version 1 dated 26.07.22
Thank you for visiting our site.
This policy governs the collection, storage and use of personal information collected by Swansea Valley Holiday Cottages through our main website walescottages.com, via a telephone conversation or through our normal business activity of operating holiday cottage rental properties. It also describes your choices regarding this information.
We are committed to ensuring the best standards of practice in all our activities. Visitors to our web site can be assured that the protection of privacy and confidentiality are given the highest priority. All personal information is collected, held and used in strict compliance with the Data Protection Act 1998. Any reference in this policy to information or personal information is to “personal data” as defined under the General Data Protection Regulations.
2. WHO WE ARE?
We are Swansea Valley Holiday Cottages. We operate a cluster of nine self-catering holiday cottages in central South Wales. Our main website is walescottages.com All references to “we” “our” “us” or “company within this policy or within any opt-in notices are deemed to refer to Swansea Valley Holiday Cottages. Our head office is at Plas Farm, Cilybebyll, Pontardawe, Swansea, SA8 3JQ.
3. DATA CONTROLLERS
For your reference the data controller is: Swansea Valley Holiday Cottages, Plas Farm, Cilybebyll, Pontardawe, Swansea, SA8 3JQ. The data controller representative is Richard Bowen who can be contacted at [email protected]
4. PERSONAL INFORMATION YOU PROVIDE
4.1 Individuals seeking to book a cottage
If you are seeking to book one of our holiday cottages, we will usually collect the minimum information required to fulfil your needs. This typically includes your name, contact details, payment details, names of other members of your party and any specific requirements that you may make to customise your holiday. We will also record transaction data, including details about payments to and from you. We use Payment Card Industry compliant third party payment services and we do not store your credit card information.
4.2 Individuals who join our mailing list
If you sign up to join our mailing list we will collect your name and e-mail address, together with your consent to receive communications from us. From time to time we send a newsletter with details of our holiday cottages, offers and tourist information. You may remove consent at any time by using the unsubscribe button on any of our e-mail communications.
If you are, or work for, a supplier to Swansea Valley Holiday Cottages, then we will collect the minimum amount of business specific personal data, usually your name, business role and business contact details to enable us to manage the business relationship.
Our website is not targeted at children but in any event personal information will not knowingly be collected from children under fourteen years without parental consent.
5. PERSONAL INFORMATION CREATED WHEN YOU USE OUR SERVICES
5.1 Website Analytics
We do not collect any personal information from visitors to our website other than information that is knowingly and voluntarily given. Anonymous information is collected via Google Analytics, such as the number of visitors to the website in a given period or details of properties and dates selected for online bookings, but it is purely statistical and cannot be used to identify an individual user. The information we collect from analytics helps us understand what parts of our sites are doing well, how people arrive at our site and so on. Like most websites, we use this information to make our website better. Any data collected by Google Analytics is retained within our account. You can learn more about Google Analytics or opt out if you wish.
5.2 Cookies and third-party technologies
5.3 Holiday Cottage WiFi
The free wireless network system in our holiday cottages logs client computer MAC addresses (and the computer name if given in the DHCP lease file) and application usage. This helps us to track usage through our network in terms of aggregate bytes up and down so that we can understand how the network(s) is being used and adjust upload and download throttles accordingly. We do not track, store or save anything else.
6. INFORMATION WE SHARE
6.1 Booking Engine – Supercontrol
We use SuperControl to take bookings through our website. We do this to provide a reliable and secure booking process. Any personal information you share when making a booking will be shared with SuperControl in order to process it. You can learn more about SuperControl and their approach to privacy.
6.2 Online Payments – Secure Trading
We use a third party payment processor Secure Trading. When you provide payment details on our website they are sent to Secure Trading directly for processing. Less sensitive information, such as your name, email address, and address will be shared with us in order to processes your purchase. You can learn more about Secure Trading and their approach to privacy.
7. HOW WE USE YOUR INFORMATION
We will only use your personal data in the following circumstances:
7.1 To fulfil a contract
For example, we need to process your Contact Data and Transaction Data in order to collect and keep record of your payment for our services.
7.2 Legal proceedings and requirements
We may use the information we collect to investigate or address claims or disputes relating to your use of our services, or as otherwise allowed by applicable law.
7.3 Where we have your consent
8. DATA SECURITY
We take appropriate measures to safeguard the information we hold from unauthorised access or improper use. Our database is stored in a secure, password protected location. Only users authorised by us have access to this data. We take all reasonable measures to ensure that the information we hold is accurate. In particular we use reliable collection methods and destroy or convert to an anonymous form, any out-of-date data.
9. THINGS YOU CAN DO
You have legal control over your personal data, and so you may at any time:
- get a copy of any personal data we hold about you
- have any incorrect, inaccurate or incomplete data corrected
- ask that personal data be erased when it’s no longer needed
- ask that your data is not used for marketing purposes