Last updated: July 2025
1. Data Controller
This Privacy Policy applies to the processing of personal data by Palatial Leisure Limited ("we", "us", "our"), registered at Church Plain, Great Yarmouth, Norfolk, NR30 1PL, UK.
2. Data Protection Officer
If you have any questions about this policy or our data practices, please contact our Data Protection Officer:
Email: [email protected]
Address: Palatial Leisure Limited, Church Plain, Great Yarmouth, Norfolk, NR30 1PL
3. Categories of Data We Collect
3.1 Personal Data You Provide
Name, email address, postal address, phone number, and any other information you submit via forms, subscriptions, or communications.
3.2 Automatically Collected Data
IP address, browser type/version, operating system, referring URLs, pages visited, and timestamps, collected via cookies and server logs.
4. Lawful Basis for Processing
- Consent (Art. 6(1)(a) GDPR): for newsletters, marketing emails, and non-essential cookies.
- Contract Performance (Art. 6(1)(b) GDPR): to fulfill orders and service agreements.
- Legal Obligation (Art. 6(1)(c) GDPR): to comply with applicable laws and regulations.
- Legitimate Interests (Art. 6(1)(f) GDPR): to improve our services, ensure security, and prevent fraud. We perform a balancing test to ensure your rights are not overridden.
5. Purposes of Processing
We process your data to:
- Provide, maintain, and enhance our Site and services.
- Communicate with you, including responding to inquiries and sending updates.
- Send you marketing materials, where consented.
- Analyze usage to improve user experience.
- Detect and prevent fraud and security incidents.
6. Data Retention
We retain personal data only as long as necessary for the purposes stated, subject to legal retention requirements:
- Account information: retained until account deletion plus 2 years.
- Marketing consents: until withdrawal of consent.
- Transaction records: 5 years for tax and accounting compliance.
7. International Data Transfers
Data may be transferred outside the EEA. When we do so, we ensure:
- Transfers under EU Standard Contractual Clauses.
- Transfers to countries with adequate protection as recognized by the European Commission.
- Additional safeguards such as Binding Corporate Rules or certifications.
8. Your Rights under GDPR
You have the following rights:
- Access – request a copy of your data.
- Rectification – correct inaccurate or incomplete data.
- Erasure (‘right to be forgotten’) – delete your data, where applicable.
- Restriction of Processing – limit how we use your data.
- Data Portability – receive your data in a structured, machine-readable format.
- Objection – object to processing based on legitimate interests or direct marketing.
- Withdraw Consent – withdraw any consent at any time without affecting processing before withdrawal.
To exercise these rights, contact us at dpo@[yourdomain].com. We aim to respond within one month.
9. Cookies and Similar Technologies
We use cookies for essential, performance, functional, and targeting purposes. We obtain your consent before placing non-essential cookies via a consent banner.
9.1 Your Cookie Choices
You can manage cookie preferences through our cookie banner or via your browser settings. Visit aboutcookies.org to learn more.
10. Third-Party Services
We may use third-party providers (e.g., analytics, payment processors). Each has its own privacy policy. We ensure they comply with GDPR requirements.
11. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.
12. Security Measures
We implement technical and organizational measures to protect personal data, including encryption, access controls, and regular security audits.
13. Changes to This Policy
We may update this policy. We will notify you of significant changes by posting a notice on our Site.
14. Contact Information
For questions or complaints, contact:
Data Protection Officer
Email: [email protected]
Address: Palatial Leisure Limited, Church Plain, Great Yarmouth, Norfolk, NR30 1PL