At Harrison Leisure UK LTD we are committed to protecting your privacy, we work hard to ensure your information is safe and we strive to provide a service which people can both enjoy and trust. Our procedures to hold information are very strict to prevent any unauthorised person getting hold of it.
2. Who are Harrison Leisure UK LTD?
We are a family run business owning 8 Holiday Parks across the North of England. For ease of readability, we will continue to refer Harrison Leisure UK LTD as ‘Us’ and ‘We’ throughout the policy.
We have a legal duty to protect personal information that we collect under Privacy Legislation such as, the UK GDPR, the Data Protection Act 2018 (the “DPA”) and the Privacy and Electronic Communications Regulations 2003, (PECR).
3. The Legal bases we rely on
The law on data protection sets out a number of different reasons for which a company may collect and process personal data, including:
In certain circumstances, we can collect and process your data with your consent.
For example, we may ask you if you would like to receive news and offers. When we ask you this we will always give you the option to tick a box informing us of your preferences.
To fulfil our contract to you
In certain circumstances, we can collect and process your personal data to fulfil our contract to you.
For example, if you book a holiday with us, we’ll collect your personal information to enable us to book your holiday and communicate with you about all the details.
If the law requires us to, we may need to collect and process your data
For example, we can pass on details of people involved in fraud or other criminal activity affecting Harrison Leisure LTD to law enforcement.
In certain situations, we may process your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.
For example; ensuring network and information security
Fraud and Anti Money Laundering prevention
Indicating possible criminal acts or threats to public safety
Personalising our websites content to improve your customer experience
We may send you surveys to ensure we understand your experience and to make improvements where necessary.
4. When do we collect your personal information?
We may collect and use various types of personal information about visitors to our websites and guests who book a holiday with us or buy a holiday home from us, including:
5. What types of personal data do we collect?
For example, your details may need to be passed to a third-party to supply or deliver the booking or service that you ordered, and we may keep your details for a reasonable period afterwards in order to fulfil any contractual obligations such as refunds, guarantees and so on.
For example, by checking your password when you login and using automated monitoring of IP addresses to identify possible fraudulent logins from unexpected locations.
Of course, you are free to opt out of hearing from us by any of these channels at any time.
For example, we might display a list of holidays you’ve recently looked at, or offer you recommendations based on your purchase history and any other data you’ve shared with us.
For example, when a court order is submitted to share data with Government functions & law enforcement agencies or a court of law e.g. HM Revenue or DWP.
For example, by combining this data, this will help us personalise your experience and decide which inspiration or content to share with you. We also use anonymised data from customer booking histories to identify trends in different areas of the country. This may then guide which types of news and offers we send to different locations.
We want to bring you news and offers that are most relevant to your interests at particular times. To help us form a better, overall understanding of you as a customer, we may, where relevant, combine your personal data gathered across Harrison Leisure UK LTD as described above, for example your booking history at Harrison Leisure UK Holiday Parks. For this purpose, we may also combine the data that we collect directly from you with data that we obtain from third parties to whom you have given your consent to pass that data onto us.
We may also use something called “Meta custom audiences” to deliver advertisements to our website customers, based on email addresses that we collect from you. The tool enables us to convert your email address into a unique number that Meta can then match with the numbers generated from its own customers email addresses. You may learn more about Meta custom audiences by visiting: https://www.facebook.com/business/help/341425252616329?id=2469097953376494
We use something called “Lookalike Audiences” this tool enables us to create a lookalike audience of customers with similar demographics. Meta finds users who have similar attributes to our customer base.
We use Google Customer Match Lists to deliver relevant ads to you on the Googe Network, the tool works in a similar way mentioned above but is only relative with Google and Google Partners. You can read more about Google Match Lists and how they work here: https://support.google.com/google-ads/answer/6379332?hl=en-GB
Our customers would need receive marketing as a result of this activity.
To opt out of receiving marketing reading section 14 below, titled ‘How can you stop the use of your personal data for direct marketing?’
We sometimes share your personal data with trusted third parties. Here’s the policy we apply to those organisations to keep your data safe and protect your privacy:
Examples of the kind of third parties we may work with are:
For example, If you take out holiday insurance as part of your holiday, we may pass on details of your booking to our insurers, and their underwriters. This will allow them to administer your policy and any claim.
The following may be operated across our parks to assist with monitoring & maintaining safety, to prevent & detect crime & assist law enforcement (where necessary):
These systems are operated for the protection of our guests, employees & premises from criminal activities.
If we discover any criminal activity or alleged criminal activity through our use of CCTV, we will process this data for the purposes of preventing or detecting unlawful acts.
The Legal basis for our use of this information is in our Legitimate Interests to ensure the safety of guests and employees at our parks and to assist with law enforcement. We may also use the footage to exercise & defend our legal rights.
We do not normally collect sensitive personal information from you as part of the booking process. However, if you make us aware of any special requests for your booking including anything due to specific medical, dietary or religious requirements, we will note these so that we can do our best to meet your request. We will not process this data for any other purpose. If you book onsite activities (including, but not limited to, sports, outdoor activities and spa treatments), we ask for information about your health including any existing conditions relevant to the activity and details of who to contact in the event of an emergency. The information is collected for the following purposes:
The legal basis for our use of this data is your consent and to fulfil our contract with you. You have the right to object to us processing this data at any time and our right to process data is not overridden by your interests, fundamental rights and freedoms.
The personal information that we collect from our website visitors and guests may be transferred to, and stored at, destinations outside the European Economic Area, (the “EEA”). To safeguard your personal information and to ensure that it is properly protected we have put in place contractual safeguards with our Data Processors.
Any transfer of your personal data will follow applicable laws and we will treat the information under the guiding principles of this Privacy Notice.
Whenever we collect or process your personal data we’ll only keep it for as long as is necessary, for the purpose for which it was collected. This period will be determined based on any business and/or legal requirements.
At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
If you need further information, please contact us HERE
You have certain rights in respect of the personal information that we hold about you. To exercise any of these rights, please submit a request HERE
We will process all personal data in line with your rights, in each case to the extent required by and in accordance with applicable law only (including in accordance with any applicable time limits and any requirements regarding fees and charges). We will always respect your personal information rights. For more information on your rights, how to exercise these and when they apply, please see: https://ico.org.uk/your-data-matters/
There are several ways you can stop direct marketing communications from us:
Please note that you may continue to receive communications for a short period after changing your preferences while our systems are fully updated.
Our website uses “cookies” and other tracking technologies which are placed and stored on your computers’ hard drives, or in their browser memories, if you agree, when you visit our website. These are used for various purposes, including distinguishing you from other website visitors. You can manage all cookies using your browser settings or using a service such as https://www.aboutcookies.org.uk/managing-cookies. You can manage your preferences for the Meta pixel through Meta settings. See our Cookies Policy for more information.
We treat your information with the utmost care and take all appropriate steps to protect it. We secure access to all transactional areas of our websites and apps using ‘https’ technology.
Access to your personal information is password protected, and sensitive data is secured and tokenised to ensure it is protected.
We regularly monitor our system for possible vulnerabilities and attacks, and we carry out penetration testing to identify ways to further strengthen security.