Privacy Policy

Introduction

Devon Cliffs Breakaways ("we", "our", or "the Company") is committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).


This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website, www.devoncliffsbreakaways.co.uk ("Site"), make a booking with us, or otherwise interact with us.


We act as a Data Controller in relation to the processing of your personal data.


Grounds for data collection 

Processing of your personal information (meaning any information which may potentially allow your identification with reasonable means; hereinafter "Personal Information") is carried out based on the following lawful bases under the UK GDPR:



  • Performance of a Contract: To fulfil our contract with you, such as managing your booking.
  • Legitimate Interests: To pursue our legitimate business interests (for example, improving our services, marketing our offerings, and protecting our legal rights).
  • Compliance with Legal Obligations: To meet legal and regulatory requirements.
  • Consent: For specific uses where consent is legally required (e.g., marketing communications). Where processing is based on consent, you may withdraw your consent at any time.


When you use the Site, you consent to the collection, storage, use, disclosure, and other processing of your Personal Information as described in this Privacy Policy.

What information we collect?

We collect two types of data and information from Users. 


1. Non-Personal Information

Data that does not identify you individually, such as:

  • Browser and device information (type, operating system, language settings)
  • Site usage data (pages visited, time spent on pages, click-throughs)
  • Aggregated analytics data (via cookies and similar technologies)


2. Personal Information

Information that identifies or could identify you, including:

  • Contact Details: Name, address, email address, and telephone number
  • Booking Details: Dates of stay, accommodation type, party details
  • Payment Details: Payment information processed securely by third-party providers (we do not store full card details)
  • Device Information: IP address, unique identifiers, and geolocation data

How do we receive information about you?

We collect your personal data in the following ways:

  • Directly from you when you make an enquiry or booking
  • Automatically when you browse our Site (via cookies, analytics)
  • From third-party providers (e.g., payment processors, analytics services)

How We Use the Information

We use your personal data for the following purposes:


  • Booking Management: To process and manage bookings and reservations.
  • Payment Processing: Payments are handled securely by third-party providers like Stripe and Charge Automation, in compliance with PCI-DSS standards. For more information, you can review Stripe's Privacy Policy and Charge Automation's Privacy Policy.
  • Communication: To contact you regarding your booking, provide updates, and respond to your queries.
  • Marketing (with Consent): To send you promotional material about our services. You can opt out at any time.
  • Site Improvement: To analyse how visitors use our Site and improve our content and services.
  • Legal Compliance and Protection: To comply with legal requirements and protect our rights and property.


We do not sell, rent, or share your personal data with unauthorised third parties.


Sharing Personal Data

We may share your personal data with:


  • Our service providers, such as web hosting companies, payment processors, and marketing providers
  • Trusted analytics partners (e.g., Google Analytics)
  • Legal authorities or regulators, if required by law
  • Potential buyers in the event of a business sale or restructuring


When sharing data, we ensure appropriate safeguards are in place.


International Data Transfers

Some of our third-party providers may be based outside the UK. When transferring your personal data internationally, we ensure appropriate safeguards are in place, such as:


  • Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO)
  • Transfers to countries deemed by the UK Government to provide an adequate level of protection

Your Data Protection Rights

You have the following rights under the UK GDPR:


  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure ("Right to be Forgotten"): Request deletion of your data where there is no lawful reason for us to retain it.
  • Restriction: Request that we restrict the processing of your personal data.
  • Data Portability: Request a copy of your data in a structured, machine-readable format.
  • Objection: Object to certain types of processing, such as direct marketing.
  • Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time.


You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your rights have been infringed.
 

Website: www.ico.org.uk


To exercise any of these rights, please contact us at:


Email: devoncliffsbreakaways@gmail.com

Retention

We will retain your personal information for as long as necessary to provide our services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our policies. Retention periods will be determined taking into account the type of information that is collected and the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. Under applicable regulations, we will keep records containing client personal data, account opening documents, communications and anything else as required by applicable laws and regulations. 


We may rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Improve Site functionality and performance
  • Remember your preferences
  • Analyse Site usage
  • Deliver personalised content and advertising


Types of cookies used:

  • Session Cookies: Temporary cookies deleted after you close your browser.
  • Persistent Cookies: Remain until manually deleted or expiry.
  • Third-Party Cookies: From services like Google Analytics and advertising partners.


You can control cookies through your browser settings. However, disabling cookies may affect Site functionality.

Google Analytics:


We use Google Analytics to collect aggregated Site usage data. Google’s ability to use and share information is governed by their Privacy Policy and Terms of Service.


You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Marketing Communications


Where you have consented, we may send you marketing communications. You can unsubscribe at any time by following the link in our emails or contacting us directly.


Even if you opt out of marketing emails, you may still receive other types of important e-mail communications without offering you the opportunity to opt out of receiving them. These may include customer service announcements or administrative notices.

Social Media

Our social media pages (e.g., Facebook, Instagram) are public forums. We moderate interactions and may remove posts that are offensive, spam, or violate our guidelines.


Booking-specific queries raised via social media will be handled privately.

Third party collection of information

Our Site may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies separately.

Security

We take appropriate technical and organisational measures to safeguard your personal data, including:


  • Secure server technologies
  • Encryption of sensitive data
  • Access controls
  • Staff training in data protection principles


While we implement robust security measures, no system is completely secure. We cannot guarantee absolute protection against unauthorised access.

Corporate Transaction

In the event of a corporate transaction, such as the sale of a substantial part of our business, merger, consolidation, or asset sale, we may share your personal information as part of that transaction. In such cases, the transferee or acquiring company will assume the rights and obligations under this Privacy Policy, and we will take steps to ensure that your information remains protected in accordance with the applicable data protection laws.

Children's Privacy

We understand the importance of protecting children’s privacy, especially in an online environment. Our services are not directed to individuals under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information without parental consent, please contact us immediately at  devoncliffsbreakaways@gmail.com.

Updates or amendments to this Privacy Policy

We may update or amend this Privacy Policy periodically. Any material changes to the policy will be effective immediately upon the publication of the revised Privacy Policy. The date of the last revision will be indicated in the "Last Modified" section.


Where significant changes are made, we will notify you directly, typically by email, or through a notice on our website.

Your continued use of our platform, following the publication of such changes, signifies your acceptance of the updated Privacy Policy and consent to be bound by the revised terms. We recommend that you review this Policy regularly to stay informed of any updates.


Last Modified: 27th April 2025

How to contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:


Devon Cliffs Breakaways
Email: devoncliffsbreakaways@gmail.com
Website: www.devoncliffsbreakaways.co.uk