PRIVACY & DATA PROTECTION POLICY

Effective Date: 1st June 2025
Business Name: Waterheath Dog Meadow
Website: www.waterheath.co.uk
Data Controller: Waterheath Dog Meadow

1. Introduction

Waterheath Dog Meadow is committed to protecting your personal data and respecting your privacy, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose and store your data when you use our services, including when you make online bookings to visit our dog meadow.

2. Data Controller Details

For the purposes of the UK GDPR, the data controller is:

Waterheath Dog Meadow
Address: Waterheath Dog Meadow, Waterheath Road, Beccles, Suffolk, NR34 0DQ
Email: dogmeadow@outlook.com
Phone: 07867 525 959

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Full name, title.
Contact Data: Email address, telephone number, billing address.
Dog-Related Data: Dog’s name, breed, behavioural information (if requested).
Booking Data: Date/time of bookings, frequency of visits, chosen facilities.
Payment Data: Payment method (processed securely by [e.g. Stripe/PayPal]; we do not store full payment details).
Technical Data: IP address, browser type, device information, cookies, website usage data.
Marketing Preferences: If you opt-in to receive updates or offers from us.

We do not collect any special category data (e.g., health or biometric data) as part of our services.

4. How We Use Your Personal Data

We use your personal data for the following purposes:

To manage and confirm your bookings.
To send service-related communications (e.g., booking confirmations, cancellations).
To process payments securely.
To manage your account and respond to queries or complaints.
To improve our website and services.
To send marketing communications, only if you have opted in.

5. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases to process your personal data:

Performance of a contract: To provide the booking and park access services you request.
Consent: For sending you optional marketing communications.
Legitimate interests: For internal administration, fraud prevention, website analytics, and ensuring service quality.
Legal obligation: For compliance with laws and regulations.

6. Sharing Your Personal Data

We may share your data with the following trusted parties:

Payment processors: e.g., Stripe, PayPal.
IT and hosting providers: For operating our website and booking platform.
Email marketing platforms: e.g., Mailchimp, only with your consent.
Legal authorities: If required by law or to respond to legal process.

All third parties are contractually obliged to respect the confidentiality and security of your data in accordance with UK GDPR.

7. Data Transfers Outside the UK

If your personal data is transferred outside the UK (e.g., to third-party service providers), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions recognised under UK law.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary to:

Fulfil the purposes for which we collected it.
Meet legal, accounting, or reporting obligations.

Typically, we retain booking and payment data for up to 6 years, in line with HMRC requirements. Marketing data is retained until you opt out.

9. Your Data Protection Rights

You have the following rights under the UK GDPR:

Right to access – You can request copies of your personal data.
Right to rectification – You can ask us to correct inaccurate or incomplete data.
Right to erasure – You can request deletion of your data under certain circumstances.
Right to restrict processing – You can ask us to limit how we use your data.
Right to object – You can object to processing for marketing or based on our legitimate interests.
Right to data portability – You can request your data in a structured, commonly used format.
Right to withdraw consent – If processing is based on consent, you can withdraw it at any time.

To exercise these rights, please email us at dogmeadow@outlook.com.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://www.ico.org.uk

10. Cookies and Tracking Technologies

Our website uses cookies to:

Enable core functionality (e.g., bookings, account login).
Improve your browsing experience.
Analyse traffic and site usage.

You can manage your cookie preferences via your browser settings.

11. Data Security

We use appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, or misuse. These include:

SSL encryption for data transmitted over the internet.
Secure servers and firewalls.
Access control measures for internal systems.

12. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices or content of these sites.

13. Changes to This Policy

We may update this policy from time to time. The latest version will always be posted on our website, with the effective date clearly stated.

14. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact:

Waterheath Dog Meadow
Email: dogmeadow@outlook.com
Phone: 07867 626 959