This Privacy Policy describes how The Enchanted Oak Camping & Glamping site (“we,” “us,” or “our”) collects, uses, and protects the personal information of individuals who visit our website, www.enchantedoak.co.uk, and communicate with us via email at hello@enchantedoak.co.uk. We are committed to respecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).
- Information We Collect
We may collect and process the following categories of personal information:
1.1 Information You Provide: When you visit our website or communicate with us, you may voluntarily provide us with personal information such as your name, email address, phone number, and any other information you choose to provide in your enquiries, bookings, or requests for information.
1.2 Automatically Collected Information: When you visit our website, we may automatically collect certain information about your device, browser, and usage patterns, including your IP address, browser type, pages visited, and the referring website. This information is collected through cookies and similar tracking technologies.
- Use of Personal Information
We use the personal information we collect for the following purposes:
2.1 Providing Services: We may use your personal information to respond to your enquiries, process bookings and payments, and communicate with you regarding your reservations and any updates or changes related to our services.
2.2 Marketing Communications: With your consent, we may send you promotional materials, newsletters, and updates about our services, events, and special offers. You can opt-out of receiving such communications at any time by following the unsubscribe instructions provided in the communication.
2.3 Website Improvement: We may use the information we collect to analyse trends, administer our website, and gather demographic information for internal purposes. This information helps us improve our website, services, and user experience.
- Legal Basis for Processing
We rely on the following legal bases to process your personal information:
3.1 Contractual Necessity: We process your personal information to fulfil our contractual obligations, such as processing your bookings and reservations.
3.2 Consent: We may process your personal information based on your consent for marketing communications and other purposes specified at the time of collection. You have the right to withdraw your consent at any time.
3.3 Legitimate Interests: We may process your personal information for our legitimate interests, such as improving our services and protecting our legal rights, provided such processing does not outweigh your fundamental rights and freedoms.
- Sharing of Personal Information
We may share your personal information with the following recipients:
4.1 Service Providers: We may engage third-party service providers who assist us in providing our services, such as payment processors, IT support, marketing agencies, and customer service providers. These service providers are contractually obligated to handle your personal information securely and only process it for the purposes specified by us.
4.2 Legal Requirements: We may disclose your personal information if required to do so by law, court order, or other legal processes, or if we believe that such disclosure is necessary to protect our rights, safety, or property, or that of others.
4.3 Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred to the acquiring entity.
- Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We will securely delete or anonymise your personal information when it is no longer needed for the specified purposes.
- Data Security
We take appropriate technical and organisational measures to ensure the security of your personal information and protect it against unauthorised access, loss, or alteration. These measures include:
6.1 Data Protection Controls: We implement strict access controls to limit internal access to personal information to authorised personnel who need it to perform their duties.
6.2 Data Encryption: We use industry-standard encryption techniques to transmit sensitive personal information securely.
6.3 Secure Payments: If you make a payment through our website, we use a secure payment gateway to process your transaction. We do not store your payment card details on our servers.
6.4 Data Storage: We store personal information on secure servers and employ robust backup procedures to ensure data integrity and availability.
6.5 Regular Security Assessments: We regularly assess and update our security measures to protect against new and emerging threats.
Please note that while we implement these security measures, no method of transmission or storage over the internet is 100% secure. Therefore, we cannot guarantee absolute security of your personal information.
- Your Rights
Subject to applicable law, you have the following rights regarding your personal information:
7.1 Access: You have the right to request access to the personal information we hold about you and receive a copy of that information.
7.2 Rectification: If you believe that the personal information we hold about you is inaccurate or incomplete, you have the right to request its correction or update.
7.3 Erasure: You have the right to request the deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and there is no other legal basis for processing.
7.4 Objection: You have the right to object to the processing of your personal information based on legitimate interests or for direct marketing purposes.
7.5 Restriction: You have the right to request the restriction of processing your personal information in certain circumstances, such as when you contest the accuracy of the data or object to its processing.
7.6 Data Portability: You may have the right to receive your personal information in a structured, commonly used, and machine-readable format and have the right to transmit that information to another data controller.
7.7 Consent Withdrawal: If we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.
To exercise your rights, or if you have any questions or concerns regarding the processing of your personal information, please contact us using the contact details provided in Section 9.
- Links to Third-Party Websites
Our website may contain links to third-party websites or services that are not owned or controlled by us. This Privacy Policy does not apply to those third-party websites or services. We encourage you to review the privacy policies of those third parties to understand how they collect, use, and share your personal information.
- Contact Us
If you have any questions, comments, or requests regarding this Privacy Policy or our privacy practises, please contact us at via email address at hello@enchantedoak.co.uk
We will respond to your enquiries and requests as soon as reasonably possible.
- Changes to the Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our privacy practises or legal requirements. We will post the updated Privacy Policy on our website and indicate the effective date. Please review this Privacy Policy periodically for any changes.
Last updated: 10th June 2023
