This policy, together with our terms and conditions sets out the basis on which any personal data we may collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
Please note that this policy only applies to our website.
If you leave our site via a link or otherwise, you will be subject to the policy of that website provider. We have no control over that policy or the terms of the website and you should check their policy before continuing to access the site.
PERSONAL DATA PROVIDED WHEN COMPLETING A CONTACT FORM ON OUR WEBSITE
Information that you provide by filling in forms on our site on https://www.highwayhill.co.uk
Our web forms do not store any information you submit to us on our own web servers. Our web forms automatically email us with your enquiry / message directly. For additional security, all information submitted via our website, https://www.highwayhill.co.uk is done using SSL encryption ( Green Padlock ).
PERSONAL DATA PROVIDED WHEN BOOKING ACCOMMODATION
All booking is controlled by a third party accommodation booking service called https://bedful.com/
GDPR & THE ‘RIGHT TO BE FORGOTTEN’
This website [ https://www.highwayhill.co.uk ] does not store any personal data submitted to us via our web forms. However, we may store the information you have submitted to us by email to help assist with your enquiry. We only store this information / correspondence for the duration of successfully completing your inquiry to the level of satisfaction you should expect from us.
HOW TO FIND OUT WHAT PERSONAL DATA OUR WEBSITE MAY HAVE STORED ON YOU
Our website https://www.highwayhill.co.uk does not store our user’s personal data.
However, if you would like to enquire about this, our website has the functionality to check this for you across all the lists and databases our website uses. Please contact our DPO at email@example.com with your enquiry and we will then input your email address into our search system. If any data is found linked to that email supplied, our system will automatically put in motion a process that will allow you to access/download that data for inspection. If you have any questions regarding how we treat your personal data, please contact our DPO directly at firstname.lastname@example.org
HOW DO I PERMANENTLY DELETE ANY PERSONAL DATA FOUND.
If our system has found any personal data relating you you via the process outlined above, you may contact our DPO directly at email@example.com request this data be permanently deleted from our databases. Again, this is an automatic process that we set in place and you will receive a confirmation email once that data has been erased. If you have any questions regarding how we treat your personal data, please contact our DPO directly at firstname.lastname@example.org
OTHER WAYS WE MAY PROCESS YOUR PERSONAL DATA
We may also ask you for information when you report a problem with our website.
If you contact us, we may keep a record of that correspondence temporarily offline in order to help us complete your enquiry efficiently and effectively.
WHERE WE STORE YOUR PERSONAL DATA
We do not store any specific personal information about you on our website servers or back-end administration systems. Our website does use SSL encryption when submitting your contact form information ( via automated email ) to our company administrator. Unfortunately, the transmission of information via the internet is not always completely secure. Although we will do our best to protect the transmission of any personal data by using SSL encryption, we cannot guarantee the security of data transmitted to our site, therefore any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access and delete emails containing personal information from our mail servers on a regular basis.
To re-iterate, personal information acquired by automated email from our enquiry web forms will only be kept for the duration of fulfilling your request with us. This is never stored on our website’s servers but will temporally be stored on our email servers. This is an identical process to our users’ emailing us enquiries directly via personal email clients, in which users may have chosen or have been required to include personal contact information.
IP ADDRESSES AND COOKIES
Via Google Analytics we may collect anonymised information about your computer, including where available, your operating system and browser type, for system administration and to assist with our own internal Search Engine Optimisation procedures. This is statistical data about our users’ browsing actions and patterns, and does not identify any individual. We will not, and are not able to collect personal information in this way. We would obtain this anonymised information about your general internet usage by using a cookie file which is stored on the hard drive of your computer.Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:
As of May 2018, Google Analytics does not store users’ specific IP addresses.
The web form email submissions from our website does not collect and/or provide us with IP address information of user’s computers.
UNDER CERTAIN CIRCUMSTANCES, MAY DISCLOSE YOUR PERSONAL INFORMATION TO THIRD PARTIES
If we are under a duty to share your personal data in order to comply with any legal obligation. This includes exchanging information with other companies, government bodies and organisations for the purposes of fraud investigation and other criminal investigations.
https://www.highwayhill.co.uk uses SSL encryption across our whole website.
Additionally our web server use WordFence Firewall, the industry leading security platform which vastly reduces the chances of system and brute force hacking breaches. WordFence security scanning leverages a proprietary feed, alerting our administrators quickly in the event of a website compromise or breach quickly and effectively.
Strong 22 random character passwords are used for securing all administration areas of our website / web server and these passwords are updated and renewed on a monthly basis by our website administrator.
WEBSITE DATA BREACHES
In the event our administrators are informed of a data breach, we will take immediate action to secure our website then contact all affected users within 72 hours, informing them of what action we’ve taken to secure their information and if there is any additional action we suggest they undertake on their own.
IP ADDRESSES AND COOKIES
Via Google Analytics, we may collect information about your computer, including approximate geographic location, operating system and browser type for search engine optimisation purposes. This is anonymised statistical data about our users’ browsing actions and patterns and is not able to identify any individual and/or collect personal information.
Via Google Analytics, we may obtain information about your general internet usage by using a cookie file which is stored on the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service. They enable us:
We will not provide any of your data, either submitted via our web forms, newsletter subscription submissions and/or shop purchases to third parties for marketing purposes. Furthermore we will not store or use your data for our own internal marketing purposes unless you have expressly given us permission.
Note that our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.
Please check these policies before you submit any personal data whilst on these websites.
ACCESS TO INFORMATION
The UK Freedom of Act 2000 gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act. Please contact us by telephone or email if you wish to find out more.