Privacy Policy

1. PURPOSE AND INTRODUCTION

Parkdean Resorts UK Limited and its associated group companies1 (“Parkdean Resorts”, “we”, “us”, “our”) are committed to protecting the personal data we hold about you. Personal data is information about you and from which you can be identified. You should read this privacy notice if you are providing us with your personal data. It makes you aware of how and why your personal data will be used, namely for the purposes of purchasing a holiday or holiday home, and how long it will usually be retained for. It provides you with certain information that we must provide under applicable data protection law.2

1 Parkdean Resorts Limited, GB Holiday Parks Limited, Park Resorts Limited, Manor Park Holiday Park Limited, Southview Leisure Park Limited, South Lakeland Parks Limited, Lake District Leisure Pursuits Limited, Parkdean Holiday Parks Limited, Upperbay Limited, Parkdean Caravan Parks Limited, Southerness Holiday Village Limited, Weststar Holidays Limited and Vauxhall Holiday Park Limited.

 

2 The UK General Data Protection Regulation (”UK GDPR”) and the Data Protection Act 2018 (“DPA 2018”)

 

2. DATA PROTECTION PRINCIPLES

We will comply with data protection law and principles, which means that your personal data will be:

  • Used lawfully, fairly and in a transparent way;
  • Collected for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
  • Relevant to the purposes we have told you about and limited only to those purposes;
  • Accurate and kept up to date;
  • Kept only as long as necessary for the purposes we have told you about; and
  • Kept securely.

 

3. HOW DO WE RECEIVE YOUR PERSONAL DATA?

Personal data is information about you and from which you can be identified. We will collect and process personal data about you in the course of our relationship with you as set out in section 6.

Data collection can be through a variety of channels, including by telephone, via our website, on site in our resorts and via third parties.

Most of the personal data we process is provided to us directly by you for one of the following reasons:

  • You have made a booking, purchase or enquiry with us.
  • You have signed up for email updates for our latest offers & news.
  • You wish to attend, or have attended, an event.

    We also receive personal data indirectly, in the following scenarios:
  • Where you have signed up for information from a trusted third-party agent promoting our products and services.
  • Where you have made a booking with us through one of our trusted third-party agents.

 

4. THE PERSONAL DATA WE COLLECT ABOUT YOU

We will collect various personal information about you depending on what is needed to fulfil the processing activity. The table below provides some key examples of the personal data we collect:

Type of data

Description

Identity Data

Name, username, age, gender, social media username (if you interact with us through those channels) photographs and your car number plate (may be recorded at some of our parks for the purposes of safety and the prevention of crime).

Contact Data

Address, email address and telephone numbers.

Financial Data

Bank account and payment card details.

Transaction Data

Details about payments to and from you and other details of products and services you have purchased from us.

Usage

Information on how you use our website, products and services including details of the bookings or purchases you make (including if usage of your owner membership card if you have one).

Marketing

Your preferences in receiving direct marketing communications from us.

 

(These preferences will have been collected directly from us, or via a trusted third party supplier.)

Profile

Purchases made by you, your interests, preferences, registration form details, information provided by you in connection with your stay, feedback, competition, and survey responses.

Images

 

 

*CCTV/BWV/ANPR

Video footage displaying your image (and voice) if you participate in user testing of our products or participate in one of our promotional videos.

 

Footage in which you may feature when you visit one of our premises or parks.

 

*Closed circuit television (CCTV), Body Worn Video (BWV) and Automated Number Plate Recognition (ANPR)

Accident

If you have an accident whilst on our premises that you inform us of, we may record details of that accident and any injury you suffer in our accident log.

Technical

Information about your computer, tablet or mobile device including IP address, browser type, location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website and our Wifi services.

 

Usage of our website using a cookie file stored on the hard drive of your device being used to access the website. You are able to disable these cookies by changing your browser settings, but this may slow down or prohibit access to certain parts or features of our website.


 

5. OUR LEGAL BASIS FOR THIS PROCESSING

Under UK GDPR when we process your personal data, we must have a lawful basis for doing so. We process your personal data using one of the following legal bases:

  • Performance of a contract - This means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering such a contract.
  • Legitimate interests - Means the interest of our business in conducting and managing it to enable us to give you the best possible service and experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your personal data for our legitimate interests.
  • Legal or regulatory obligation - Means processing your data where necessary for compliance with a legal or regulatory obligation to which we are subject.
  • Consent - Where you have consented to the processing.
  • Vital interests - Where necessary to protect someone’s vital interests (e.g. life or death situation).

 

6. HOW WILL WE USE YOUR INFORMATION?

We have set out below some of our key processing activities which detail how we use your personal information and the legal bases on which we rely.

 

Purpose

Legal Basis (depending on the circumstances)

To administer booking requests and purchases, including confirming your booking or purchase and otherwise communicating with you about your booking or purchase

  • performance of contract;
  • legitimate interests; or
  • consent

To manage payments, including payments and any refunds as necessary relating to your holiday or holiday home purchase as well as any pre-bookable activities.

  • performance of contract;
  • legitimate interests; or
  •  

The recording of telephone calls for training and

monitoring purposes to improve our service and train our people

  • legitimate interests

To provide you with other products and services you request from us

  • performance of contract;
  • legitimate interests; or
  • consent

To manage our relationship and to administer your membership to any membership scheme we provide

  • legitimate interests;
  • consent, or
  • performance of a contract

To help us to provide, review, develop and improve our

products and services; this may include contacting you (Including by email) for market research purposes

  • legitimate interests

To use photographs, videos, customer feedback and

testimonials for promotional and marketing purposes, as well as user testing of our products

  • Consent

To send you direct marketing communications in order to boost and improve our business and encourage new and repeat bookings (except where you have opt-ed out)

  • legitimate interests; or
  • consent

To send you key service messages in relation to your booking or purchase.

  • legitimate interests
  • performance of a contract
  • legal obligation

To administer and contact you in relation to prize draws, competitions and other promotional activities

  • consent;
  • legitimate interests; or
  • performance of a contract

To customise our website according to your interests and ensure that content is presented in the most effective

manner for your computer, tablet or mobile device

  • legitimate interests; or
  • consent

To allow you to participate in interactive features of our service where you have chosen to do so

  • legitimate interests; or
  • consent

To use data analytics (including Google and Wifi) to better understand our customers, and for the improvement of our own products and services. Including our website, marketing, customer relationships and experiences, which

may include profiling, scoring and segmentation

  • legitimate interests

To address any claims made against us; for example, we may share details of our accident logs and CCTV footage with our insurers in connection with any claim made or likely to be made against us

  • legitimate interests; or
  • in connection with legal proceedings

(i.e. the establishment, exercise or defence of legal claims)

To comply with any legal or regulatory obligation

(Including in connection with a court order)

  • legal obligation

To enforce or apply the agreements we have with or otherwise concerning you (including agreements between you and us (or one or more of our group

companies))

  • legitimate interests;
  • legal obligation

To protect our rights, property or safety or those of our customers, employees or other third parties (e.g. use the use of CCTV/BWV/ANPR at some locations)

  • legitimate interests;
  • legal obligation; or
  • ·vital interests.

To verify your identity in order to detect and prevent fraud

  • legitimate interests
  • legal obligation

 

Please note - In limited circumstances for legitimate business purposes we may use live data for specific testing purposes. We ensure appropriate controls and procedures are implemented and will mask any personal data as far as possible.

 

This list is not exhaustive and there may be other processing activities where we rely on one of the above legal bases to process a different category of your personal data.

 

7. HOW DO WE PROCESS PARTICULARLY SENSITIVE (SPECIAL CATEGORY) DATA?

Under UK GDPR some categories of personal data are classified as "special category" data, including health information. Particularly sensitive personal data require higher levels of protection. We need to have further justification for collecting and processing this type of personal data.

 

We process very limited special category data for our customers and only in limited certain circumstances, for example:

 

Purpose

Additional Legal Basis

Where we or one of our third parties need to verify your identity using biometric technology (which processes physical characteristics for the purposes of

identification), for example facial recognition.

  • Explicit consent

Where you have suffered an accident or injury and we need to document relevant health information in the accident reporting log

  • explicit consent

Where you wish to participate in an activity at one of our resorts, and we need to record limited health information prior to your participation

  • explicit consent

In relation to certain gambling-related activities.

  • Substantial public interest.

 

Less commonly, we may process this type of information where it is needed in relation to legal claims or where it is needed to protect your interests (or someone else's interests) and you are not capable of giving your consent, or where you have already made the information public.

 

8. WHEN DO WE SHARE YOUR PERSONAL DATA?

In connection with the uses referred in section 6 & 7, we may disclose your personal data to certain third parties, including:

 

  • Other companies and entities within the Parkdean Resorts’ group;
  • Trusted third party agents with whom we contract with in relation to the sale of our products and services;
  • Professional advisers including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance and accounting services;
  • HMRC, regulators and other authorities who require reporting or processing activities in certain circumstances;
  • Finance providers and insurance companies in the event that you purchase a holiday home;
  • Third party services providers who provide IT services, wifi, system administration, feedback, marketing and market research services (e.g. to send postal mail, email and SMS, maintain and update our databases of customer details, analyse data, collate feedback, survey information, provide marketing assistance (including online targeted advertising), process card payments, provide customer service and handle claims);
  • To a seller or buyer in the event that we sell or buy any business or assets. In these circumstances, we may disclose personal data held by us to the prospective seller or buyer of such business or assets. If we or substantially all of our assets are acquired by a third party (or subject to a reorganisation within our corporate group), personal data held by us will be one of the transferred assets;
  • Other third parties to whom we are under a duty to disclose or share your personal data in order to comply with any legal or regulatory obligation (including in connection with a court order), or in order to enforce or apply the agreements we have with or otherwise concerning you (including agreements between you and us (or one or more of our group companies)); or to protect our rights, property or safety or those of our customers, employees or other third parties; and
  • To the police where there is a relevant exemption to assist with the prevention and detection of crime and/or apprehension or an offender.

You should be aware that, if we are requested by the police or any regulatory or government authority investigating suspected illegal activities to access and disclose personal data concerning your activities whilst using our website, we reserve the right to do so. We also reserve the right to disclose personal data to third parties where a complaint arises concerning your use of our website, and that use is deemed by us inconsistent with the terms governing use of our website.

 

If you require further information about specific third parties we contract with, please contact us so we can provide you what is relevant to your query.

 

9. HOW LONG WILL WE KEEP YOUR PERSONAL DATA?

We will only keep your personal data for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the purpose for which it was collected and the potential risk of harm from unauthorised use or disclosure of your personal data and applicable legal requirements.

In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

We have a Data and Document Retention policy. If you require further information about our individual retention periods relating to the categories set out in section 6 & 7, please contact us so we can provide you what is relevant to your query.

 

10. SECURITY

We take the security of your personal data very seriously. We have put in place appropriate security measures to prevent your data from being accidentally lost, used, altered, disclosed, or accessed by those unauthorised. However, we would draw to your attention the fact that the transmission of information via the internet is never completely secure. Although we endeavour to protect your personal data, we cannot guarantee its security when transmitted to our website; any transmission is at your own risk.

We restrict access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and where they are subject to a duty of confidentiality.

We have put in place procedures to deal with any personal data breach and will notify you and any applicable Regulator of a breach where we are legally required to do so.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

11. WILL WE USE YOUR PERSONAL DATA FOR MARKETING PURPOSES?

Where you have enquired about booking a holiday or purchasing a holiday home or have booked a holiday or purchased a holiday home, we may have a legitimate business objective in marketing to you to encourage new or repeat purchases. We will do so in compliance with both data protection and E- Privacy laws3

In accordance with your marketing preferences, we will use your personal data to send you newsletters and other marketing communications. We may also collect information about how you interact with our marketing communications (for example, whether you open emails we send to you). This helps us make our marketing more relevant to our customers.

You have the right to object to the receipt of direct marketing at any time. You may do this by sending an email to us at [email protected] and enter 'Unsubscribe' in the subject line and indicating whether you wish to opt out of holiday marketing, holiday home sales marketing or both.

Alternatively, you can unsubscribe from marketing email communications from us by following the unsubscribe instructions in each email that we send out. This will only unsubscribe you from marketing emails. If you wish to unsubscribe from other channels (post, SMS, telephone) please email [email protected]

Please note that you may continue to receive marketing communications for a short period after changing your preferences while our systems are updated. If you opt out of receiving marketing information from us, we may still use your personal data to provide you with important service communications, including communications in relation to any bookings or purchases you make or in relationship to your ownership of a holiday home on a Parkdean Resorts holiday park.

In addition to the above, we may share limited personal data with advertising networks and other third parties to enable those networks and third parties to provide tailored advertising relating to Parkdean Resorts to you when you browse the internet and use third party services (such as social media platforms) on the basis of legitimate interests.

3 Including the Privacy and Electronic Communications (EC Directive) Regulations 2003

 

 

12. WHERE WILL YOUR PERSONAL DATA BE PROCESSED? 

Your personal data may be processed in the United Kingdom (UK) or European Economic Area (EEA), and may occasionally be transferred to third-party suppliers and processed in countries outside the UK and EEA.

We’ll only transfer your data to a recipient that is outside the UK or EEA where we’re permitted to do so by law, such as where the transfer is to a country deemed ‘adequate’ by the UK, or is based on standard contractual clauses or some other mechanism recognised and approved by the Information Commissioner’s Office (ICO).

13. THIRD PARTY WEBSITES

This Policy relates only to information that we obtain from you. Our website contains certain links to other websites which may be of interest to you.

If you visit a website operated by a third party through a link included on this website, your information might be used differently by the operator of the linked website. You should look at that website’s privacy policy and take care, particularly if it requires you to submit personal data.

Please also note that we are not responsible for the content that is displayed on these third party websites.

14. AUTOMATED DECISION MAKING

Automated decision-making takes place when an electronic system uses personal data to make a decision without human intervention. We are allowed to use automated decision-making in the following circumstances:

  • Where it is necessary to perform the contract with you and appropriate safeguards are in place;
  • With your explicit consent.

    We don’t currently process personal data solely using automated decision making. However, when applying for finance solutions via one of our trusted third parties, for example, a loan to purchase a holiday home, it’s likely such third parties will make an automated decision. Please see the relevant organisation’s own privacy notice for further information.

 

15. USE OF COOKIES

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Our website uses cookies. For more information, please see our Cookies Policy.

16. YOUR RIGHTS

You have certain legal rights with respect to your personal data. These include the right to:

Request access

to your personal data (commonly known as a ‘subject access request’). This enables you to receive a copy of the personal data we hold about you.

Request correction

of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.

Request erasure

of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you at the time of your request.

Object to processing

of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In certain cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Request restriction of processing

This enables you to ask us to suspend the processing of your personal data in the following scenarios:

  1. if you want us to establish the data's accuracy;
    1. where our use of the data is unlawful but you do not want us to erase it;
  2. where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
  3. you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

Request the transfer

of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine- readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

Withdraw consent

at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case.

 

17. QUESTIONS

The Data Protection Officer has responsibility for overseeing compliance with this privacy notice. If you have any questions about this privacy notice or how we handle your personal data, please contact the Data Protection team. You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues. We would, however, appreciate the opportunity to deal with your concerns before you approach the ICO, so please contact us in the first instance.

18. CONTACT

The Data Protection Officer Parkdean Resorts

One Gosforth Park Way Gosforth Business Park Newcastle upon Tyne NE12 8ET

Telephone 0191 256 0795

Email: [email protected]

 

19. CHANGES TO THIS PRIVACY NOTICE

This notice was last updated in July 2023 and will be reviewed and updated on an annual basis, or earlier if applicable.