Privacy policy
Privacy Policy
We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who We Are
The Island Holiday Company Ltd (“we”, “our”, “us”) is the data controller of your personal data.
Contact: enquiries@theislandholidaycompany.co.uk | The Office, 61 Marlborough Road, Ryde, Isle of Wight, PO33 2PN
What Information We Collect
We may collect the following types of personal information:
-
Name, email address, postal address, and phone number
-
Booking and payment details (processed securely via third-party providers)
-
Preferences and communication with us
-
Technical data such as IP address, browser type, and cookies (see Cookies section below)
When We Collect Information
We collect information when you:
-
Make a reservation or enquiry
-
Subscribe to our newsletter
-
Contact us via form, phone, or email
-
Interact with our website (including cookies/analytics)
How We Use Your Information
We will only use your personal data when the law allows us to. Our lawful bases include:
-
Contract – to manage reservations and provide services you request
-
Legal obligation – to meet tax, financial, or regulatory requirements
-
Legitimate interests – to improve our services, respond to enquiries, or send relevant updates (provided your rights do not override these interests)
-
Consent – when you choose to receive newsletters or marketing (you can withdraw at any time)
We may use your information to:
-
Process bookings and payments
-
Communicate with you about your reservation or enquiry
-
Improve our website and services
-
Send updates, offers, or newsletters (if you have opted in)
How We Protect Your Information
-
Personal data is stored securely and only accessible by authorised staff.
-
Payment information is processed via secure third-party gateways and never stored on our servers.
Data Retention
We only keep your data for as long as necessary for the purposes collected, including legal and accounting requirements:
-
Bookings and payment records: up to 7 years
-
Marketing data: until you unsubscribe or withdraw consent
-
General enquiries: up to 2 years
Sharing Your Information
We do not sell or trade your personal data. We may share it with:
-
Service providers who support our business (e.g. IT, hosting, payment processors) under strict confidentiality agreements
-
Legal or regulatory authorities if required by law
If data is transferred outside the UK/EEA (for example, by cloud or email providers), we ensure safeguards such as adequacy decisions or standard contractual clauses are in place.
Your Rights Under UK GDPR
You have the right to:
-
Access the personal data we hold about you
-
Request correction of inaccurate or incomplete data
-
Request deletion of your data (“right to be forgotten”)
-
Request restriction of how your data is processed
-
Request data portability to another provider
-
Object to processing (including marketing)
-
Withdraw consent where given
To exercise these rights, please contact us at [insert contact email].
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.
Cookies & Tracking
Our website uses cookies to improve your browsing experience, analyse traffic, and remember preferences.
Where required, we will ask for your consent before placing cookies. You can manage or disable cookies in your browser settings.
Third-Party Links
Our website may contain links to other websites. We are not responsible for their privacy practices.
Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
Effective date: 1st October 2025