Ocean Holidays Cornwall Limited Privacy Notice
We take your privacy very seriously. Please read this privacy notice carefully as it contains important information on who we are, how and why we collect, store, use and share your personal information. It also explains your rights in relation to your personal information and on how to contact us or supervisory authorities in the event you have a complaint
Who we are
We are Ocean Holidays Cornwall Limited, a private limited company registered in England and Wales under company number 10995871.
Registered address: 7 West Stables, Foundry Lane, Hayle, TR27 4DW
Data Protection Officer: Sam Marnham.
Email address: firstname.lastname@example.org.
Telephone number: 01736 806173.
Postal Address: 7 West Stables, Foundry Lane, Hayle, TR27 4DW.
The personal information we collect and use
We collect, use and are responsible for certain personal information about you; we are the ‘data controller’ of that personal information.
When we do so we will ensure that your personal information is handled in accordance with Data Protection Legislation including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
By contacting us in connection with placing a booking of holiday accommodation, you acknowledge that we may collect, use and transfer your personal information as set out in this policy. We reserve the right to change this policy from time to time and will update you whenever such changes are made.
Information collected by us
In the course of providing our services we collect the following personal information when you provide it to us:
- Your name, date of birth, address, email address and telephone number;
- Your property’s address;
- Emergency contact information;
- Payment-related information;
- Information about your preferences and interests;
- Dietary requirements; and
- Any other information relevant to the particular services we are providing.
Information collected from other sources
We are unlikely to collect data about you from other sources. We will notify you if this changes.
How we use your personal information
We use your personal information to:
- Provide our services to you and manage and fulfil our contract with you;
- Personalise and tailor services for you;
- Administer our business and maintain our internal records;
- To manage our relationship and communicate with you;
- To contact you with offers or information that we think may be of interest to you;
- Comply with our legal obligations; and
- Improve our services.
Who we share your personal information with
We may share your personal information with local service providers or any other business partners who we work with to provide the particular services to you. Due to the nature of our services, these providers may change and may be bespoke to the services we are providing to you.
We may also share your personal information with the owner of the holiday property you have booked, if we deem this is necessary.
We may also share personal information with law enforcement or other authorities if required by applicable law, where it is necessary to administer the working relationship with you or where we have another legitimate interest in doing so.
We may also share your personal information with third parties who provide services on our behalf. For example, we may use service providers to authorise and process payments or send email or other communications. Your personal information may be maintained and processed by service providers in the UK. For information about the policies or practices of our service providers from time to time, please contact us at the email address above. Our service providers are given the information they need to perform their designated functions, and we do not authorise them to use or disclose your personal information for their own purposes.
How long your personal information will be kept
We will hold the information for no longer than is necessary taking into account our legitimate interest.
Reasons we can collect and use your personal information
We need all the categories of information listed above primarily to allow us to perform our contract with you and to enable us to comply with legal obligations. In some cases, we may use your personal information to pursue legitimate interests of our own or those of third parties, provided your interests and fundamental rights do not override those interests.
Transfer of your information out of the EEA
We will not transfer your personal data outside of the European Economic Area.
Your legal rights
Under the GDPR, you have a number of important rights free of charge. In summary, those include rights to:
- fair processing of information and transparency over how we use your use personal information
- access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address
- require us to correct any mistakes in your information which we hold
- require the erasure of personal information concerning you in certain situations
- receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations
- object at any time to processing of personal information concerning you for direct marketing
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you
- object in certain other situations to our continued processing of your personal information
- otherwise restrict our processing of your personal information in certain circumstances
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the GDPR.
If you would like to exercise any of those rights, please:
- email, call or write to us;
- let us have enough information to identify you;
- let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill); and
- let us know the information to which your request relates, including any reference numbers, if you have them.
Keeping your personal information secure
We have appropriate security measures in place to prevent personal information from being accidentally lost, or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.=
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
How to complain
We hope that we can resolve any query or concern you raise about our use of your information.
The GDPR also gives you right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/.
Changes to this privacy notice
We may change this privacy notice from time to time.
How to contact us
Please contact us if you have any questions about this privacy notice or the information we hold about you.