1. Introduction
Rockley Watersports Ltd ("we," "our," or "us") is committed to protecting the privacy and security of personal data. This GDPR Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the General Data Protection Regulation (GDPR).
2. Data We Collect
We may collect and process the following types of personal data:
- Personal Identification Information: Name, date of birth, gender.
- Contact Information: Address, email, phone number.
- Emergency Contact Information: Next of kin details.
- Health & Safety Information: Medical conditions, allergies, disabilities (for safety and participation purposes).
- Payment Information: Billing address and transaction details (we do not store credit/debit card details).
- Photos & Videos: With consent, for marketing and promotional purposes.
3. How We Collect Data
We collect data through:
- Online bookings and registration forms.
- Direct communications (email, phone, in person).
- Consent forms and waivers.
- Website cookies (if applicable).
4. Legal Basis for Processing
We process personal data under the following legal bases:
- Contractual Necessity: To provide our services.
- Legal Obligations: Compliance with health and safety regulations.
- Legitimate Interests: Ensuring customer safety, improving services.
- Consent: For marketing, photos, and videos.
5. How We Use Data
We use personal data to:
- Process bookings and provide services.
- Ensure participant safety and well-being.
- Manage customer relationships and respond to inquiries.
Rockley Watersports LTD
- Send promotional offers and updates (with consent).
- Improve our services and website experience.
6. Data Sharing & Third Parties
We do not sell personal data. We may share data with:
- Instructors and staff for safety and operational purposes.
- Emergency services in case of medical emergencies.
- Payment processors (for transactions).
- Marketing platforms (only if consent is given).
7. Data Retention
We retain data only as long as necessary for legal, safety, and business purposes:
- Booking records: Are kept for 7 years for legal compliance.
- Medical and emergency details: Retained for the duration of activities and a reasonable period afterward.
- Marketing data: Until consent is withdrawn.
8. Data Security
We implement security measures to protect personal data, including encryption, access
controls, and secure storage.
9. Your Rights
Under GDPR, you have the right to:
- Access, correct, or delete your personal data.
- Restrict processing or object to data use.
- Withdraw consent for marketing at any time.
- Request data portability.
- Lodge a complaint with a data protection authority.
10. Contact Us
For data protection inquiries, please contact us at:
Rockley Watersports
Email: [email protected]
Phone: 01202 677272
Address: Rockley Point, Napier Road, Hamworthy. BH154RW.
This GDPR Privacy Policy ensures that we handle personal data responsibly while providing
enjoyable and safe experiences. By using our services, clients agree to the terms outlined
above.
Rockley Watersports LTD
11. How We Use Cookies
11.1 Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our products and/or services. We have carefully chosen these Cookies and have taken steps to ensure that your privacy and personal data is protected and respected at all times.
11.2 All Cookies used by and on Our Site are used in accordance with current Cookie Law https://www.aboutcookies.org/
11.3 Before Cookies are placed on your computer or device, you will be shown a prompt e.g. “pop-up” requesting your consent to set those Cookies. By giving your consent to the placing of Cookies you are enabling Us to provide the best possible experience and service to you. You may, if you wish, deny consent to the placing of Cookies; however certain features of Our Site may not function fully or as intended. [You will be given the opportunity to allow only first party Cookies and block third party Cookies.]
11.4 Certain features of Our Site depend on Cookies to function. Cookie Law deems these Cookies to be “strictly necessary”. These Cookies are shown below in clause 12 of this policy.5. Your consent will not be sought to place these Cookies, but it is still important that you are aware of them. You may still block these Cookies by changing your internet browser’s settings as detailed below in section 13.9, but please be aware that Our Site may not work properly if you do so. We have taken great care to ensure that your privacy is not at risk by allowing them.
11.5 The following first party Cookies may be placed on your computer or device:
Name of Cookie Purpose Strictly Necessary
_ga | Google Analytics - This performance cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports.
_gat | Google Analytics - This is a performance cookie. It is used to throttle the request rate - limiting the collection of data on high traffic sites.
_gid | Google Analytics - This appears to be a new performance cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited.
CraftSessionId | Craft CMS - Craft relies on PHP sessions to maintain sessions across web requests. That is done via the PHP session cookie. Craft names that cookie “CraftSessionId” by default. This cookie will expire as soon as the session expires.
CRAFT_CSRF_TOKEN | Craft CMS - a cookie named CRAFT_CSRF_TOKEN will be created to facilitate CSRF protection.
Craft's default cookies | Craft CMS - For GDPR purposes, please note that Craft’s default cookies do not collect any personal or sensitive information. Craft's default cookies do not collect IP addresses. The information they store is not sent to anyone. Craft’s default cookies are only used to communicate the website's Craft CMS installation for the purposes of user authentication, form validation/security, and basic web application operations.
player, vuid | Vimeo - We embed videos from our official Vimeo channel. When you press play Vimeo will drop third party cookies to enable the the video to play and to collect analytics data such as how long a viewer has watched the video. These cookies do not track individuals. Vimeo may drop more cookies than the two listed here, so please refer to their cookie policy to find out more information - https://vimeo.com/cookie...
How does craft use cookies
https://craftcms.com/knowledge-base/how-does-craft-use-cookies
11.6 Our Site uses analytics services provided by Google. Website analytics refers to a set of tools used to collect and analyse anonymous usage information, enabling Us to better understand how Our Site is used. This, in turn, enables Us to improve Our Site and the products and/or services offered through it. You do not have to allow Us to use these Cookies, however whilst Our use of them does not pose any risk to your privacy or your safe use of Our Site, it does enable Us to continually improve Our Site, making it a better and more useful experience for you.
11.7 The analytics service(s) used by Our Site use(s) Cookies to gather the required information.
11.8 The analytics service(s) used by Our Site use(s) the following Cookies:
Name of Cookie First / Third Party Provider Purpose
_ga 3rd Google Used to distinguish users
_gat_UA-17228195-1 analytics
_gid 3rd Google Used to throttle request rate. If Google Analytics
analytics is deployed via Google Tag Manager, this cookie will
be named _dc_gtm_<property-id>.
11.9 In addition to the controls that We provide, you can choose to enable or disable Cookies in your internet browser. Most internet browsers also enable you to choose whether you wish to disable all cookies or only third-party cookies. By default, most internet browsers accept Cookies but this can be changed. For further details, please consult the help menu in your internet browser or the documentation that came with your device.
11.10 You can choose to delete Cookies on your computer or device at any time, however you may lose any information that enables you to access Our Site more quickly and efficiently including, but not limited to, login and personalisation settings.
11.11 It is recommended that you keep your internet browser and operating system up-to-date and that you consult the help and guidance provided by the developer of your internet browser and manufacturer of your computer or device if you are unsure about adjusting your privacy settings.
Our Site may place and access certain first party Cookies on your computer or device. First party Cookies are those placed directly by Us and are used only by Us. We use Cookies to facilitate and improve your experience of Our Site and to provide and improve Our products and/or services.