Privacy Policy

Last updated: 28 September 2026

This policy explains how Atlantic Bays Holiday Park collects and uses your personal data, the lawful bases we rely on, who we share it with, how long we keep it, and the rights you have under UK data protection law. It is written in plain British English.

1. Who we are (data controller)

The data controller responsible for your personal data is Atlantic Bays Holiday Park Limited(“we”, “us”, “our”), a company registered in England and Wales under company number 14223817.

• Registered office: 28-30 Wilbraham Road, Manchester, M14 7DW.
• Park address: Atlantic Bays Holiday Park, St Merryn, Padstow, Cornwall, PL28 8PY.
• Email: info@atlanticbaysholidaypark.co.uk
• Telephone: 01841 520 855

We are registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator. We have not appointed a statutory Data Protection Officer, as one is not legally required for our processing; you can raise any data protection query using the contact details above.

2. The data we collect

Depending on how you interact with us, we may collect and process the following categories of personal data:

• Identity and contact data — your name, postal address, email address and telephone number.
• Booking and enquiry data — the dates, accommodation type and party details for your stay, holiday-home ownership enquiries, special requests and any correspondence with us, whether you booked through one of our booking partners or came to us directly.
• Payment data— we do not take card payments through this website. Payment for a holiday is made on the booking partner’s own site, under their payment provider and their privacy policy, and we do not see or store your card details (see section 5).
• Technical and usage data — your IP address, browser type, device information and how you use our website. Visit statistics are counted with Plausible, which uses no cookies, stores nothing on your device and runs for all visitors (see our Cookie Policy).
• CCTV footage — the park operates CCTV and a security barrier for the safety of guests and property; images may capture you while on site.

We do not knowingly collect special category data, and we do not collect personal data from children directly; bookings are made by a responsible adult on behalf of their party.

3. How and why we use your data (lawful bases)

We only use your personal data where the law allows. The lawful bases under UK GDPR that we rely on are:

• Contract — to prepare for and provide your stay, to manage bookings we take directly (such as seasonal pitches and storage) and to handle ownership transactions.
• Legitimate interests — to respond to enquiries, keep our records accurate, improve our services and protect the park (including CCTV), where these interests are not overridden by your rights.
• Consent — to send you marketing by email where you have opted in, and to set non-essential cookies. You may withdraw consent at any time.
• Legal obligation — to meet our accounting, tax, health and safety and other legal duties.

We send marketing communications only with your consent or, where permitted, on a soft opt-in basis to existing guests about similar holidays — and every message includes an easy unsubscribe. This is in line with the Privacy and Electronic Communications Regulations (PECR) as updated by the Data (Use and Access) Act 2025.

4. Cookies and analytics

Our website uses essential cookies to function. Visit statistics are counted with Plausible, which uses no cookies, stores nothing on your device and runs for all visitors; they help us understand how the site is used. We set no non-essential cookies. For full details, the cookies we use, and how to manage them, please see our Cookie Policy.

5. Who we share your data with

We do not sell your personal data. Where a service provider processes data on our behalf, it does so under a written contract and only as needed to run our business:

• Enquiry form — when you send us an enquiry through the website, your form details are processed by Netlify Forms (Netlify, Inc.), which records the submission and forwards it to our team by email.
• Website analytics — anonymised usage statistics are collected for all visitors by Plausible Analytics, a cookieless, privacy-friendly analytics service that stores nothing on your device and does not track you across websites.

Booking partners. Holiday bookings are not taken on this website. Lodges, cabins and chalets are booked through Hoseasons, and touring pitches and camping through Pitchup. You give your booking and payment details to that company on its own site, under its own privacy policy, and it passes us the details we need to prepare and provide your stay. Each partner explains in its own privacy policy how it uses the data you give it.

Until 25 August 2026 the park took its own online bookings through the Prophet Booking System (Backcourt Computers), with card payments taken through that system’s payment provider. That booking engine has been switched off and no longer receives any booking or payment data. Records of bookings taken through it before that date are kept in line with section 6.

We may also disclose data where required by law, to protect our rights or safety, or in connection with a sale or reorganisation of the business. Where any provider processes data outside the UK, we ensure appropriate safeguards (such as adequacy regulations or standard contractual clauses) are in place.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy, and to meet our legal, accounting and reporting obligations. As a guide, booking and financial records are retained for the period required by tax law (currently six years), marketing consents are kept until you withdraw them, enquiry records are held for a reasonable period and then deleted, and CCTV footage is retained for a short period before being overwritten. When data is no longer needed, it is securely deleted or anonymised.

7. Your rights

Under UK data protection law you have the right to:

• be informed about how your data is used;
• request access to a copy of the personal data we hold about you;
• have inaccurate data corrected;
• request erasure of your data in certain circumstances;
• restrict or object to our processing, including direct marketing;
• data portability, where the processing is by consent or contract and carried out by automated means;
• withdraw consent at any time, without affecting earlier lawful processing.

To exercise any of these rights, please contact us at info@atlanticbaysholidaypark.co.uk. We will respond within one month. There is normally no charge.

8. How we protect your data

We use appropriate technical and organisational measures to keep your data secure, including encrypted connections, access controls and contracts with our processors. While no online transmission is ever completely secure, we take reasonable steps to protect your information and to notify you and the ICO of any qualifying breach.

9. Complaints

We hope to resolve any concern you have about your data directly. If you remain unhappy, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority, at ico.org.uk. We would, however, appreciate the chance to address your concerns first.

10. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. Any changes will be posted on this page with a revised “last updated” date.