Privacy Policy

Porthilly Beach Holiday Park Privacy Policy

1. Who we are
This privacy policy explains how Porthilly Beach Holiday Park collects, uses and protects your personal data when you visit our website, make an enquiry, book a holiday or sign up to hear from us.
Our website address is https://porthillybeachholidaypark.co.uk. Online bookings are taken through our booking site at https://porthillycaravansite.pitchedbooking.com.
For the purposes of UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), the data controller is:
Porthilly Beach Holiday Park trading as Porthilly Caravan Site
Porthilly Beach Holiday Park, Rock, Cornwall, PL27 6JX
Email: holidays@porthillybeachholidaypark.co.uk
Phone: 07885 619245

If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. What personal data we collect
We only collect the personal data we need to run our holiday park, take your booking and keep in touch with you where you have asked us to.

Information you give us
• Booking details: lead guest name, address, email address, phone number, the names and ages of other guests in your party, number of dogs, arrival and departure dates, accommodation choice and any special requests.
• Payment details: deposit and balance payments. Card payments are handled by our booking system’s payment provider and we do not see or store your full card number.
• Enquiries: your name, email address, phone number and the content of your message when you use a contact, enquiry or caravan sales form.
• Newsletter sign ups: your name and email address when you subscribe to our mailing list.
• Correspondence: anything you tell us by email, phone, social media message or in person.
Information we collect automatically
• Website usage data: IP address, browser type, device type, operating system, pages visited, time on site, the website that referred you and approximate location (country or town level).
• Advertising data: whether you arrived from one of our Google or Meta adverts and what you did on our site afterwards, such as making an enquiry or a booking. Our forms may record advertising click identifiers (such as gclid, gbraid and wbraid) so we can tell which adverts lead to enquiries.
• Cookies and similar technologies: see section 6.

Information from third parties
If you book through a third party such as Airbnb, that platform will share the booking details we need to host your stay. Their own privacy policy will also apply.
We do not knowingly collect special category data (such as health information). If you tell us about an accessibility or medical need so we can help with your stay, we will only use it for that purpose.

3. How we use your data and our lawful basis
UK GDPR requires us to have a lawful basis for each use of your personal data. The table below sets out what we do and why.
What we use it for Lawful basis
Taking and managing your booking, payments, arrival information and stay Contract
Answering your enquiries, including caravan sales enquiries Legitimate interests (responding to people who contact us) or steps before entering a contract
Keeping financial and booking records for tax and accounting Legal obligation
Sending our newsletter, offers and news by email Consent
Sending a short follow up to past guests about similar holidays, with an opt out in every email Legitimate interests (soft opt in under PECR)
Measuring how our website is used with Google Analytics Consent
Showing and measuring adverts, including remarketing, through Google Ads and Meta Consent
Keeping our website and booking system secure and preventing spam or fraud Legitimate interests
Dealing with complaints, claims or legal disputes Legitimate interests or legal obligation

Where we rely on consent, you can withdraw it at any time by using the unsubscribe link in any email, changing your cookie settings on our website, or contacting us. Withdrawing consent does not affect anything we did before you withdrew it.
We do not sell your personal data, and we do not make decisions about you using solely automated processing that has a legal or similarly significant effect.

4. Online bookings through Pitched
Our online booking system is provided by Pitched Booking, operated by Pitched Booking Limited. When you check availability, make a booking or log in to pay your balance at https://porthillycaravansite.pitchedbooking.com, your booking and contact details are entered into and stored on the Pitched platform.
Pitched acts as our data processor. It processes your data only on our instructions and is required to keep it secure and confidential. Card payments made through the booking system are processed by Shuttle Payments which handles your card details directly under its own security standards (PCI DSS). We receive confirmation of payment but not your full card number.
The booking site may set its own essential cookies so that availability searches, your basket and account log in work correctly. It may also carry our analytics and advertising tags so we can see which adverts lead to bookings; these only run with your consent where consent is required.

5. Website forms and email marketing
Website forms (Gravity Forms)
Our contact, enquiry, caravan sales and subscribe forms are built with Gravity Forms. When you submit a form, the information you enter is stored in our website database, which is hosted by Pitched Applications in the UK. A copy is also emailed to our team so we can reply.
Our forms use a CAPTCHA or similar spam check, which may process your IP address and browser information to confirm you are a real person.

Email marketing (Mailchimp)
If you tick the box to subscribe, or sign up on our Subscribe page, your name and email address are sent from Gravity Forms to Mailchimp, an email marketing service operated by Intuit Inc. in the United States. We use Mailchimp to send newsletters, availability updates and special offers.
Mailchimp records whether you open our emails and which links you click. We use this to see what our subscribers find useful and to keep our list up to date.
You can unsubscribe at any time using the link at the bottom of every email or by contacting us. Once you unsubscribe we keep your email address on a suppression list so we do not email you again by mistake.
Mailchimp’s privacy policy is available at https://www.intuit.com/privacy/statement/.

6. Cookies, analytics and advertising
Cookies are small text files stored on your device. We use essential cookies to make our website and booking system work, and optional cookies for analytics and advertising. Optional cookies are only set if you accept them in our cookie banner, and you can change your choice at any time using the cookie settings link on our website.
We manage our analytics and advertising tags through Google Tag Manager, which does not itself collect personal data.
Google Analytics
We use Google Analytics 4 to understand how visitors find and use our website, so we can improve it. It collects information such as pages visited, time on site, device and browser type, the site that referred you and approximate location. Google Analytics 4 does not log or store full IP addresses. We retain Google Analytics data for 14 months.
You can also opt out using the Google Analytics opt out browser add on at https://tools.google.com/dlpage/gaoptout.

Google Ads
We advertise on Google Search and the Google Display Network. Google Ads cookies tell us when someone clicks one of our adverts and then makes an enquiry or booking, so we can measure which adverts work. With your consent, Google may also use them to show our adverts to people who have previously visited our website (remarketing).
You can manage the adverts Google shows you at https://myadcenter.google.com. Google’s advertising privacy information is at https://policies.google.com/technologies/ads.

Meta Pixel (Facebook and Instagram)
We use the Meta Pixel to measure the results of our Facebook and Instagram adverts. With your consent, it records your visit and actions on our site (such as viewing an accommodation page, submitting an enquiry or starting a booking) along with device, browser and IP information. Meta may match this with your Facebook or Instagram account.
We use this data to count conversions from our adverts and to build audiences, including remarketing audiences of past website visitors and lookalike audiences of people similar to our guests. We do not upload guest or subscriber lists to Meta or Google without telling you first.
You can control how Meta uses your data for adverts at https://www.facebook.com/adpreferences. Meta’s privacy policy is at https://www.facebook.com/privacy/policy/.

Remarketing
Remarketing means that after you visit our website, you may see our adverts on Google Search, other websites, YouTube, Facebook or Instagram. These adverts are based on your earlier visit to our site. You can stop this by declining advertising cookies, clearing your cookies, or adjusting your Google and Meta ad settings.
Embedded content
Some pages include embedded content such as videos hosted on Vimeo. Embedded content behaves as if you had visited the other website, which may collect data about you and set its own cookies.

Cookies we use
Provider Purpose Type Typical duration
Our website Remembers your cookie choices and keeps forms working Essential Up to 1 year
Pitched Booking Availability searches, basket and account log in Essential Session to 1 year
Google Analytics Measures website use Analytics Up to 2 years
Google Ads Measures advert clicks and remarketing Advertising Up to 13 months
Meta Pixel Measures adverts and builds audiences Advertising Up to 3 months
Vimeo Plays embedded videos Functional Up to 1 year

Please check this table against a cookie scan of the live site before publishing.

7. Who we share your data with
We share personal data only with the service providers we need to run our business. Each one is bound by a contract or its terms to protect your data.
Recipient – What they do for us – Location
Pitched Booking: system and website provider, UK
Shuttle Payments: Processes card payments, UK
Pitched: Hosts our website and Gravity Forms entries, UK
Intuit Mailchimp: Sends our marketing emails, USA
Google Analytics: and advertising, USA and worldwide
Meta Platforms: Advertising on Facebook and Instagram, Ireland, USA and worldwide
Our accountant: Bookkeeping and tax returns, UK

We may also share data where the law requires it, for example with HMRC, the police or a court, or to protect the safety of our guests and staff.
If our business or park is sold, guest and booking records may transfer to the new owner, who will be bound by this policy.

International transfers
Mailchimp, Google and Meta may process your data outside the UK, including in the United States. Where this happens, the transfer is protected by the UK Extension to the EU US Data Privacy Framework, where the provider is certified, or by the UK International Data Transfer Addendum to standard contractual clauses.
8. How long we keep your data
We keep personal data only for as long as we need it.

Type of data How long we keep it
Booking and payment records 6 years after the end of the tax year of your stay, as required for tax purposes
Enquiries and form submissions Up to 3 years from your last contact, unless they lead to a booking or purchase
Mailing list subscriptions Until you unsubscribe; inactive subscribers are retained in our lists

Google Analytics data 14 months
Google Ads and Meta data In line with each platform’s own retention policy

9. How we keep your data secure
Our website uses an encrypted (HTTPS) connection. Access to booking and enquiry records is limited to the people who need it, and our systems are password protected. Our service providers are required to keep your data secure. No method of sending data over the internet is completely secure, but we take reasonable steps to protect it.
10. Your rights
Under UK data protection law you have the right to:
• ask for a copy of the personal data we hold about you
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to us using your data, including for direct marketing at any time
• ask for your data in a portable format
• withdraw your consent at any time where we rely on it
To use any of these rights, email holidays@porthillybeachholidaypark.co.uk. We will respond within one month. There is normally no charge. We may need to check your identity first, and we may need to keep some data where the law requires it, such as booking records for tax.

11. Complaints
If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/make-a-complaint or on 0303 123 1113.

12. Changes to this policy
We may update this policy when our services, suppliers or the law change. The latest version will always be on this page, with the date it was last updated shown below. If we make a significant change, we will tell you by email or on our website.

13. Contact us
Porthilly Beach Holiday Park
Rock, Cornwall, PL27 6JX
Email: holidays@porthillybeachholidaypark.co.uk
Phone: 07885 619245
Last updated: 12/10/2026