Privacy and Cookies Policy
About this policy
The Data Controller (the organisations responsible for looking after your data) is the Sykes Group of companies. When we say “we”, “our”, “us”, etc., that’s who we’re talking about. Please read the section “Sykes Group” to find out more.
We are grateful for the trust you place in us, to arrange holidays, manage holiday properties and to use personal information responsibly. We are committed to protecting your information and we believe you have a right to know how we will use it. This policy sets out the data protection principles we follow.
This policy covers our dealings with customers and owner – people who have booked or are looking for a holiday, and people who let their holiday properties through us. Please note that our customers and owners must be over the age of 18 and we do not therefore collect personal information from children.
We will update our Privacy and Cookies Policy as data protection law or business practice changes. You can always find the latest version of this policy on our website, www.sykescottages.co.uk. This version of the policy is effective from 23 April 2018.
Data Protection Officer
Our Data Protection Officer is Rob Pomeroy, who may be contacted via email at firstname.lastname@example.org or via post, to Sykes Holiday Cottages, 1 City Place, Queens Road, Chester, CH1 3BQ, UK.
We generally use your data either on the basis of your consent, or based on a contract between us (e.g. when you book a holiday). You have the right to withdraw your consent. All our marketing communications include an unsubscribe link, to make it easy to withdraw consent. If you have an online account with us, you may also log into our websites to manage your marketing preferences.
If you withdraw your consent (e.g. by opting out of marketing communications), we will stop processing your data as requested. Bear in mind if you have a holiday booked and you have not yet travelled, we’ll still need to hold onto your data so we can process the holiday. That’s because the contract between us is the basis for using your data (rather than consent). For more information, see the “Legal basis of processing” section below.
If you are concerned about the processing of your data, please contact our Data Protection Officer (see above). If you are unhappy with our use of your data, you also have the right to make a complaint to the Information Commissioner’s Office, which supervises data protection in the UK.
You have the right to receive a copy of your personal data. You also have the right to request that we correct or remove your data, when there remains no legal basis for keeping it. Please note that when these rights are exercised, we will conduct identification checks in order to ensure your privacy is safeguarded. You will need to contact us by email or post, to exercise these rights
Personal information we collect
In order to provide you with the best possible holiday service, we collect the following information:
Identification: name, title, date of birth, age/age range, gender.
Contact details: postal addresses (main and billing), phone numbers, email addresses.
Account login details: email address, password (which is stored in encrypted form).
Bookings: property booked, holiday start/end dates, cost of holiday, amounts paid, limited details of other people booked on the same holiday (names, gender, age range), ferry bookings (travel times, cost).
Insurance: your answers to the initial insurance questions.
Marketing preferences: whether you wish to receive marketing information from us, and if so, by which methods (postal, email, telephone, SMS).
Payment: method, the last four digits of card numbers, payment card expiry date, amounts collected, third party payment service provider references. Please note that we do not capture or store your full card details: payment is handled by our payment service providers (see below).
Browsing: historical searches, how you use our website and mobile apps, website experience user survey responses, the devices and IP addresses you use to access our services (operating system, browser, …). We collect this information so that we can continuously improve our website and our service to you.
Holiday experience: any feedback you leave, responses to customer satisfaction surveys, whether you have a pet, interests (e.g. preferred holiday type, such as walking holidays).
Specific to property owners: addresses of your properties, historical and future booking information (see above), photographs/videos of the properties you own.
Communication: recordings of your phone conversations with our call centre, web chat messages, emails, customer service cases, responses to questionnaires, competition entries, your interaction with our marketing (clicking links in our marketing emails, for example – we track this to help ensure our communications are relevant and interesting).
Electronic identifiers: cookies, IP addresses. These electronic identifiers are essential to enable you to log into your online account and to assist you if you encounter difficulties using our online services. You can disable cookies if you wish, but this will hamper our ability to provide online services securely.
Through our partnerships, we may receive some of the above information from other companies you use (e.g. other online holiday companies that feature our properties). In such cases, those companies must also inform you about their use of your data.
How we use your personal information
We use your personal information to:
- Manage your holiday booking/letting
- Organise ferry bookings
- Facilitate purchasing travel insurance
- Manage your online accounts
- Ensure you can log into your online accounts with us
- Understand how to improve our services, to select the best holiday properties and provide the best information and offers, for example
- Detect and prevent fraud or abuse of our services
- Personalise your online experience – showing you the most suitable holiday properties, for example
- Enable the display of the most appropriate adverts on our websites and on other websites and services where we place advertising
- Communicate with you, including for example, responding to your emails, messages on social media, web chat requests, handling customer service matters and so on
- Process your payments
- With your permission, send you relevant marketing information such as details of competitions, special offers and properties we think will be of interest to you
- Manage competitions, promotions and special offers in which you participate
- Make sure our servers and websites are operating correctly
How we collect personal information
We receive personal information from:
- You, as you provide it to us (e.g. when booking a holiday, leaving a review or enquiring about letting a property)
- Your use of our websites and mobile apps
- Third party holiday providers you may book with, who advertise our properties
- Your interaction with our marketing activities (provided you have not unsubscribed)
- Third party review services such as Feefo and TripAdvisor
Legal basis of processing
There are several grounds on which we will store and use your data. As follows:
Consent: for certain types of processing (e.g. marketing activities), we rely on your consent to use your data. You may withdraw your consent at any time (see “Your rights”, above).
Contract: much of the time, our use of your data will be because of the contract between us – that is, in relation to your holiday booking. We will usually retain relevant data for up to six years from the date the contract completes – e.g. the last day of your holiday.
Legal obligations: we are under certain binding legal obligations, such as accounting to the government for tax and making financial records available for audit. In such cases, we are typically obliged to retain data for up to seven years from the date of the transaction.
Legitimate interests: we use data to manage our operations and to make business process improvements. Rest assured, our legitimate interests will never override your right to privacy
How we share your personal information
We give some of your contact information to property owners, so they can get in touch about key collection and so on. (We also give you their contact details, for the same reason.)
If you need to book a ferry, we give the ferry company your name, details of other people in your party, age ranges and travel dates. The ferry companies we use are:
- Wightlink Ltd, PO Box 59, Portsmouth, PO1 2XB
- Irish Ferries Limited, Ferryport, Alexandra Road, Dublin 1, Ireland. Eircode D01 W2F5
- Stena Line Limited, Stena House, Station Approach, Holyhead, Anglesey, LL65 1DQ
If you choose to purchase travel insurance, we pass your contact details and your responses to initial insurance questions to the insurance companies, ITC Compliance Limited and Towergate Underwriting Group Ltd.
If you permit us to send you marketing information, we may share your data with companies that provide specialist marketing platforms. These companies are under strict obligations to protect your privacy and comply with your marketing preferences. Our marketing partner companies are:
- Intilery.com Ltd, Beech House, Park West Business Park, Sealand Road, Chester, CH1 4RJB
- Emailcenter UK Limited, West Tithe, Pury Hill Business Park, Alderton Road, Towcester, Northamptonshire, NN12 7LS
- Ant Protect Limited, Antenna House, St Mary's Gate, Sheffield, S2 4QA
- TripAdvisor LLC, 400 1st Avenue, Needham, MA 02494, USA
- Wightlink Ltd, Heath Farm, Heath Road East, Petersfield, GU31 4HT
- 1. We store your data in certain cloud services provided by third parties. Those third parties do not however have access to your data.
- 2. We do not transfer your data outside the UK or the European Union.
- 3. We may engage selected specialist third parties to assist in posting items to you, such as brochures and leaflets. Those third parties do not retain access to your data.
Security of your data
We protect your data with various technological measures. We also regularly test and evaluate the security of our systems, updating safeguards as appropriate. Our staff are trained in the importance of security and privacy and we treat breaches of confidentiality and privacy as disciplinary matters.
The Sykes Group of companies consists of:
- Sykes Cottages Ltd, 1 City Place, Queens Road, Chester, CH1 3BQ
- Cornish Cottages Holidays
- Helpful Holidays
- Lakes Cottages Holidays
- Cornwall Holiday Cottages
all of which can be contacted via our registered office.
We share your personal information with all members of the group as if all members were the same company. Your marketing preferences are specific to each individual member of the group, however. All members of the Sykes Group abide by the same high standards of conduct in relation to your personal information.
Our ICO registration reference is Z5047880.
Payment service providers
In order to ensure your transactions are as secure as possible, we hand over payment card processing to the following suppliers:
- PayPal (Europe) S.à r.l. et Cie, S.C.A. Attention: Legal Department, 22-24 Boulevard Royal L-2449, Luxembourg
- Sage Pay Europe Limited, North Park, Newcastle upon Tyne, NE13 9AA
- Syntec Ltd, 18 The Avenue, London W13 8PH
- Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA
We allow some third party advertisers to place cookies on our websites – and from there, in your browser. Please note that you may use your browser’s controls to disable cookies at any time.