Privacy Statement – Chestnut Farm Holiday Park

This privacy statement explains how we, Chestnut Farm Holiday Park, intend to collect and use information about you. For further information, please see our privacy policy held for each park at reception or on the noticeboards, any update to our privacy statement can also be found here.

1. Who we are
   Chestnut Farm Holiday Park (we, us or our).
   Under data protection law we are the ‘data controller’ of the personal information that we collect about you and as a data controller we have certain legal responsibilities
   concerning how we collect, use and share your personal information. We must inform you about this.
2. The information we collect
   The types of personal information we collect from you include:
   1. Information you provide to us – personal information that you provide to us including your contact details
      (i.e. your name, email address, phone number and postal address) and your bank account details.
   2. Our correspondence – if you contact us, we may keep a record of that correspondence;
   3. Sales and services information – details of transactions that you make with us and details of the services we provide to you;
3. How we use your personal information
   We may use your personal information in the following ways:
   1. to provide our services effectively to you – examples: to administer our services, including handling your requests, communicating with you
      (including about any offers or promotions); keeping up-to-date records about you and carrying out our obligations arising from any contracts
      entered into between you and us, to make payments to you and receive payments from you (where applicable).
   2. to market to you – if you have not objected, to provide you with updates and offers about our products and services and the products or
      services of selected third party companies that we think may be of interest to you. (See paragraph 4, ‘Transfers of personal information‘,
      below for further information). We may use your information for marketing our own services to you by post or phone and, where required by law, we will
      ask for your consent at the time we collect your data to conduct any of these types of marketing. We will provide an option to unsubscribe or opt-out of
      further communication on any electronic marketing communication sent to you or you may opt out by contacting us using the details in the ‘Contact us‘
      section of this privacy notice. If at any time you do not want us to contact you for marketing purposes, you can let us know by contacting us using
      these contact details.
4. Transfers of personal information
   We may permit selected third party companies to use your personal information, for the purposes set out in the section ‘How we may use your
   personal information‘ (above). These companies may use this information to contact you. Selected third parties will be subject to obligations
   to process your personal information in compliance with the same safeguards that we deploy.

   We work with carefully selected insurance intermediaries, who are regulated by the Financial Conduct Authority, to provide you with information about
   relevant insurance services. If we intend to pass your details to them we will inform you beforehand and give you an opportunity to object. If you tell
   us that you do not wish to have this information passed on we will respect your wishes.

   We confirm that all personal information held by us about you will remain in (and will not be transferred outside of) the United Kingdom.

5. How long will we keep your personal information?
   Where you have expressed an interest in our products or services / where we have collected your contact details for us to provide you with
   information about our services, we will keep your information for 10 years, or until you ask us to stop sending you such information.

   Where you have purchased a product or service form us, we will keep your personal information for so long as we are providing you with
   services, plus for 6 years, to deal with any queries, complaints or legal claims you may have.

6. Legal grounds to process
   The legal grounds we rely on to process your personal information are that processing is necessary for:
   1. our legitimate business interests or those of a third party and these interests are not overridden by your interests or
      fundamental rights and freedoms in relation to the protection of your personal information. Our legitimate business interests
      include enabling us to provide you with products, services and information about our products and services (marketing). Third
      party legitimate business interests include the promotion of insurance services to you so that we have sufficient insurance
      coverage at our site(s);
   2. our performance of a contract made with you. This includes our providing you with products and services and our taking
      steps at your request towards, and in anticipation of, providing you with products and services;
   3. our compliance with legal or regulatory obligations.
      For special category personal information, the legal grounds we rely on to process your information are that you have given
      your explicit consent. Please note that you will not have to give your consent to us in order for us to provide you with
      our products or services.
7. Your rights in relation to your personal information
   If you have any questions in relation to our use of your personal information, you should first contact us using the contact in the ‘Contact us‘ section of this privacy notice.
   Under certain conditions, you may have the right to request us to:
   1. provide you with further details on the use we make of your personal information;
   2. provide you with a copy of personal information that we have collected about you;
   3. update any inaccuracies in the personal information we hold;
   4. object to our use of your personal information if our use of your personal information is causing you undue harm. In such a case we must cease
      using your personal information for that purpose.
8. Contact us
   If you have any questions, or you would like to find out more about this privacy notice you can write to us at:

   Chestnut Farm Holiday Park
   Moor End
   Acaster Malbis
   York YO23 2UQ

   Email: enquiries@chestnutfarmholidaypark.co.uk