Privacy Policy.

You can access and browse our website without disclosing any personal data. Google analytics is a cookie that allows us to measure, for example, the length of time you spent browsing the site, which pages you viewed etc. The data thus collected is totally anonymous and there is no way of tracking it back to the individual user. It is used solely for system administration to provide statistics used to evaluate the website. (Throughout this document ‘we’ or ‘our’ refers to the owners, David and Helena Payne.)

Who we are:           Oakroyd, Canton, Gorran Haven, St. Austell, Cornwall. PL26 6JG

Owners / Data Controllers:       David & Helena Payne.

Contact:                    website:           www.oakroyd.com

                                    Email:              [email protected]

                                    Telephone:      01726842546

Address:          Trevell, 7 Trelispen Park, Gorran Haven, St. Austell, Cornwall. PL26 6HT

Personal information we collect:

We do not collect personal information from any other source other than that provided by you when you contact us about our holiday bungalow. The type of information we collect from you may include your name, postal address, email address and phone number. We may also ask for other information such as the names and ages of any of the guests in your party who may be under 16. By providing us with this information you are agreeing to let us handle their personal details.

We do not collect or use any personal information for any purpose other than to fulfil our contract with you when you make a booking with us. We do not use your personal data for the purposes of marketing or advertising.

Recording customer details – how we use your information.

To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff and visitors who come onto our premises for the purpose of contact tracing.

By maintaining records of staff and visitors and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.

As a visitor to Oakroyd you will have been asked to provide some basic information and contact details. The following information will have been collected:

·         The name of the lead member of the group staying at Oakroyd
·         Contact telephone numbers for the lead member of the group
·         Date of visit, with arrival and departure times

The establishment as the data controllers for the collection of your personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would, at this point, be responsible for compliance with data protection legislation for that period of time.

The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from our establishment from loss, misuse and unauthorised access, disclosure, alteration and destruction.

In addition, if you only interact with one member of staff during your visit, the name of that staff member will be recorded alongside your information.

NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them.

For example, if another visitor to Oakroyd reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of visitor details for a particular time period.

You have already booked your holiday at Oakroyd and completed our form before you arrived.

Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for any other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to by law (for example, as a result of receiving a court order). In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.

However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (perhaps, for example, your name, address and phone number). Where this is the case, this information only will continue to be held after 21 days and we will use it as we usually would, unless you tell us not to.

Your data will always be stored and used in compliance with the relevant data protection legislation.

The use of your information is covered by the General Data Protection Regulations Article 6(1) {c} - a legal obligation to which we, as an establishment, are subject to. The legal obligation to which we’re subject, means we’re mandated by law, by a new set of regulations from the government, to co-operate with the NHS Test and Trace service, in order to help maintain a safe operating environment and to help fight any local outbreak of coronavirus.

Please note that we do not transfer your personal data outside of the UK, to the EU or anywhere else.

By law you have a number of rights as a data subject, such as the right to be informed, the right to access information hold about you and the right of rectification of any inaccurate data that we hold about you.

You have the right to request that we erase personal data about you that we hold (although this is not an absolute right).

You have the right to request that we restrict processing of personal data about you on grounds relating to your particular situation (also again, this right is not absolute).

If you are unhappy and wish to complain about how your information is used, you should contact Mrs. Helena Payne in the first instance to resolve your issue.

If you are still not satisfied, you can complain to the Information Commissioner’s Office. Their website address is www.ico.org.uk (https://ico.org.uk/). Mrs. Helena Payne is in charge of data protection for Oakroyd.

We keep our privacy notice under regular review and we will make new versions available on our privacy notice page on our website www.oakroyd.com This privacy notice was last updated on 1 October 2020.


 Safety and security:

We have implemented security measures to protect the personal data we have under our control from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss. We will ensure that all employees who have access to and are involved with the processing of personal data will respect our visitors’ personal data and ensure that it will not be disclosed, except when required to by law. Sensitive personal information, such as payment card details are depersonalised.

We keep your data secure at all times. At times we may need to share your data with others when it is necessary to perform our services or where you have given your consent to do so.

If you submit content through public forums such as blogs or social media any personal information you provide is done so at your own risk as it has been volunteered by you.

Once you leave our website eg: to visit local area webpages, our responsibility to you ends. You will need to check the privacy policies on any other web site you might access.


Transparency and choice:

You can access or change any of your personal details at any time by contacting us either by email, post or phone.

We will not send you marketing communications. However, we may still contact you with non-marketing messages eg: booking confirmation, balance reminders etc. that would be relevant to the service we are providing you.


How long we keep the data:

We only keep personal data for an appropriate length of time for the purpose(s) for which it is being used. This period will vary according to our contractual and legal requirements.


Your rights:

You have the right to ask us about the personal data we keep about you, although we will require proof of identity before we do this. You can contact us by email, post or phone. We can provide a readable copy of the personal data we keep within 10 days. We will provide the information for a fee of £10.

You may challenge the data we hold and where appropriate, you may have the data erased, rectified or amended. We reserve the right to refuse you a copy of your personal data, but will give reasons for our refusal. You can challenge our decision to refuse to provide you with a copy of your personal data.

If you have a concern about our privacy policy, then you have the right to complain to the Information Commissioner’s Office. www. ICO.org.uk   Phone: 01625 524510

Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire. SK9 5AF