TERMS AND CONDITIONS

Welcome to my website. If you continue to browse and use this website, you are agreeing to comply with and be bound by the following Terms and Conditions of use, which together with my Privacy Policy govern Curated Escapes relationship with you in regard to this website. If you disagree with any part of these Terms and Conditions, please do not use this website.

The term ‘Curated Escapes’ or ‘me’ refers to the owner of the website whose office is Stody Cottage, Letheringsett Hill, Holt, NR25 6RY. The term ‘you’ refers to the user or viewer of this website.
The use of this website is subject to the following terms of use:
• The content of the pages of this website is for your general information and use only. It is subject to change without notice.
• This website uses cookies to monitor browsing preferences. If you do allow cookies to be used, the following personal information may be stored by me for use by third parties:
◎ Country of visitor
◎ Date and time of visit 
• Neither Curated Escapes nor any third parties provide any warranty or guarantee as to the accuracy, timeliness, performance, completeness or suitability of the information and materials found or offered on this website for any particular purpose. You acknowledge that such information and materials may contain inaccuracies or errors and I expressly exclude liability for any such inaccuracies or errors to the fullest extent permitted by law.
• Your use of any information or materials on this website is entirely at your own risk, for which I shall not be liable. It shall be your own responsibility to ensure that any products, services or information available through this website meet your specific requirements.
• This website contains material which is owned by or licensed to me. This material includes, but is not limited to, the design, layout, look, appearance and graphics. Reproduction is prohibited other than in accordance with the copyright notice, which forms part of these Terms and Conditions.
• All trademarks reproduced in this website, which are not the property of, or licensed to the operator, are acknowledged on the website.
• Unauthorised use of this website may give rise to a claim for damages and/or be a criminal offence.
• From time to time, this website may also include links to other websites. These links are provided for your convenience to provide further information. They do not signify that I endorse the website(s). I have no responsibility for the content of the linked website(s).
• Your use of this website and any dispute arising out of such use of the website is subject to the laws of England, Northern Ireland, Scotland and Wales.

THE PRIVACY POLICY

This privacy policy sets out my approach to the personal data I collect from or obtain about you. If you have any queries in relation to this privacy policy, please contact james@curatedescapes.co.uk

What is the purpose of this privacy policy?
At Curated Escapes I am very serious about protecting your privacy. Your trust is my most important asset. This privacy policy explains what personal data Curated Escapes may collect from you and why and what I will do with this data.
You and your personal data is protected by the EU General Data Protection Regulation (which is otherwise known as GDPR) and the UK Data Protection Act 2018. In this privacy notice, I refer to this legislation as data protection laws.
I will only process your personal data as set out in this privacy policy or otherwise notified to or agreed by you or as I am otherwise permitted to do in accordance with data protection laws.

What is my role in relation to your personal data?
For the purposes of data protection laws, Curated Escapes, may be a data controller in respect of the personal data you provide me with or which otherwise comes into my possession. For certain types of travel services, I may however be a data processor. This is likely to be the case where I contract with a third party such as a travel business which is based in or outside the UK for the arrangement of travel services and which itself enters into a contract with you for the provision of your travel. In this situation, that travel business is likely to be the data controller. Where I am a data processor, I will only process your personal data in accordance with the instructions of the data controller. Certain provisions of this privacy policy will be applicable where I am the data processor. 

What personal data will I collect from you and how will I do this?
In order to respond to an enquiry, process and fulfil your booking or send you promotional material, I need to collect personal data from you. When I refer to personal data, I mean any information which relates to an identified or identifiable individual. Where I refer to process or processing, I mean anything which I may do with your personal data including collecting, storing, using, disclosing to third parties and erasing it.

You may provide to me or I may otherwise obtain personal data about you in various ways. This may be as a result of my direct communications or through a third party such as a travel business. I have provided examples of the personal data I process below. This may be provided over the telephone, on-line through our website or in emails to me. Additionally, in order to allow you to experience a more personalised service when you complete the Curated Escapes Questionaire I may find out about your interests. I may do so by asking you to provide this information. Depending on what's required, the personal data I collect may include names and contact details (such as telephone numbers, postal and e-mail addresses) and credit/ debit card or other payment information. It may also include special categories of personal data such as information which concerns your health. Please see below for further information on this subject. 

Please do not provide your personal data to me if you are not happy for me to process this information in accordance with this privacy policy.
Examples of when and how I may collect your personal information include the following:
◎ If you order any of my services I will ask for your name, address and e-mail address. This is so I can effectively e-mail or post out the requested items.
◎ If you submit a ’Contact’ form I will ask for your name, telephone number and e-mail address. This is so I can effectively respond to your request.
◎ If I make a booking on your behalf, I will ask for the personal information of all persons travelling. This is likely to include the personal data set out above. This is required so that I can make and provide your travel arrangements.
◎ If you submit feedback to me, I will ask for your name and email address in order to effectively respond to your feedback.

What are special categories of personal data? 
Personal data which concerns your health or which reveals your racial or ethnic origin, religious beliefs or your sexual orientation are special categories of personal data. Other information also comes within special categories but this is unlikely to be relevant to the booking and provision of travel arrangements. 

Generally speaking, the processing of special categories of personal data requires your explicit consent.
Accordingly, information concerning any disability, medical condition, restricted mobility or any other health issue (and related requirements) as well as dietary restrictions which may disclose your religious beliefs or any health issue are special categories of personal data. I will ask for your consent to my processing this information at the time you make a booking or enquiry or whenever you otherwise provide or indicate that you intend to provide such information.

Is there any other personal information I may collect about you?
In addition to asking you to submit personal data, I may collect information about you automatically when you visit my website. The collection of information may involve the use of cookies and web beacons. A web beacon is a small graphic image placed on a web page that is designed to allow me to monitor visitors to the website. A cookie is small text file that is placed on your computer's hard drive or mobile device by your web browser when you first visit the website. The cookie allows me to identify your computer and find out details about your last visit. Most internet browsers accept cookies automatically, but usually you can alter the settings of your browser to erase cookies or prevent automatic acceptance if you prefer. If you choose not to receive cookies, I cannot guarantee that your experience with the website will be as quick or responsive as if you do receive cookies.

The information collected by cookies and web beacons is not personally identifiable, it includes general information about your computer settings, your connection to the internet e.g. operating system and platforms, IP address, your browsing patterns and timings of browsing on the website and your geographical location.

Does this privacy policy apply to any other websites?
This policy applies only to the website Curated Escapes. 

Who will I provide your personal data to?
Where you make a reservation or booking or enquiry, appropriate personal data will be passed on to the relevant suppliers (such as airlines, hotels, car hire companies etc) and any other third party (such as banks and/or credit card companies) who need this information so that your chosen arrangements can be booked and provided or your enquiry answered. Once your booking has been made, your personal data may also be provided to government / public authorities such as customs or immigration if required by them, or as required by law. Certain information may also be passed on to security or credit checking companies.
I may also make personal data available to companies who provide services on our behalf. I only provide third parties with the personal data they require in order to deliver their services. Other than in relation to government / public authorities (over whom I have no control), I will take appropriate steps which are intended to ensure that anyone to whom I pass your personal data for any reason agrees to keep it secure, only uses it for the purpose of providing their services and does not collect any personal data from you in the course of performing their services.

Where will I process your personal data?
Your personal data may be stored, used and otherwise processed within the UK and/or any other country(ies) of the European Economic Area (EEA). EEA countries are all member states of the European Union together with Norway, Iceland and Liechtenstein. I may also store, use or otherwise process personal data outside the EEA. Data protection laws may not be as strong outside the EEA as they are in the EEA. Personal data will not be transferred to a country outside the EEA unless (1) the country to which it is transferred is one which the European Commission considers to provide an adequate level of data protection or (2) the personal data is transferred to a company which is required by my contract with them only to deal with the data in accordance with my instructions and to maintain appropriate security to protect the personal data which satisfied they have or (3) I am obliged to provide the personal data to a government / public authority in order to provide your travel arrangements.

How do I protect your personal data?
I take appropriate technical and organisational measures to protect against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data, which is appropriate to the harm that might result from the unauthorised or unlawful processing or accidental loss, destruction or damage and the nature of the data to be protected, having regard to the state of technological development and the cost of implementing any measures.

Can I use your personal data to send you information about my services or other services in the future?
I will only retain and use your personal data for marketing purposes where you have specifically consented to me doing so or I am permitted to do in accordance with data protection laws (including as set out below).

I may send you e-mail marketing where I comply with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). PECR permits me to e-mail you information about the travel services I offer where you have previously provided me with your e-mail address in the course of entering into a contract with me for travel arrangements or negotiations for such arrangements and I wish to e-mail you marketing material about similar services. You will of course be given the opportunity to opt out of receiving such e-mail marketing communications when you first provide me with your e-mail address and whenever I send you any e-mail marketing.
Where you have previously requested or agreed to receive information about our travel services from me by post, I may continue to send you such information in the same way until you ask me not to (which you can do by telephone, e-mail or post). Everything I send you will tell what you should do if you no longer wish to hear from me. I will send you this information as this is necessary for the purposes of my legitimate interests in communicating with you unless it is or becomes clear that my interests are overridden by your interests or fundamental rights and freedoms in which case I will cease communicating with you.

You may provide your consent to receiving marketing material from me by opting into receive marketing material either on-line or by telephone. You may also choose in what ways you are happy to receive communications from me. You may, for example, be happy to receive information and offers by post and e-mail but not by telephone.

How can you find out what information I am holding about you?
You are entitled to ask me (by letter or e-mail) what personal data of yours is being held or processed, for what purpose and to whom it may be or has been disclosed. No fee will be charged for responding to this request unless it is obviously unfounded or excessive or I have previously provided the same information. I promise to respond to your request without delay and in any event within one month unless the request is complex or you have made numerous requests in which case I may be able to extend my response time by a further two months.

What should you do if the personal data I am holding is inaccurate, out of date or incomplete?
If you believe this is the case, please tell me by letter or e-mail as soon as possible. I will rectify the problem within one month or within three months if the rectification request is complex.

How long can I retain and process your personal data?
I will not process your personal data in a form which enables you to be personally identified for any longer than is necessary in order to fulfil the purpose for which it was originally collected or for any other legitimate business purpose.

If you have consented to receiving marketing communications from me, I may continue to use your personal data for this purpose until you withdraw your consent or otherwise for as long as I reasonably consider your consent remains valid and effective.
Where you have provided your personal data to enable me to provide the travel arrangements or other services you have contracted, I am entitled to retain this information for a period of ten years after the end of those arrangements. In certain limited circumstances, I may be able to retain it for a longer period.

Can you ask me to delete your personal data?
Yes, you can ask me to erase or remove your personal data in certain circumstances, for example where you have withdrawn your consent to further marketing where the data in question has only been processed for this purpose. However, this is not always the case. Please see the previous paragraph for further information on the period of time I may retain personal data.

Can this privacy policy be changed?
Yes, from time to time I may need to make changes to this privacy policy. These may be required as a result of changes in data protection laws or in the guidance issued by regulators such as the Information Commissioner's Office (which is usually referred to as the ICO) or where I make changes to procedures. The latest version of this privacy policy will be on the website.

What should I do if I have a complaint about the processing of my personal data?
If you have any complaint about the way in which your personal data has been dealt with, please let me know by e-mail to james@curatedescapes.co.uk. I will investigate and respond to you as soon as I reasonably can. If you remain dissatisfied, you may complain to the Information Commissioner's Office. For further details, see www.ico.org

Last updated 1 Dec 2018. Version 2018.01