Privacy Policy
Welcome to our privacy policy.
We respect your privacy and are committed to protecting your personal information. This privacy policy will tell you how we look after your personal data and about your privacy rights. It supplements any other notices and is not intended to override them.
We have tried to be brief and clear. We are happy to provide any additional information or explanation.
1. Who We Are
Data Controller:
Winterton Valley Estate
(“we”, “us”, “our”)
Data Protection Officer:
Email: DPO@wve.co.uk
We are a family-run holiday park located in Winterton-on-Sea, Norfolk.
If you have any concerns about how your data is handled, please contact us first. You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO): www.ico.org.uk.
2. Changes to This Privacy Notice
We review our privacy policy annually.
Historic versions can be requested by contacting us.
Please inform us if your personal data changes, so we can keep our records accurate and current.
3. How We Collect Your Personal Data
We may receive personal data when you:
Fill in our website contact form
Request marketing or newsletters
Contact us by email, phone, or post
Provide feedback or ask a question
We may also collect website usage data automatically through Google Analytics, including:
IP address (anonymised where possible)
Browsing behaviour
Device type
Approximate location
Pages visited
This information is used only for improving our website and understanding visitor behaviour.
4. How We Use Your Personal Data
We will only use your personal data when the law allows us to. We use it for the following purposes:
• To respond to your enquiries
Lawful basis: Legitimate interests – to respond to messages, questions, and requests.
• To send marketing emails or newsletters (only if you have opted in)
Lawful basis: Consent – you can withdraw consent at any time.
• To manage our relationship with you
This includes notifying you about changes to our terms, our privacy policy, or other information relevant to you.
Lawful basis: Legitimate interests and legal obligation.
• To improve our website and understand how visitors use it
This includes analysing website behaviour through Google Analytics.
Lawful basis: Legitimate interests – to keep our website relevant, functional, and user-friendly.
• To administer and protect our website and business
This includes troubleshooting, data analysis, testing, system maintenance, security monitoring, and hosting of data.
Lawful basis: Legitimate interests and legal obligation.
We do not sell or share your personal data with third parties for their own marketing.
5. Marketing Communications
If you opt in to receive marketing or newsletters, we may send you information about:
Estate updates
News
Events or seasonal information
You can withdraw consent at any time by clicking “unsubscribe” or contacting DPO@wve.co.uk.
We will not send marketing messages without your explicit opt-in.
6. Cookies
Our website uses cookies and Google Analytics to collect standard internet log information and visitor behaviour patterns.
You can control cookies through your browser settings.
7. Third-Party Links
Our site may include links to third-party websites.
We are not responsible for their privacy policies. We recommend reviewing the privacy notice of each website you visit.
8. Social Media Messages
If you contact us through social media, we may store your messages for up to 12 months to help manage enquiries.
9. Disclosures of Your Personal Data
We may share your personal data with:
Email service providers
IT and website support providers
Professional advisers (legal, accounting, insurance)
Regulators where legally required
All third parties are required to respect the security of your personal data and process it according to UK GDPR.
We do not allow third-party providers to use your data for their own purposes.
10. International Transfers
We do not intentionally transfer your personal data outside the UK or European Economic Area.
Where services we use store data internationally, we ensure they are compliant with UK data protection standards.
11. Data Security
We have put in place security measures to prevent personal data from being:
Lost
Used unlawfully
Accessed without authorisation
Access to your data is limited to people who need it for legitimate business purposes.
We have procedures in place to manage any suspected data breach.
12. Data Retention
We only retain personal data for as long as necessary to fulfil the purposes for which it was collected, including legal or regulatory requirements.
To determine the retention period, we consider:
The amount and sensitivity of the data
The risk of unauthorised use
Legal or regulatory requirements
You can contact us at DPO@wve.co.uk for specific retention details.
13. Your Legal Rights
You have the right to:
Request access
Receive a copy of the personal data we hold about you.
Request correction
Ask us to correct inaccurate or incomplete data.
Request erasure
Request deletion of your personal data where there is no lawful reason for us to keep it.
Object to processing
Object to processing based on legitimate interests or for direct marketing.
Request restriction
Ask us to suspend processing of your data in certain circumstances.
Request transfer
Receive your personal data in a structured, machine-readable format.
Withdraw consent
Where we rely on consent (e.g., newsletters), you may withdraw it at any time.
14. No Fees, But Identity Verification
You will not pay a fee to exercise your rights unless your request is clearly repetitive or excessive.
We may need to request ID or additional information to verify your identity.
We aim to respond to all legitimate requests within one month.