us to process your data and respond to your enquiry. We may also occasionally send you informative updates that are relevant to your business needs.
Consent: We collect explicit consent when customers subscribe for our marketing newsletter.
How we store your personal information
Information you supply is stored securely on cloud-based and local servers. Please take care not to share sensitive information in normal correspondence as this can never be guaranteed to be 100% secure.
Our payment gateway adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
Sharing of Data
We use Google analytics to monitor anonymous browsing behaviour when cookies are enabled.
Retention Of Data
We will be retaining data until the end of 2023 when we will undergo a review. In that review we will determine what data we should retain for lawful purposes or for the customer’s legitimate interest, and what data should be deleted.
Why are cookies essential?
Cookies let users navigate around sites and (where appropriate) let us tailor the content to fit the needs of our site’s visitors. Without cookies enabled we can’t guarantee that the website and your experience of it are as we intended it to be.
None of the cookies we use collect your personal information and they can’t be used to identify you.
Types of cookies
The length of time a cookie stays on your device depends on its type. We use two types of cookies on our websites.
Session (Transient) cookies: these cookies are erased when you close your browser, and do not collect information from your computer. They typically store information in the form of a session identification that does not personally identify the user.
Persistent (Permanent/Stored) cookies: these cookies are stored on your hard drive until they expire (i.e based on a set expiration date) or until you delete them. These cookies are used to collect identifying information about the user, such as Web surfing behavior or user preferences for a specific site.
To find out more on how to manage and delete cookies, visit www.aboutcookies.org.
For more details on advertising cookies, and how to manage them, visit youronlinechoices.eu (EU based), or aboutads.info (US based).
Your data protection rights
Under data protection law, you have rights including:
Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us by email if you wish to make a request at firstname.lastname@example.org.