Your privacy is of the utmost importance to us.
This webpage sets out when and how we use your Personal Data that you or others provide to us, including through this website (the “Website”). We want to make sure you fully understand the terms and conditions surrounding the capture and use of that information.
This Privacy Notice describes what information we collect about you, how we use it, and the rights you have in relation to that collection and usage.
SPRING FARM SYSTEMS LIMITED t/a Hickling Campsite is a private limited company incorporated and registered in England and Wales with company number 09258797 whose registered office address is Spring Farm, Halvergate Road, Moulton St. Mary, Norwich, NR13 3UL (“Spring Farm”).
For the purposes of the Data Protection Act 2018, the General Data Protection Regulations and any other applicable data protection and privacy laws and regulations (“Data Protection Legislation”), Spring Farm will be the ‘data controller’ for all Personal Data that we determine the means and purpose of processing.
By “Personal Data” we refer to information collected or held by Spring Farm, that identifies and relates to you as an individual.
Information we may collect
We will be required to collect Personal Data about you in the following circumstances.
When you book a camping pitch or accommodation at our camp sites
When you book with Spring Farm to provide our services we will collect certain Personal Data to enable us to complete your booking. The information we will need to do this will include, your name, email, phone number, and address.
We may collect additional information you volunteer to us when contacting us regarding any elements of our service. We will only retain the Personal Data pertinent to delivering services to you.
When you have expressed an interest in Spring Farm services
When you make an enquiry regarding any of the services provided by Spring Farm, we will collect your name, email address, and contact details and information regarding the services you have requested information about. We will use this information to service your request.
If you have opted in via our website, phone, in person or post to receive marketing communications from us, we will handle your Personal Data (for example, your name, email address and postal address and telephone number) to provide you with marketing communications and newsletters in line with any preferences you have told us about.
When we send you marketing communications you have requested, we rely on your consent to contact you for marketing purposes. Every communication we send to you for marketing purposes will also contain instructions on how to unsubscribe from receiving them.
You are not under any obligation to provide us with your Personal Data for marketing purposes.
You can tell us that you do not want your Personal Data to be processed in this way at any time by contacting us at firstname.lastname@example.org, where relevant, by following the unsubscribe link shown in every marketing communication you receive from us. We will retain your data for as long as we have your consent and delete your Personal Data used for marketing purposes as soon as you withdraw your consent or unsubscribe from our newsletters and marketing information.
When you visit our website:
We may also collect technical information about you when you visit the Website. This information may include the Internet protocol (IP) address used to connect your computer to the Internet, your browser type and version, time zone setting, operating system and platform, browser plug-in types and version, the full URL clickstream to, through and from the Website, page response times, download errors, length of visits to certain pages, page interaction (such as scrolling, clicks and mouse-overs) and methods used to browse away from the page.
The collected information is used to provide an overview of how people are accessing and using the Website. It is not used for any additional purpose, such as to profile those who access the Website.
When you phone us
When you phone us, we may also handle your Personal Data (your name, contact details and the other details you provide to us during the call) in order to service your enquiry or provide the customer services you have asked us to perform.
If you fail to provide Personal Data
Where we need to collect Personal Data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you. In this case, we may have to cancel the arrangement you have with Spring Farm but we will notify you if this is the case at the time.
What we don’t collect
Card payment details taken for booking fees are processed and managed via Stripe on the Bedful.com booking system. Further details regarding Stripe can be found at https://stripe.com/gb. Spring Farm do not hold any card detail information as part of the Personal Data we handle on your behalf.
Legal basis of processing
We will only process your information for as long as we have a relevant legal basis to do so. Unless stated above in the “Information we may collect” section, this is in order to provide you with the contractual services you have requested from Spring Farm or if you have provided us with adequate consent to process your information for other purposes.
If we choose to process your information under the legal basis of legitimate interests, we will always inform you of our legitimate business interest and your right to object.
We will only use your Personal Data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If your Personal Data has been used for a purpose other than its initial intended use and you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at email@example.com.
Retaining your personal information
We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for Personal Data, we consider the amount, nature, and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Protecting your information
We are committed to ensuring that your information is secure and we have procedures in place to try and prevent any unauthorised access or disclosures and to safeguard and keep secure the information that we collect online.
All the Personal Data collected by us and stored electronically is held in the EEA only. We enforce physical access controls to our buildings and files and we authorise access to Personal Data only for those employees who require it to fulfil their job responsibilities.
However, you should be aware that providing information over the internet can never be guaranteed as being completely safe and if you choose to send such information to us via the internet, you do so at your own risk.
Sharing your information with others
Please be assured that we will not share your information for any other reason unless we are required by law or permitted to do so under this Privacy Notice. The main circumstances in which we will be permitted or required to disclose this is by law will be by court order, to government bodies and law enforcement agencies. However, sometimes we may share your information with third parties in the following ways:
- we may use carefully selected sub-processors to help us collect, store or manage your information. This will always be managed under the terms of a written data processing agreement;
- analytics and search engine providers that assist us in the improvement and optimisation of the Website; or
- if Spring farm Systems Limited is acquired by a third party, in which case Personal Data held by it about its customers will be one of the transferred assets. We process your Personal Data for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your Personal Data in this way, the relevant seller or buyer of our business may not be able to provide services to you.
To enable us to provide you with our campsite services, we may need to share your Personal Data with some of our service providers. This may include the owners or operators of our campsites, or another service we are required to engage with to provide the services you have requested from Spring Farm.
Transfer of data outside of the EU
We shall not transfer any Personal Data to any country outside of the European Economic Area unless we ensure that such Personal Data is subject to an adequate level of protection and appropriate legal safeguards in accordance with Data Protection Legislation.
Your right to object under data protection laws
You have the right to object to us handling your Personal Data when:
- we are handling your Personal Data based on our legitimate interests. If you ask us to stop handling your Personal Data in this way, we will stop unless we can show you that we have compelling grounds as to why our use of your Personal Data should continue; or
- where we process Personal Data for marketing purposes. If you ask us to stop handling your Personal Data on this basis, we will stop.
Your rights under data protection law
You can exercise the following rights to your data by contacting us at firstname.lastname@example.org. We will only take instructions from you or your legal representative to effect or to alter a policy and we will protect your privacy when you contact us by asking specific and relevant questions to make sure we are speaking to you or your legal representative and not to an unauthorised person.
Right of access
You are entitled to receive confirmation as to whether your Personal Data is being processed by us, as well as various other information relating to our use of your Personal Data. You also have the right to a copy of the Personal Data which we are handling regarding you.
Right to rectification
You have the right to require us to rectify any inaccurate Personal Data we hold about you. You also have the right to have incomplete Personal Data we hold about you completed, by providing a supplementary statement to us.
Right to restriction
You can restrict our processing of your Personal Data where:
- you think we hold inaccurate Personal Data about you;
- our handling of your Personal Data breaks the law, but you do not want us to delete it;
- we no longer need to process your Personal Data, but you want us to keep it for legal reasons; or
- we are handling your Personal Data because we have a legitimate interest you and are in the process of objecting to this use of your Personal Data.
Where you exercise your right to restrict us from using your Personal Data, we will then only process your Personal Data when you agree, except for storage purposes and to handle legal claims.
Right to data portability
You have the right to receive the Personal Data we hold about you in a structured, standard machine readable format and to send this to another organisation controlling your Personal Data.
Right to erasure
You have the right to require us to erase your Personal Data which we are handling in the following circumstances:
- we no longer need to use your Personal Data for the reasons we told you we collected it for;
- where we needed your consent to use your Personal Data and you have withdrawn your consent;
- you object to our use of your Personal Data and we have no compelling reason to carry on handling your Personal Data;
- our handling of your Personal Data has broken the law; or
- we must erase your Personal Data to comply with a law we are subject to.
Right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your Personal Data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact email@example.com. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Changes to this Privacy Notice
We may change this Privacy Notice at any time to ensure it always accurately reflects the way we collect, use and safeguard your Personal Data.
Please check this notice from time to time to ensure you are aware of any updates we may have made to our Personal Data handling practices. The date of the changes will be listed in the ‘Last updated’ section below. We will endeavour to notify all of our current clients of any updates to this notice via email and we will post the relevant announcement on our website homepage.
We recommend that you print a copy of this page for your reference.
How can you make a complaint?
Please note that if you are not satisfied with the processing of your Personal Data as set out in this Privacy Notice, please contact us at firstname.lastname@example.org
You have the right to issue a complaint directly with the Information Commissioners Office, the data protection supervisory authority for England and Wales (https://ico.org.uk/concerns/).
Please contact us at email@example.com if you have any questions, comments or requests regarding this Privacy Notice.
Last updated August 2018