Last updated: January 2024
Valley Voyage is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have always had a robust and effective data protection programme in place which complies with existing law and abides by the data protection principles. However, we recognise our obligations in updating and expanding this programme to meet the demands of the UK GDPR and Data Protection Act 2018.
Valley Voyage acts as the Data Controller for personal data collected through this website and our travel services. This means we determine the purposes and means of processing personal data.
Contact details:
Valley Voyage
47 Marine Parade
Brighton, BN2 1PE
United Kingdom
Email: [email protected]
Under the GDPR, you have the following rights:
You have the right to request a copy of the personal data we hold about you. This is commonly known as a Subject Access Request (SAR). We will respond to your request within one month of receipt.
You have the right to request that we correct any inaccurate personal data we hold about you, or complete any incomplete data.
You have the right to request that we delete your personal data in certain circumstances, including where the data is no longer necessary for the purpose for which it was collected, or where you withdraw consent.
You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing of it.
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller without hindrance.
You have the right to object to the processing of your personal data where we are relying on legitimate interests as the legal basis, or where we are processing your data for direct marketing purposes.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
To exercise any of your rights, please contact us at [email protected]. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data.
We process personal data under the following lawful bases:
In the course of providing travel services, we may transfer your personal data to countries outside the United Kingdom. When we do so, we ensure that appropriate safeguards are in place to protect your data, including the use of standard contractual clauses approved by the relevant authorities.
We have procedures in place to detect, report, and investigate any personal data breach. Where a breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights, we will also notify you directly.
If you are not satisfied with how we handle your personal data or any request you have made, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: ico.org.uk