This privacy policy explains how www.welshvillas.com (“we”, “us”, or “our”) collects, uses, and protects the personal data of our website visitors and customers (“you” or “your”). This privacy policy applies to our website www.welshvillas.com and our services of providing holiday homes.
What data do we collect and how?
We collect the following types of personal data from you:
- Contact and booking information: When you make a booking or enquiry on our website, we collect your name, address, phone numbers, email address and the details of your booking, such as the dates, number of guests, and any special requests. We also collect this information when you contact us by email, phone, or social media.
- Payment information: When you make a payment on our website, we collect your payment card details, such as the card number, expiry date, and security code. We do not store this information on our servers, but we use a third-party payment processor to process your payment securely. You can also choose to pay with PayPal, in which case you will be redirected to the PayPal website, where you can log in to your account and complete the payment.
- Website usage information: When you visit our website, we collect information about your device, browser, IP address, location, and how you use our website, such as the pages you view, the links you click, and the time you spend. We use cookies and similar technologies to collect this information.
- Social media information: When you interact with us on social media platforms, such as Facebook, Twitter, or Instagram, we collect your username, profile picture, and any comments or messages you post or send to us.
We collect your personal data directly from you, as well as from third-party sources, such as:
- Online platforms: We use online platforms, such as Airbnb, Sykes Cottages and Booking.com, to list our holiday homes and receive bookings from customers. When you book through these platforms, we receive your contact and booking information, as well as your reviews and ratings.
- Analytics tools: We use analytics tools, such as Google Analytics, to measure and improve the performance of our website. These tools collect and analyse your website usage information, such as your IP address, device type, browser, location, and behaviour on our website.
Why do we process your data and on what legal basis?
We process your personal data for the following purposes and legal bases:
- To provide our services: We process your contact, booking, and payment information to confirm your booking, communicate with you, and provide you with our holiday homes. The legal basis for this processing is the performance of a contract or the taking of steps at your request prior to entering into a contract.
- To improve our website and services: We process your website usage information and social media information to understand how you use our website and services, and to make improvements and enhancements. The legal basis for this processing is our legitimate interest in maintaining and improving our website and services.
- To market our website and services: We process your contact information and website usage information to send you newsletters, offers, and promotions about our website and services, as well as to personalise your experience on our website. The legal basis for this processing is your consent, which you can withdraw at any time by clicking the unsubscribe link in our emails or contacting us. We also use cookies and similar technologies to show you relevant ads on our website and other websites.
- To comply with legal obligations: We process your personal data to comply with any legal obligations that apply to us, such as tax, accounting, or reporting requirements. The legal basis for this processing is compliance with a legal obligation.
Who do we share your data with?
We share your personal data with the following third parties:
- Service providers: We use third-party service providers to help us with various aspects of our website and services, such as web hosting, payment processing, analytics, marketing, and communication. We only share your personal data with these service providers to the extent necessary for them to perform their services for us, and we require them to protect your personal data and comply with the applicable data protection laws.
- Online platforms: We share your personal data with online platforms, such as Airbnb, Sykes Cottages and Booking.com, when you book through these platforms. These platforms have their own privacy policies, which you should read before using their services.
- Cleaners and Maintenance Crews: We share your contact and booking information with our cleaners and maintenance persons, who are responsible for preparing, maintaining and cleaning our holiday homes before and after your stay. We only share the information that is necessary for them to perform their services for us, and we require them to protect your personal data and comply with the applicable data protection laws.
- Authorities: We may share your personal data with the relevant authorities, such as the tax office, the police, or the courts, if we are required or permitted to do so by law, or if we need to protect our rights or interests, or those of others.
Some of these third parties may be located outside the European Economic Area (EEA) or the United Kingdom (UK), where the data protection laws may not be as strict as those in your country. When we transfer your personal data to these third parties, we ensure that there are adequate safeguards in place to protect your personal data, such as the EU Standard Contractual Clauses, the EU-US Privacy Shield, or the UK adequacy decisions.
How do we protect your data?
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, use, disclosure, alteration, or destruction. These measures include:
- Encryption: We encrypt your personal data when it is stored on our servers and when it is transmitted over the internet.
- Access control: We limit the access to your personal data to those who need it for the purposes described in this privacy policy, and we ensure that they are bound by confidentiality obligations.
- Security updates: We regularly update our software and systems to address any security vulnerabilities and threats.
- Training: We train our staff and contractors on the importance of data protection and how to handle your personal data securely.
However, no method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your personal data. If you have any questions or concerns about the security of your personal data, please contact us.
How long do we keep your data?
We keep your personal data for as long as necessary for the purposes described in this privacy policy, or as required or permitted by law. The retention period may vary depending on the type of data, the purpose of processing, and the legal obligations that apply to us. For example, we may keep your contact and booking information for up to six years after your last booking, to comply with tax and accounting requirements, and to handle any disputes or claims that may arise. We may keep your website usage information for up to two years, to analyse and improve our website and services. We may keep your marketing information until you unsubscribe or withdraw your consent, or for a reasonable period of time after your last interaction with us.
When we no longer need your personal data, we will delete it or anonymise it, so that it can no longer be linked to you.
What are your rights and choices?
You have the following rights and choices regarding your personal data:
- The right to access your personal information: You have the right to request a copy of the personal data that is held about you, and to check that it is accurate and lawful.
- The right to have incorrect personal information corrected: You have the right to request that any inaccurate or incomplete personal data is corrected or updated.
- The right to restrict use of personal information: You have the right to request that the use of your personal data is limited or stopped in certain circumstances, such as when you contest its accuracy or object to its processing.
- The right to be forgotten: You have the right to request that your personal data is erased or removed from our records, in certain situations, such as when you withdraw your consent or when the data is no longer needed.
- The right for your personal information to be portable: You have the right to request that your personal data is transferred to you or another party in a structured, commonly used, and machine-readable format, in certain cases, such as when you have given your consent or when the processing is based on a contract.
- The right to object to the use of your personal information: You have the right to object to the processing of your personal data for certain purposes, such as direct marketing, profiling, or research, unless we can demonstrate compelling legitimate grounds to override your interests, rights, and freedoms.
- The right to be notified: You have the right to be informed about the collection and use of your personal data, as well as any changes or breaches that may affect your privacy, in a clear and transparent manner.
If you wish to exercise your rights, make a complaint, ask any questions about your personal data or withdraw your consent / unsubscribe from any marketing communications at any time then you should email us at hello@welshvillas.com