Who we are
Whitestrand Boats Limited of 1 Strand Court, Whitestrand Quay, Salcombe, Devon, England TQ8 8ET, is committed to protecting the privacy and security of your personal information. We are data controllers. This means that we are responsible for deciding how we hold and use personal information about you.
We collect, use and are responsible for certain personal information about you. When we do so we are regulated under the General Data Protection Regulation (“GDPR”) which applies across the European Union (including in the United Kingdom by way of the Data Protection Act 2018) and we are responsible as ‘controller’ of that personal information for the purposes of those laws.
Data protection principles
We will comply with data protection law. This says that the personal information we may hold about you must be:
Used lawfully, fairly and in a transparent way.
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.
Relevant to the purposes we have told you about and limited only to those purposes.
Accurate and kept up to date.
Kept only as long as necessary for the purposes we have told you about.
Our collection and use of your personal information
We collect personal information about you when you contact us, send us feedback, purchase products or services from us and make bookings with us. We collect this personal information from you directly, such as when you contact us and make bookings with us either by telephone, email or in person.
The personal information we collect about you depends on the particular activities carried out. Such information includes:
your name, address and contact details
debit or credit details for the purposes of a security deposit
details of any feedback you give us by phone, email, post or via social media
information about the services we provide to you
documents verifying proof of identity
We use this personal information to:
verify your identity
provide goods and services to you
cancel any services
notify you of any changes to our website or to our services that may affect you
improve our services
Our services are not intended for use by children under the age of 18 and we do not knowingly collect or use personal information relating to children.
Our legal basis for processing your personal information
When we use your personal information we are required to have a legal basis for doing so. There are various different legal bases upon which we may rely, depending on what personal information we process and why.
The legal bases we may rely on include:
consent:where you have given us clear consent for us to process your personal information for a specific purpose
contract:where our use of your personal information is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
legal obligation:where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)
vital interests:where our use of your personal information is necessary to protect you or someone else’s life
public task:where our use of your personal information is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law
legitimate interests:where our use of your personal information is necessary for our legitimate interests or the legitimate interests of a third party (unless there is a good reason to protect your personal information which overrides our legitimate interests)
The personal information we collect, when and how we use it
When information is collected
What information we ask for
How and why we use your information
When you make a booking with us
Your name, postal address, date of birth (we may ask to see this, but we don’t keep the details), email address, contact numbers
debit or credit card details
The personal data will be obtained directly from you.
We ask for this:
to clearly show who has made a booking with us
to ensure that person is of the appropriate age to make that booking with us
to communicate with you about your booking
to take payment from you for using our services
This information enables us to take a booking for the purposes of providing goods and services to you, to cancel any services, and to complete and fulfil the contract between us.
We also use your information to notify you of any changes to our website or to our services that may affect you, and to improve our services.
Your card details will only be held by us while the contract is valid, and destroyed thereafter.
Your personal data will be held by us for the duration of the provision of services and any period we are permitted by law to retain your personal data thereafter. The current retention period is [six years] after the conclusion of our contract.
Who we share your personal information with
We will share personal information with law enforcement or other authorities if required by law.
We will not share your personal information with any other third party. Where we do, this will be with the Harbour Authority if it is appropriate to do so, and relevant to a situation on the water.
If you fail to provide personal information
If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as providing you with goods or services (including hire services) and allowing you to make bookings with us), or we may be prevented from complying with our legal obligations (such as acting in your best interests).
Transfer of your information out of the EEA
We do not transfer your personal data outside the European Economic Area. Where we do, appropriate safeguards will be put in place to protect your personal data.
Rights of access, correction, erasure, and restriction
Your duty to inform us of changes
It is important that the personal information we hold about you is accurate and current. Please keep us informed if your personal information changes during your working relationship with us.
Your rights in connection with personal information
Under certain circumstances, by law you have the right to:
• Request access to your personal information (commonly known as a "data subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Requestcorrectionof the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request erasureof your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
• Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes.
• Request the restrictionof processingof your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
• Request the transferof your personal information to another party.
If you want to review, verify, correct or request erasure of your personal information, object to the processing of your personal data, or request that we transfer a copy of your personal information to another party, please contact us in writing. You can do so by email at firstname.lastname@example.org.
No fee usually required
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
What we may need from you
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
Right to withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us using our contact details provided on the last page. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.
Contact with you after using our services
After a hire, we send an email expressing our thanks and requesting feedback on TripAdvisor. We do not send marketing emails.
How to complain
We hope that we can resolve any query or concern you raise about our use of your information.
You have the right to lodge a complaint with a supervisory authority, in particular in the European Union (or European Economic Area) state where you work, normally live or where any alleged infringement of data protection laws occurred. The supervisory authority in the UK is the Information Commissioner who may be contacted at https://ico.org.uk/concerns/or telephone: 0303 123 1113.
How to contact us
If you wish to contact us, please send an email to email@example.com call our shop on 01548 843818.