Curious Retreats (referred to as “We, “Our” or “Us”), is committed to protecting the privacy and security of your personal information. We are committed to ensuring the privacy of our clients, guests, event attendees and users of our website and app.
We have therefore developed this Privacy Notice to inform you of the data we collect, what we do with your information, what we do to keep it secure, as well as the rights and choices you have over your personal information.
Throughout this document we refer to Data Protection Legislation which means the Data Protection Act 2018 (DPA2018), United Kingdom General Data Protection Regulation (UK GDPR), the Privacy and Electronic Communications (EC Directive) Regulations 2003, all the foregoing as amended from time to time, and any legislation implemented in connection with the aforementioned legislation. Where data is processed by a controller or processor established in the European Union or comprises the data of people of the European Union, it also includes the EU General Data Protection Regulation (EU GDPR). This includes any replacement legislation coming into effect from time to time.
Curious Retreats is the controller for the personal information we process, unless otherwise stated.
We are registered with the Information Commissioner’s Office (the ICO), under our parent entity Ripco Holdings Limited.
You can contact us either by phone, email or post.
Our postal address:
Curious Retreats, Broom Heath House, Broomheath, Woodbridge IP12 4DL
Phone: 01394 470070
2. THE INFORMATION WE COLLECT AND WHEN
We only collect personal information that we know we will genuinely use and in accordance with the Data Protection Legislation.
You are under no statutory, contractual requirement or obligation to provide us with your personal information; however, we require at least the information below in order for us to deal with you as a prospect, customer or owner in an efficient and effective manner.
We will not store, process or transfer your data unless we have an appropriate lawful reason to do so. The legal basis for processing your data includes the following:
The type of personal information that we will collect about you, and you voluntarily provide to us may include some or all of the following:
2.1 Contact Data
We may process information that you make available to us (“contact data”). This contact data may include your name, address (incl. postcode), phone number, email address, date of birth, partner’s name, dependant’s name(s) and other demographic information such as preferences and interests. This information may be provided to us in person or through our contact forms on our website or app. We may use this contact data, in conjunction with our partners and suppliers, during the course of providing our services to you.
Where you have provided your consent for us to do so, we may contact you to send you periodic newsletters or notify you of our promotions and offers.
The legal basis for processing contact data is for the purposes of establishing and carrying out our contract with you, or in taking specific steps, at your request, before entering into a contract.
2.2 Enquiry Data
We may process information contained in any enquiry you submit to us regarding our properties (“enquiry data”). The enquiry data may be processed for the purposes of offering, marketing and selling appropriate products and/or services to you.
The legal basis for processing enquiry data is our legitimate interests in providing a suitable response to your enquiry.
2.3 Transaction Data
We may process information relating to any payments made to you through our website (“transaction data”). The transaction data may include your contact details, bank account details, and the transaction details. The transaction data may be processed for the purposes of completing these payments and for the proper keeping of accounts and records.
The legal basis for processing transaction data is, firstly, for the purposes of establishing and carrying out our contract with you, or in taking specific steps, at your request, before entering into a contract and secondly, our legitimate interests in properly administrating our business and accounts.
2.4 Technical & Usage Data
We automatically collect personal data (“technical and usage data”) when you browse or engage with our website, by using cookies, server logs and other similar technologies. This technical and usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the technical and usage data is our analytics tracking system. This data may be processed for the purposes of analysing the use of the website and services.
The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.
2.5 Account Data
If you set up an account with us on our website, you may provide us with information about yourself (“account data”). This account data may include your name, title, home address, email address, telephone number, date of birth and your login information including login email/username and password. We may use this data to provide you with services from our website, to monitor and administer your account with us, and to process any bookings, concierge bookings and/or any other services that we provide. The legal basis for this processing is the performance of our contract with you, and/or taking steps, at your request, to enter into such a contract.
Where you have provided your consent for us to do so, we may also use this data for the purposes of carrying out marketing activities, specifically in order to customise these activities so that the can present promotions offers and updates that are relevant to you.
If you sign up to our mailing list, you will receive periodic newsletters that may include company news, updates, and associated product or service information. Should you wish to unsubscribe, at any time, instructions are included at the bottom of each e-mail.
2.6 Owner Data
If you chose to let your property through Curious Retreats, we may process information that you provide to us (“owner data”). This owner data may include your name, home address, rental property address, postcodes, telephone number, email address, date of birth, gender, a photograph of you, date of birth, bank account details, demographic information such as preferences and interests, and information contained within images or texts that you send us which may contain locational data, and may be provided to us in person, through one of our contact or application forms or through our website or online portals. We may use this data to provide you with pricing information, for administering your account(s) with us, and for providing our services to you.
Where you have provided your consent for us to do so, we may contact you regarding the latest promotions and offers, and to send you newsletters.
The legal basis for processing owner data is for the purposes of establishing and carrying out our contract with you.
2.7 Marketing Data
We may process information that you provide to us for the purpose of subscribing to our newsletters (“marketing data”). The marketing data may include your name and email address and may be processed for the purposes of sending you our newsletters.
The legal basis for this processing is consent.
As part of the registration process for our Curious Retreats monthly e-newsletter and mailing list, we collect personal information such as email address and name. We simply use that information for a few reasons: to tell you about stuff you’ve asked us to tell you about (exclusive news, special offers, competition news), to check our records are right and to check every now and then that you’re happy and satisfied. We don’t rent or trade email lists with other organisations and businesses.
**How long is the Curious Retreats e-newsletter sign up giveaway running for?**:
The Pinney’s Weekend Hamper competition ends at midnight on Sunday 31st December 2023. The winner is still required to be an active subscriber to our Curious Chapters newsletter up until the 31st December. T&Cs apply. Contact email@example.com for more information.
2.8 Correspondence Data
We may process information contained in or relating to any communication that you send to us (“correspondence data”). The correspondence data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using our contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping.
The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
2.9 Competition Data
You may provide us with your details if you wish to enter one of our competitions. This data may include your title, name, email address, home address and post code, telephone number, date of birth and your demographic information such as preferences and interests. We may process this personal data for the purposes of processing your application to the competition or send you marketing communication if you actively opt-in at the time of entering the competition.
The legal basis for this processing is our legitimate interests in ensuring the proper running and administration of our competitions.
2.10 Other Processing Activities
In addition to the specific purposes for which we may process your personal data set out above, we may also process any of your personal data where such processing is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.
3. HOW WE USE YOUR INFORMATION
We use your personal data for several purposes, as outlined below:
4. WHO WE MIGHT SHARE YOUR INFORMATION WITH
We may share your personal data with other organisations in the following circumstances:
5. HOW WE KEEP YOU UPDATED ON OUR PRODUCTS AND SERVICES
We may send you relevant offers and news about our products and services in a number of ways including by email, but only if you have previously consented to receive these marketing communications. When you register with us, we will ask if you would like to receive marketing communications, and you can change your marketing choices online, over the phone or in writing at any time.
If you wish to amend your marketing preferences, you can do so by unsubscribing by clicking the link at the bottom of the newsletter, emailing or calling us using the details provided in Section 11.
6. YOUR RIGHTS OVER YOUR INFORMATION
Under data protection law, you have rights including:
6.1 Your Right to be Informed
You have the right to be informed about the collection and use of your personal data. We ensure we do this by providing you with this Privacy Notice. This Notice is regularly reviewed and updated to ensure it accurately reflects our data processing activities.
6.2 Your Right of Access
You may request that we confirm what information we hold about you at any time (a “Data Subject Access Request”) and ask us to modify, update or delete such information. We shall make this information available to you without delay and within one month of the request. We will provide the information free of charge unless the request is “manifestly unfounded or excessive”. In this case we shall charge a reasonable fee based on the administrative cost of providing the information.
We may ask for proof of identity and sufficient information about your interactions with us so that we can locate your personal information. Please note that the time limit for fulfilling your request does not start until we have been able to verify your identity.
6.3 Your Right to Rectification
You may request that any inaccurate or incomplete data be rectified or completed. You may make the request verbally or in writing. We shall complete this request within one calendar month.
6.4 Your Right to Restriction of Processing
You have right to restrict or block our processing of your information. When you request that processing is restricted, we can still store your information, but may not use it further.
6.5 Your Right to Object to Processing
You have the right to object to certain types of processing. This includes processing on the basis of our legitimate interest or direct marketing.
6.6 Your Right to Erasure
Also known as the ‘right to be forgotten’, you may request that we delete all the personal data we hold about you. You may make the request verbally or in writing. We shall complete this request within one calendar month.
6.7 Your Right to Data Portability
The right to data portability gives you the right, in certain circumstances, to receive personal data you have provided to a controller in a structured, commonly used and machine-readable format. It also gives them you the right to request that a controller transmits this data directly to another controller.
6.8 For More Information About Your Privacy Rights & Complaint Procedure
The Information Commissioner’s Office (ICO) regulates data protection and privacy matters in the UK. They make a lot of information accessible to consumers on their website and they ensure that the registered details of all data controllers such as ourselves are available publicly. You can access them here https://ico.org.uk/for-the-public.
7. HOW LONG WE KEEP YOUR INFORMATION FOR
We retain a record of your personal information in order to provide you with a high quality and consistent service. We will always retain your personal information in accordance with the Data Protection Legislation and never retain your information for longer than is necessary. Unless otherwise required by law, contact, transaction, account and owner data will be stored for a period of 6 years after our last contact with you at which point it will be deleted.
Correspondence, technical & usage and enquiry data will be retained for 2 years following the date of our last contact or dealing with you, at the end of which period it will be deleted from our systems
Competition data will be retained for 1 year following the date of our last contact or dealing with you, at the end of which period it will be deleted from our systems.
If you have positively opted-in to receive marketing communication (including as part of entering a competition) your data it will be retained until a request is made to opt-out/unsubscribe from receiving such marketing information.
We may anonymise your personal data for research or statistical purposes. Such anonymised data may be used indefinitely without further notice to you.
8. GIVING YOUR REVIEWS AND SHARING YOUR THOUGHTS
When using our website or mobile app, you may be able to share information through social networks like Facebook, Instagram, LinkedIn and Twitter. For example, when you ‘like’, ‘share’ or review our Services. When doing this, your personal information may be visible to the providers of those social networks and/or their other users. Please remember it is your responsibility to set appropriate privacy settings on your social network accounts so you are comfortable with how your information is used and shared on them.
Data security is of great importance to Curious Retreats and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure your collected data.
We take security measures to protect your information including:
10. CHANGES TO OUR PRIVACY NOTICE
We may change this Privacy Notice from time to time (for example, if the law changes). We recommend that you check this policy regularly to keep up-to-date.
11. HOW TO CONTACT US & COMPLAINT PROCEDURE
If you would like to exercise one of your rights as set out above, or you have a question or a complaint about this policy, the way your personal information is processed, please contact us by one of the following means:
By telephone: 01394 470070
By email: firstname.lastname@example.org
By post: Curious Retreats, Broom Heath House, Broom Heath, Woodbridge, IP12 4DL
You can make a complaint to the ICO at any time about the way we use your information. However, we hope that you would consider raising any issue or complaint you have with us first. Your satisfaction is extremely important to us, and we will always do our very best to solve any problems you may have.
Should you like to complain to the ICO, you may contact them as follows:
The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk
This Policy was last updated on 22 July 2023