Privacy Policy

Your privacy is important to Sail Mhor View and this policy sets out the information on the personal data we collect about you, and your rights in respect of this data.

This policy applies to you for all aspects of our services, including making an enquiry, booking and paying for a holiday, visiting our website, or using our social media pages. As a catch all term, we’ll use ‘services’ to describe these.

This Privacy Policy covers the following:

If you have any comments about this policy, please email them to nicola@sailmhorview.co.uk

Who We Are

Sail Mhor View is a holiday cottage in Durnamuck, Ross-Shire, registered with Highland Council as a business.  It is owned by Nicola and John Brunwin.

The address of Sail Mhor View is:

Sail Mhor View, Durnamuck, Dundonnell, Garve, Ross-Shire, IV23 2QZ.

The address of Nicola and John Brunwin is:

11, Durnamuck, Dundonnell, Garve, Ross-Shire, IV23 2QZ

We respect your right to privacy and will only process personal data about you in accordance with applicable data protection laws.

We comply with the UK Data Protection Act 2018 (the ‘Data Protection Legislation’).  If this law is replaced or superseded, we will also comply with that.

You have a right to make a complaint at any time, to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (ico.org.uk). However, we would very much appreciate the chance to deal with any concerns you may have before you approach the ICO, so please get in touch with us in the first instance.

What we may collect and how we store your personal data

Personal data, or personal information, is any information about an individual from which that person can be identified.  It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you when you engage with us.  Whenever we collect personal data about you, we must have a legal ground to do so.

  1. Identity and contact information when you contact us, or engage us for the provision of a holiday at Sail Mhor View:

Type of Data

We collect:

Lawful Basis

This is to perform a contract with you which is to deal with your holiday booking.

If you choose not to provide this information, we will be unable to provide you with a booking at Sail Mhor View.

This information is stored on a local server, within the UK.  Our local server is password protected and no third parties have access.

2. Identity and BACs details when we return any refundable security deposit to you, after your holiday at Sail Mhor View:

Type of Data

We collect:

Lawful Basis

For us to return your refundable security deposit at the end of your holiday, we will ask you for your bank details.  This is to perform a contract with you.

We use these details just to send you this back and we immediately delete the email from the inbox and from the deleted box afterwards. This information is not provided to any third parties.

3. Technical Data:

Type of Data

Includes:

  • Internet protocol (IP) address
  • Your login data, browser type and version
  • Time zone setting and location
  • Browser plug-in types and versions
  • Operating system and website
  • Other technology on the devices you use to access our website

Lawful Basis

This data is automatically collected when you use our website.  The purpose is to enable your access to our website.

The lawful basis is this is necessary for us to perform a contract with you (i.e., to give you access to the service our website provides).

4. Cookies Data:

This website only uses strictly necessary cookies for the website to function and for site security. We personally do not collect any information from cookies.

5. Analytics:

This includes third-party analytics services (such as Google Analytics) to evaluate your use of our website, compile reports on activity, collect demographic data, analyse performance metrics, and collect and evaluate other information relating to the website and internet usage.  These third parties use cookies and other technologies to help analyse and provide us the data.  By accessing and using the website, you consent to the processing of data about you by these analytics providers in the manner and for the purposes set out in this policy.

The purpose is to enable direct marketing.

The lawful basis is this is necessary for our legitimate interest to present relevant content and services to you.

Cookies

We use cookies in accordance with the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003 and data protection legislation.  Cookies are small text files placed on your device when you visit our website, and are used to make the user’s experience more efficient.  We use cookies to distinguish users and to improve our website.  We analyse how you use our website, and we look at aggregate statistics about your usage, and how others use our website.  We collect certain information from these cookies, and this includes information about your IP address, your location when you access our website, the date and time you access our website, the language you use, and the type of browser you use.

These are the types of cookies we use:

Session and Persistent cookies can be either first or third party cookies.  A first party cookie is set by the website being visited; a third party cookie is set by a different website.  Both types of cookies may be used by us or our business partners.

The third-party cookies we use are:

All of our cookies are categorised by the role they fulfil on our website:

  1. Strictly Necessary: these are essential to enable you to move around our website and use features such as secure services. Without these cookies such services couldn’t be provided.
  2. Functionality: allow our website to remember your choices and to personalise certain features. These cookies may be anonymised and cannot track your browsing activity on other websites; and
  3. Performance: collect information as to how users use our website. These cookies don’t collect information that identifies a visitor.  The information is collected as aggregated and used to improve our website.
  4. None of the cookies employed are classified as Behavioural Targeting.

We will always ask for your consent to use non-essential cookies.  You are free to withhold consent to this, but it means that we might not be able to provide the full website experience to you, including some elements of video advertising.  If at any time you wish to disable our cookies, you can do so through the settings on your browser, or whenever the pop-up appears on our website (each time you access our website).

We may process your data for compliance with a regulatory requirement or legal obligation to which we are subject to.  Your data will only be processed if processing the data to comply with such obligation is a reasonable and appropriate way of achieving compliance.

We also collect, use, and share aggregated data such as statistical or demographic data for any purpose.  Aggregated data may be derived from your personal data but is not considered personal data in law, as this data does not directly or indirectly reveal your identity.  For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature.  However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data, which will be used in accordance with the policy.

Storing your personal data

We store all of your personal data on our servers within the UK and the Republic of Ireland.  We may transfer your collected data to storage outside the European Economic Area (EEA) or the UK. It may be processed outside the EEA or the UK so you can retrieve our services and deal with payment.  If we do store or transfer data outside the EEA or the UK, we will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA or the UK.  This means that sometimes we may need to use legally binding contractual terms between us and any third parties we engage with and the use of the EU-approved Model Contractual Arrangements.  We will still be responsible for protection of your personal data, even where we have transferred it outside the EEA or the UK.

Data security is of great importance to us, and to protect your data we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure data collected through our website.  In addition, we limit access to your personal data to those third parties who have a need to know.  They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

We regularly review our data retention obligations to ensure we are not retaining data for longer than we’re legally obliged to.

How we disclose your information

We may disclose your information in the following cases:

Your rights regarding your personal data

When you provide us with your personal data, you have certain legal rights, including:

If you wish to access, rectify, erase or transfer your personal data, please contact us at nicola@sailmhorview.co.uk

Third Party Links

This policy only relates to our services.  We might have link on / within our services to other websites, and these websites will have their own terms and conditions and privacy policies.  You should check those privacy policies before providing your personal data to those websites.

The changes we may make to this policy

We can update this policy from time to time, as laws change or our services change.  If we make material changes to this policy, and we need your consent to those changes, we will contact you by email to do so.

Privacy Policy v.2 May 2022