Privacy Policy

Last Updated: Wednesday 22nd November 2023

Welcome to Cornish Coastal Retreats. Your privacy is of paramount importance to us. This Privacy Policy outlines the types of personal information we collect, how it's used, stored, and protected, and the circumstances under which it may be shared.

1. Information Collection and Use

At Cornish Coastal Retreats, we are committed to safeguarding your privacy. This section explains in detail the types of information we collect from our website users and how this information is used.

1.1 Buyers/Customer Information:

1.1.1 Personal Details:

First and Last Name: To identify you and personalize our communication. Email Address: For sending booking confirmations, receipts, updates, and promotional offers (if opted in).
Phone Number: Used as an alternative or additional means of communication, particularly for urgent updates regarding bookings.
Postal Address: Necessary for billing purposes and to provide location-specific services or offers.

1.1.2 Booking Information:

Details of Your Bookings: Includes dates, preferences, special requests, party size and other relevant information to ensure a tailored experience.
Preferred Method of Contact: Whether you prefer to be contacted via email, phone, or postal mail for updates or inquiries related to your bookings.

1.1.3 Payment Information:

Transaction Outcomes: We record the results of your transactions (e.g., successful, declined) to manage bookings and maintain financial records.
Stripe Hosted Payments: We use Stripe for secure payment processing. While we do not store your credit card information, transaction identifiers and payment statuses are retained for record-keeping and dispute resolution.

1.2. Property/Homeowner Information:

1.2.1 Property Details:

Property Name and Address: Essential for listing and managing properties on our website. Property Size and Characteristics: Information such as size, amenities, and other relevant details help in accurately presenting the property to potential customers.

1.2.2 Booking Information:

Booking Information: Includes records of bookings made for the property, occupancy rates, and related analytics to assist property owners in managing their listings.

1.3. Contact Us Page:

1.3.1 General Inquiries:

Name, Email, and Phone Number: To respond to your queries effectively and maintain a record of communications.
Details of Your Enquiry: Specific information you provide about your query helps us in providing a precise and helpful response.

Purpose of Data Collection:

Service Provision: The primary purpose of collecting this information is to provide and improve the services offered on our website, including facilitating property bookings, managing customer accounts, and addressing inquiries.
Communication: We use your contact information to communicate with you about your bookings, respond to your inquiries, and, where permitted, send you promotional materials. Legal Compliance: Certain information is collected to comply with legal obligations, such as financial record-keeping and responding to legal requests.

Consent and Control:

You have control over the personal information you provide to us. We collect and use this information based on your consent, which you can view or withdraw at any time by contacting us.

2. Use of Tracking Technologies

Cornish Coastal Retreats employs various tracking technologies to enhance user experience and gather insights that help us improve our website. This section details how these technologies are used and the type of data they collect.

2.1 Google Analytics:

2.1.1 Purpose and Functionality:

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. It helps us understand how visitors engage with our website, including pages visited, duration of visit, and the journey taken through the site.

2.1.2 Data Collected:

This includes anonymized data such as IP addresses, browser types, referring/exit pages, operating system, date/time stamp, and clickstream data. We do not use Google Analytics to collect any personal information or associate your IP address with any other data held by Google.

2.1.3 User Control:

Users can opt-out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on.

2.2 Mouseflow:

2.2.1 Purpose and Functionality:

Mouseflow is a tool that records how users interact with our website, including mouse movements, clicks, and scrolling behavior. It helps us identify usability issues, enhance website functionality, and create a more user-friendly experience.

2.2.2 Data Collected:

Mouseflow collects data related to user interaction on our website, such as mouse movements, page interaction, and non-sensitive keystroke information. It does not record personal information entered on the website.

2.2.3 User Control:

Users can opt-out of Mouseflow tracking on our website by visiting Mouseflow’s opt-out page.

2.3 Other Tracking Technologies:

2.3.1 Cookies and Similar Technologies:

We may use cookies, beacons, tags, and scripts to enhance user experience, remember user preferences, and track user trends and patterns. Cookies are small data files stored on your device that help us improve our site and your experience on it.

2.3.2 Data Collected:

Information collected via cookies may include which pages you visit, the time spent on those pages, and your site navigation paths.

2.3.3 User Control:

Users have the option to control the use of cookies at the individual browser level. If you reject cookies, you may still use our site, but your ability to use some features or areas may be limited.

2.4 Consent and Transparency:

We believe in transparency and give users the choice to opt-in or opt-out of different types of data collection. Consent for tracking technologies is obtained separately and can be withdrawn at any time.

2.5 Purpose of Data Collection via Tracking Technologies:

The primary purpose of using these technologies is to improve our website and provide a more personalized and efficient user experience. Data collected helps us understand user behavior, manage content, track user movements around the site, and gather demographic information about our user base as a whole.

3. Data Storage and Security

At Cornish Coastal Retreats, we prioritize the security of your personal information. This section details our practices regarding the storage and protection of your data.

3.1 Data Storage:

3.1.1 Storage Locations and Methods:

Databases: Your information is stored in secure, encrypted databases. Email Format: Communications and transactions conducted via email are stored securely within our email system.
Backup Systems: Regular backups are conducted to prevent data loss.

3.1.2 Data Retention:

We retain personal data for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements.

3.2 Security Measures:

3.2.1 Technical Safeguards:

Encryption: We use industry-standard encryption technologies when transferring and receiving user data.
Secure Socket Layer (SSL): Our website is SSL-certified, ensuring secure transmission of your personal information.
Firewalls and Antivirus Software: To protect against unauthorized access, we employ firewalls and regularly updated antivirus software.

3.2.2 Organizational Safeguards:

Access Control: Access to your personal data is limited to authorized personnel who need the information to perform their job functions.
Training: Staff are trained on best practices for data security and privacy.

3.2.3 Regular Audits:

We conduct regular audits and reviews of our data storage and security measures to ensure ongoing protection of your information.

3.3 Data Breach Response:

3.3.1 Incident Response Plan:

In the unlikely event of a data breach, we have an incident response plan to promptly address and mitigate the impact.

3.3.2 Notification Procedures:

Should any breach occur, that might compromise your personal information, we will notify you and the relevant authorities as required by law.

3.4 User Responsibility:

3.4.1 Account Security:

Users are responsible for maintaining the confidentiality of their account information, including passwords.

3.4.2 Awareness:

We encourage users to be aware of the information they share and to ensure secure internet practices.

3.5 Compliance and Standards:

3.5.1 Regulatory Compliance:

Our data storage and security policies are designed to follow relevant data protection laws and regulations.

3.5.2 Industry Standards:

We adhere to industry best practices and standards in all aspects of data security.

4. Data Sharing

Cornish Coastal Retreats is committed to protecting the privacy of our users. This section explains our data sharing practices, including what information is shared, with whom, and under what circumstances.

4.1 Sharing with Homeowners:

4.1.1 Information Shared:

In the event of a successful booking, we share limited information with the property owner. This includes:
Your Name: To identify the booking party.
Email Address: For the property owner to communicate booking details or provide additional information.
Phone Number: Used by the property owner for essential communication related to the booking.
Party Size: To ensure the property is prepared for the correct number of guests.

4.1.2 Purpose of Sharing:

This information is shared solely for the purpose of facilitating your booking and ensuring a smooth stay at the property.

4.1.3 Data Protection:

Homeowners are required to protect your information and use it only for the purposes related to your booking. They are not permitted to use your information for marketing or any other purpose.

4.2 No Third-Party Sharing:

4.2.1 Policy on Third-Party Sharing:

We do not share, sell, rent, or trade your personal information with third parties for their commercial purposes. Information is only shared with third parties when necessary for the operation of our website, such as payment processing and website analytics.

4.2.2 Exceptions:

In certain circumstances, we may be required to disclose your information in response to lawful requests by public authorities, including meeting national security or law enforcement requirements.

4.3 Legal Compliance and Safety:

4.3.1 Compliance with Laws:

We may disclose your information where required by law, such as to comply with a subpoena, or similar legal process.

4.3.2 Protection of Rights:

We may also disclose information if we believe in good faith that it is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.

4.4 User Consent and Notification:

4.4.1 Consent for Sharing:

By using our services, you consent to the sharing of your information as outlined in this policy.

4.4.2 Notification of Changes:

If there are any changes to our information sharing practices, we will update this policy and provide notification as required by law.

5. Data Retention

Cornish Coastal Retreats has specific policies and practices regarding the retention of personal information collected from our users. This section outlines our approach to data retention and the rights you have concerning your personal data.

5.1 Duration of Data Retention:

5.1.1 Member Information:

We retain the personal information of our members for the duration of their membership on our website. This includes all data provided by you during the course of using our services, such as booking information, communication records, and transaction histories.

5.1.2 Post-Membership:

Upon termination of your membership, whether by you or by us, your personal information will be retained for a legally required period for compliance with tax, accounting, and legal reporting obligations. After this period, your information will be securely deleted or anonymized.

5.2 User Rights and Access to Data:

5.2.1 Right to Access:

You have the right to request access to the personal information we hold about you at any time. To ensure the security of your information, we require evidence of account ownership for such requests. This may include verification through your email, proof of account access, or a government-issued ID.

5.2.2 Right to Correction and Deletion:

You have the right to request the correction of inaccurate data and, in some cases, the deletion of your personal data. Deletion requests will be honored subject to any legal obligations we may have to retain data.

5.3 Data Portability:

5.3.1 Transferring Your Data:

Upon request, and where technically feasible, we can provide your data in a format that allows for easy transfer to another service.

5.4 Managing Your Data:

5.4.1 Updating Information:

We encourage users to regularly review and update their personal information to ensure it is accurate.

5.4.2 Contact for Data Requests:

Requests for access, correction, deletion, or transfer of personal data should be directed to our designated contact point, provided on our website.

5.5 Compliance and Review:

5.5.1 Regulatory Compliance:

Our data retention practices are designed to comply with applicable data protection laws and regulations.

5.5.2 Periodic Review:

We regularly review our data retention policies to ensure they align with legal requirements and best practices.

6. Your Rights

At Cornish Coastal Retreats, we recognize and respect your rights concerning your personal data. This section outlines these rights and how you can exercise them.

6.1 Right to Access:

You have the right to request access to the personal data we hold about you. This includes information on how your data is used and processed.

6.2 Right to Correction:

If you believe that any information we have about you is incorrect or incomplete, you have the right to request its correction.

6.3 Right to Deletion:

You have the right to request the deletion of your personal data, subject to certain exceptions (e.g., for legal compliance).

6.4 Right to Restrict Processing:

You may have the right to request that we restrict the processing of your personal data under certain circumstances.

6.5 Right to Data Portability:

Where applicable, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.

6.6 Right to Object:

You have the right to object to the processing of your personal data in certain situations, such as for direct marketing purposes.

6.7 Exercising Your Rights:

To exercise any of these rights, please contact us using the contact information provided on our website. We may require verification of your identity for security purposes.

6.8 Complaints:

If you have a concern about our handling of your personal data, you have the right to lodge a complaint with a supervisory authority.

7. Changes to This Policy

7.1 Policy Updates:

Cornish Coastal Retreats reserves the right to update this privacy policy at any time. Changes may be necessary to reflect changes in legal requirements, our data processing practices, or other factors.

7.2 Notification of Changes:

Any significant changes to our privacy policy will be communicated through our website or via email to our users.

7.3 Encouragement to Review:

We encourage you to review this policy periodically to stay informed about how we are protecting your information.