Privacy policy

Willow Valley Holiday Park Limited (“we”, “us”) is the data controller for the personal data described here. The park is run by Becky Gough and John Gough. We are registered in England & Wales, company number 15812216, with our registered office at Dye House, Bush, Bude, Cornwall EX23 9LB.

You can reach us by post at Bush, Bude, Cornwall EX23 9LB, by email at reservations@willowvalley.co.uk, or by phone on 07973 513974.

We only collect what we need to answer you and to keep the site working.

• Enquiry details — when you send an enquiry through a form on this site, we collect your name, email address, phone number, the stay you are asking about, the dates you are interested in, how many of you there are, whether you are bringing a dog, and the message you write. A gift-voucher request also asks who the voucher is for and roughly what you have in mind — if you name the person it is for, we hold their name too, and only so we can answer you. The internet (IP) address the form was sent from is stored alongside it, so we can recognise spam and abuse.
• Newsletter sign-up — if you use the sign-up in the footer, we collect the name and email address you give us.
• Analytics — we collect anonymous, aggregated statistics about how the site is used (such as which pages are visited). They are cookieless, store nothing on your device and run for all visitors. This does not identify you.
• Technical data — our hosting provider processes basic request information needed to serve the site securely.

Bookings and payments are handled by a separate booking system, not on this website. See Who we share data with below.

If you visit or stay with us you will be recorded. Entry is controlled by an ANPR barrier that reads the number plate of every vehicle arriving, and CCTV covers the entrance and the communal areas 24 hours a day. The cameras record; nobody sits watching them. There is no security guard on site — the barrier, the cameras and our own walk-rounds are the security.

• What is captured — images of the entrance and the communal areas, and the number plate of each vehicle at the barrier. A number plate can identify the registered keeper, so we treat it as personal data.
• Why — to keep the park and the people staying on it secure, and to control who drives in. Our lawful basis is our legitimate interest in site security and access control, UK GDPR Article 6(1)(f).
• Who can see it — the owners, and anyone they ask to help look into a particular incident. We will pass footage to the police or to an insurer where there is a proper reason to.
• How long we keep it — no longer than we need it for those purposes. If you want to know the retention period that applies today, ask us and we will tell you.

You can ask for a copy of footage of yourself — see Your rights below. Tell us the date, the rough time and where you were so we can find it. We may have to obscure other people who appear in the same recording.

We do not use your data for automated decision-making or profiling, and we never sell it.

If you use the sign-up in the footer, we will use your name and email address to send you occasional news from the valley. We do this only because you have asked us to: the lawful basis is your consent, UK GDPR Article 6(1)(a), which is also what PECR regulation 22 requires before we can send you marketing by email. Signing up is never a condition of enquiring, booking or staying.

You can come off the list at any time. Email us at reservations@willowvalley.co.uk and we will remove your address and stop sending. We do not send this through a mailing platform, so there is no unsubscribe link to click — one email to us is all it takes, and you do not have to give a reason.

Sign-ups reach the same people as an enquiry — see below. We keep your details until you ask to come off the list, and then delete them. We never sell, rent or swap the list.

We do not sell your personal data. We share it only with the service providers we rely on to run the park and this website, and only so far as each needs it:

• Netlify — hosts this website, receives form submissions on our behalf (Netlify Forms) and emails us a copy of each one. Every submission is screened by Akismet, Netlify's spam-filtering provider, before it reaches us.
• Peake Management — the agency that builds and looks after this website. A copy of every enquiry, voucher request and newsletter sign-up reaches their team, so the forms keep working and nothing is missed.
• Anytime Booking — our third-party booking system, at willowvalley.anytimebooking.eu. When you make a booking you enter your details directly into their system, and their own privacy terms apply to that booking.
• Plausible Analytics — provides the cookieless visit statistics described above. It stores nothing on your device.
• Google Workspace — hosts the mailbox your enquiry arrives in and the one we reply from.

We may also disclose data where the law requires it.

• Enquiry correspondence: up to 24 months after our last contact with you, then deleted.
• Newsletter sign-ups: until you ask to come off the list, and then deleted.
• Analytics: aggregated only, with no personal data retained.
• Records we must keep for tax or legal reasons: for as long as the law requires.

Under UK GDPR you have the right to:

• Ask for a copy of the personal data we hold about you;
• Have inaccurate data corrected;
• Ask us to delete your data;
• Restrict or object to how we use it;
• Ask us to transfer it to another provider;
• Withdraw consent at any time, where we rely on consent.

To exercise any of these, email us at reservations@willowvalley.co.uk. We will respond within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data-protection regulator, at ico.org.uk or on 0303 123 1113.

Some of our providers process data outside the UK. Netlify, which hosts this site and delivers our enquiry notifications, is based in the United States. Where a transfer happens it is covered by the safeguards UK GDPR requires, such as the International Data Transfer Agreement or equivalent standard contractual clauses.

We may update this policy from time to time. The current version always lives at this page, with the date it was last reviewed shown at the top. For how we use cookies and similar storage, see our cookie policy.