1. Introduction
NINE OAKS FISHERIES Holiday Centre Privacy Policy
Nine Oaks Fisheries respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how we look after your personal data and tell you about your privacy rights and how the law protects you. This privacy notice aims to give you information on how we collect and process your personal data through your use of our facilities.
It is important that you read this privacy notice together with our website privacy notice and any fair processing notice we may provide on specific occasions when we are collecting or processing your personal data. This privacy notice supplements the other notices and is not intended to override them.
2. Controller
Nine Oaks Fisheries is the controller and is responsible for your personal data in relation to this privacy notice. If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the details shown in paragraph 14 below.
3. Third Parties
We shall never disclose your personal data to third parties without your express written permission. We will provide links on our invoices to third parties for you to make payments for our products and services. For example, we use Stripe to collect credit card, debit card, Apple Pay and Google Pay payments. This is to ensure your card payment details have the utmost protection, even from us.
Clicking on those links or enabling those connections will allow third parties to collect financial data about you. We do not control these third party sites and are not responsible for their privacy policies or statements. When you utilise these links, we encourage you to read their privacy notices.
4. About the information we collect and hold
Personal data or personal information means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use and store different kinds of personal data about you.
We seek to ensure that our information collection and processing is always proportionate. We will notify you of any changes to information we collect or about the purposes we use it for.
Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example to provide goods or service). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.
5. How we receive personal data about you
We use different methods to collect data from and about you including through:
- 5.1 The Contact Form on our website
- 5.2 Direct interactions. You may give us your identity, contact information andfinancial data when booking holidays or fishing by post, phone, email orotherwise.
- 5.3 Automated technologies or interactions. You may leave personal data on ourtelephone messaging service.
- 5.4 Third parties may pass us your personal data to contact you.
- 5.5 Contact, financial and transaction data from providers of technical, payment anddelivery services.
6. How we use your personal information
The main purpose or activities for which we process your personal data include the following:
- 6.1 To register you as a customer
- 6.2 To provide you with our products and services
- 6.3 To manage payments, fees and charges and to collect and recover money owedto us
- 6.4 To communicate with you and manage our relationship
- 6.5 To provide you with any updates
- 6.6 To notify you about any changes to our terms and privacy policy
- 6.7 To administer and protect our business, including troubleshooting, data analysis,testing, system maintenance, support, reporting and hosting of data. This mayinclude third party IT and system administrators
- 6.8 To make suggestions and recommendations to you about products and servicesthat may be of interest to you
- 6.9 To use data analytics to improve our products and services
Should we need to share your information with other parties, if possible it will be anonymised. If this is not possible, we will notify you and will explain the basis we need to share your data. The third party will be bound by confidentiality clauses.
We may process your personal data without your knowledge or consent in compliance with the above rules where this is required or permitted by law. For example, HM Revenue & Customs, Regulators and Accountants.
You have the right to withdraw your personal data at any time.
Should we choose to sell, transfer or merge parts or all of our business or our assets, then the new owners may use your personal data in the same way as set out in this privacy policy.
7. Marketing & Promotional Offers
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. You will receive marketing communications from us if you have opted-in to receiving information from us.
We may use your identity, contact and product usage data to form a view on what we think may be of interest to you. This is how we decide which products and services may be of interest to you.
8. Opting Out
We will obtain your express opt-in consent before we send you any marketing communications.
Should you wish to withdraw your consent after you have opted-in, you can contact us at any time using one of the methods listed in section 14 of this Privacy Notice and we will remove you from our marketing list.
Where you opt out of receiving marketing communications, this will not apply to personal data provided to us as a result of a product or service purchase or other transaction.
9. Retention Periods
We keep your information during and after your custom with us for no longer than is necessary for the purposes for which the personal information was intended. This may include for the purposes of satisfying any legal, accounting or reporting requirements.
To determine the appropriate retention period for your personal data, we consider the amount, nature and sensitivity of the data along with the potential harm it could cause should there be an unauthorised access or disclosure. We will only obtain the minimum data possible to achieve the delivery of our products and services.
Where possible, we will anonymise your personal data so that it cannot be associated with you, in which case we may use such information without further notice to you.
10. Photographs
You may participate in the taking of photographs whilst on the premises which we may use on our social media profiles. Should you wish to withdraw your permission for us to use a photograph with you in it, please contact us using one of the methods listed in Section 14 of this Privacy Notice and we will withdraw it as soon as possible.
11. Your Rights
You can request access to your personal information (commonly known as a data subject access request). This enables you to receive a copy of the personal information we hold about you.
You can request a correction of any personal information we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
You can request an erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to hold it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
You can object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
You can request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you. For example, you may want us to establish the accuracy or the reason we are processing your personal data.
You can request the transfer of your personal information to another party.
You can withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdrew your consent. If you withdraw consent, we may not be able to provide certain products and services to you. We will advise you if this is the case.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal information, or request that we transfer your information to a third party, please contact us using the details shown in Section 14 below.
11.2 No fee usually required
You will not have to pay a fee to access your personal information or to exercise any of your other rights. However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
11.3 What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information, or to exercise any of your other rights. This is another appropriate security measure we take to ensure that personal information is not disclosed to any person who has no right to receive it.
12. Keeping your personal information secure
The information you supply to us will be held on our cloud systems and hosted by approved providers.
We have appropriate security measures in place to prevent personal information being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business reason to know it. Those processing your personal information will do so in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you, and any applicable regulator, of a suspected data security breach where we are legally required to do so.
13. Changes to the Privacy Notice and your duty to inform us of any changes This version was last updated on 17th January 2023.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
14. Contacts & Complaints
If you have any questions about how we treat and protect your personal information and protect your privacy, or if you have any comments, wish to seek to exercise any of your rights or to complain, please use one of the following methods:
Write to us: Nine Oaks Fisheries, Craigfryn, Oakford, Nr Llanarth, Ceredigion, SA47 0RW Email Us: info@nineoaksfishingbreaks.co.uk
Telephone Us: 01545 580482