top of page

Privacy Policy

​

Data Protection Policy for Caravan Holiday Rentals 

This policy outlines how Mid Wales Caravan Holidays handles personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

​

1. Introduction

[Your Company Name] is committed to protecting the privacy of its customers, employees, and any other individuals whose personal data we process. This policy ensures that personal data is collected, stored, used, and disclosed in accordance with data protection principles.

​

2. Definitions

  • Personal Data: Any information relating to an identified or identifiable living individual ('data subject'). This includes names, addresses, email addresses, phone numbers, booking details, payment information, and any other information that can directly or indirectly identify an individual.

  • Processing: Any operation performed on personal data, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

  • Data Controller: The entity that determines the purposes and means of processing personal data. In this case, [Your Company Name].

  • Data Subject: The individual to whom personal data relates.

  • Third Party: Any natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

  • ​

3. Principles of Data Processing

We adhere to the following data protection principles:

  • Lawfulness, Fairness, and Transparency: We process data lawfully, fairly, and transparently. You will be informed about how your data is used.

  • Purpose Limitation: Data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.

  • Data Minimisation: We only collect data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed.

  • Accuracy: Personal data is kept accurate and, where necessary, up to date.

  • Storage Limitation: Data is kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the data is processed.

  • Integrity and Confidentiality: Data is processed in a manner that ensures appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

  • Accountability: We are responsible for and must be able to demonstrate compliance with the data protection principles.

  • ​

4. Lawful Basis for Processing

We will only process your personal data where we have a lawful basis to do so. This may include:

  • Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., marketing communications).

  • Contractual Necessity: Where processing is necessary for the performance of a contract with you (e.g., booking a caravan holiday).

  • Legal Obligation: Where processing is necessary for us to comply with the law.

  • Legitimate Interests: Where processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms.

  • ​

5. Types of Data Collected

We may collect the following types of personal data:

  • Contact Information: Name, address, email address, phone number.

  • Booking Information: Dates of stay, caravan choice, number of guests, special requests.

  • Payment Information: Bank details, credit/debit card information (processed securely via a third-party payment provider).

  • Identification Information: For age verification or other legal requirements.

  • Communication Records: Correspondence with you via email, phone, or other means.

  • Website Usage Data: IP addresses, browser type, pages visited (collected via cookies and similar technologies).

  • ​

6. How We Use Your Data

Your personal data will be used for the following purposes:

  • Processing bookings and managing your holiday rental.

  • Communicating with you regarding your booking, enquiries, or feedback.

  • Processing payments and managing accounts.

  • Complying with legal and regulatory obligations.

  • Improving our services and website.

  • Marketing and promotional activities (where consent has been given).

  • ​

7. Data Sharing and Disclosure

We will not sell, rent, or trade your personal data to any third parties for marketing purposes. We may share your data with:

  • Service Providers: Third parties who provide services on our behalf, such as payment processors, IT support, or marketing platforms. These providers are contracted to process data only according to our instructions and in compliance with data protection laws.

  • Legal and Regulatory Authorities: Where required by law or to protect our legal rights.

  • Insurers or Emergency Services: In the event of an incident or emergency.

  • ​

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. This includes:

  • Secure storage: Encrypted databases and secure physical storage where applicable.

  • Access controls: Limiting access to personal data to authorised personnel only.

  • Regular security reviews: Monitoring and updating our security measures.

  • Secure payment processing: Utilising reputable and secure third-party payment gateways.

9. Your Rights

You have the following rights regarding your personal data:

  • Right to Access: To request a copy of the personal data we hold about you.

  • Right to Rectification: To request correction of inaccurate or incomplete data.

  • Right to Erasure ('Right to be Forgotten'): To request deletion of your personal data under certain circumstances.

  • Right to Restriction of Processing: To request that we limit the processing of your data.

  • Right to Data Portability: To receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

  • Right to Object: To object to the processing of your data for direct marketing purposes or where processing is based on legitimate interests.

  • Rights related to Automated Decision-Making and Profiling: To not be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects concerning you.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month.

10. Data Retention

We will retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. For example, booking and financial records will be retained for a period required by tax and accounting regulations.

​

11. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance your user experience, analyse website traffic, and for marketing purposes. You can manage your cookie preferences through your browser settings.

12. Policy Updates

​

This Data Protection Policy may be updated from time to time to reflect changes in legislation or our business practices. Any updates will be published on our website.

13. Contact Us

​

If you have any questions or concerns about this policy or how we handle your personal data, please contact: Mid Wales Caravan Holidays, 07592341365

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, if you are not satisfied with our response to your concerns. You can find more information on their website: https://ico.org.uk/

bottom of page