We comply with the General Data Protection Regulation (GDPR) which protects the personal data of EU citizens. This policy sets out the key steps we take to ensure GDPR compliance: 

1. Obtain Consent: We obtain consent from our guests to collect and process their personal data. We do this by providing a privacy notice that explains what data we are collecting, how it will be used, and who it will be shared with. 
2. Securely store data: We ensure that any personal data we collect is stored securely and only accessed by authorised personnel. This is achieved by using secure servers, encryption, and password-protected access. 
3. Limit data collection: We only collect the minimum amount of data necessary to provide our services. For example, we need guest name, address, and contact details. 
4. Provide access to data: We allow guests to access their personal data and provide you with the ability to update or delete your data. 
5. Report data breaches: If we experience a data breach, we report it to the relevant data protection authority within 72 hours of becoming aware of the breach. We also notify our guests if the breach poses a risk to your rights and freedoms. 

By following these steps, we seek to ensure that our holiday accommodation business complies with GDPR and protects the personal data of our guests. 

Your Data Protection Rights: 

Under data protection law, you have rights including:

Your right of access – You have the right to ask us for copies of your personal information.

Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

If you would like to exercise any of your data protection rights, as outlined above, please email us: enquiries@barbadosholidaylettings.co.uk