Our Secure server software (SSL) is the industry standard and is among the best software available today for secure commerce transactions. It encrypts ALL OF YOUR PERSONAL INFORMATION, including your credit or debit card number, name and address, which means that your details cannot be read as the information travels over the internet. Only Holicas can read your personal information.
Equally, as required by the UK Data Protection Acts of 1984 and 1998, we follow strict security procedures in the storage and disclosure of information provided by our customers.
In the extremely unlikely event that your card details are obtained and used fraudulently, most banks and credit card providers will either cover all charges resulting from this unauthorised use of your credit details or will limit your liability to £50. Please check your card agreement to establish your coverage for liability.
Did you know? The risk of credit card fraud is 100 times greater when you hand your card to the waiter in a restaurant than when you shop on the Internet! Modern day encryption technology, used by many websites like ours, virtually eliminates credit card fraud on the Internet.
What personal information we process and why?
We will only process personal information about you when we need to and this may include:
- Personal details such as your name, contact details (phone number, email address and home address), customer ID and your username and password
- Payment details such as payments made to and from you and partial payment card details or the IBAN number
- Booking details such as properties and services booked through us, booking references and travel dates
- Identification details such as passport details or identification number where this is required for your booking, for example if you have booked a property in a location where we are required to collect this information under local tourism laws
- Contact history such as emails, letters, live chats, call recordings and social media messages to and from you
- Usage details such as IP address, device type, how you use or interact with our website, emails, content or ads (e.g. pages visited, links clicked and properties viewed). Please see our Cookie Policy (a link can be found at the bottom of this page) for more information about this.
We don’t typically collect special categories of personal information, but on occasion this may be required to provide our service to you, for example, where you provide us with health information, including any difficulties with mobility, for us to ensure that your requirements can be met. This may also be necessary for insurance or legal purposes for example, if you have an accident at a property you have booked through us and medical data is required as part of the claim.
The provision of some personal information is a legal or contractual requirement and if you do not provide it, we may not be able to enter into or perform the contract with you and may therefore cancel your booking. We will tell you if this is the case and will not be liable to you.
We generally collect personal information directly from you, but we may also receive your data from third parties. For example:If you book via one of our booking partners Other guests in your party If you enter a competition relating to us via a third partyPublicly available sources
If you provide information about other people when making a booking, this privacy notice will apply to all personal information you have provided about them and you should bring this privacy notice to their attention.
We may use your personal information for any of the purposes explained below, depending on how you interact with us.
Your rights
Under certain circumstances, you have the right to:
- Request access to a copy of the personal information we hold about you (commonly known as a “subject access request”).
- Request that we correct any inaccurate or incomplete personal information that we hold about you. Remember, you can update your contact details through My Account.
- Request that we delete your personal information where there is no good reason for us continuing to process it (commonly known as the “right to be forgotten”).
- Object to us using your data for direct marketing or, in some circumstances, using it for legitimate interests.
- Request restriction of the processing of your personal information. This allows you to ask us to limit the way we process your personal information, for example if you dispute the accuracy of the information we hold about you.
- Request data portability, whereby we transfer the personal information you have provided to us, either directly to you or a third party.
- Withdraw your consent where we rely on your consent to process your information.
There is no fee to exercise your rights, unless your request is unfounded or excessive, in which case we may charge you a reasonable fee or refuse to comply with the request. We may need to request information from you to help us confirm your identity and identify the information you are referring to.
If you wish to exercise any of these rights, please contact us. We aim to respond to requests within one month, but where permitted we may extend this by two months and will notify you of this.
