Caddy Shack are committed to protecting your personal information. This notice summarises how we collect, store, and process your information when using our website, online booking webstores, telephone booking service, when you buy from us in person, when we correspond with you as part of a booking, when you agree to our safety terms and terms of purchase and when you request information from us. Please read the notice carefully as by providing personal data to Caddy Shack we will deem that you have consented to the processing of such data. If having read this notice you are unclear about how we process your data, please contact us and we will provide the clarification you need.
Justification: Any personal data we retain is justified on the legal basis defined within the General Data Protection Regulation on one or more of the following grounds:
* We have your consent
* We need your data to provide you with something you’ve purchased from us
* We use your data to make it easier when you want to buy from us again
* Your data forms part of a legally binding agreement between us
If you have never bought from us, the data we retain is only that which you have explicitly consented to. If you have bought from us before and that includes an activity that you and/or a dependent of yours participated in or plan to participate in, we may collect data justified on all the grounds above.
Retention Period: Where your data forms part of a legal agreement between us, e.g. a safety agreement, we may retain that data indefinitely on the basis that we might need it to defend ourselves in a future case between us. If your data is needed for us to provide you with a forthcoming activity or event, we will retain your data at least until after the activity or event. If you ask us to remove your data before the activity or event, we might not be able to provide you with that activity or event. After an activity or event, your data may be retained until you request that we remove it from the system on the basis that by retaining your data we make it easier for you to buy from us again. If you don’t buy from us again for a period of greater than three years, we may remove your data from our systems.
Where your data is it stored: your data remains within our systems or within the systems of third parties that process data on our behalf. Any such parties agree to process data based on our instructions and requirements consistent with this Privacy Notice and GDPR.
When and How We Will Contact You: We may contact you via phone, post, or email as necessary if we have a change to, an issue with, or a query about an existing booking. If you have consented to receive information about Caddy Shack via email, we will send you information on a periodic basis to keep you informed about special offers, new activities, changes to activity schedules and other information that you might find of interest. You can always choose to opt-out of these communications by following the procedure detailed in every email we send you.
Credit Cards: We do not store credit card data. All credit card processing is done on secure pages using SSL encryption, or through other secure methods using PCI compliant third-party systems.
Finding Out About Data We Keep: You have the right to know what data we keep about you. Contact us directly, or write to our address above and ask for a Subject Access Request Form. We’ll send the form and further instructions. You’ll need to provide us with proof of identity and address. We’ll respond with the information you have requested within 30 days including full explanations of what we keep and the reasons why we keep your data.
Requests to Correct, Remove or Transfer Data: You can ask us to correct inaccurate data, remove data that we have your consent to keep, or have data transferred to somewhere else. Start this by completing a Subject Access Request Form and once we’ve responded, you can continue the process by requesting specific actions about specific data we keep. If we decide that we won’t perform some or all the actions you request, we’ll detail the reasons and justifications for that decision and provide further guidelines should you wish to appeal. If we agree to remove data, we may still retain some data from your history in an anonymised form so that we can still use it in our ongoing analysis of customer behavioural patterns.
Objections & Complaints: If you want to object about data we keep or the way we keep or use your data, please contact us. If don’t respond within 30 days, or you are dissatisfied with the way we’re handling a complaint, you may at any time escalate to the Information Commissioners Office at www.https://ico.org.uk/.