Privacy Policies

Who we are

Our website address is: http://45degreesnorth.co.uk.

Here at 45 Degrees North, we understand that the right to your data and protection of your privacy is important. This policy explains how and why we collect your data and the systems we have in place to protect it. We ask that you are aware of your responsibility to the information you provide and make your group aware of any information you are providing us with. By using this website and proceeding with your booking, providing us personal information, you consent to the collection, storage and use of your data as set out below.

If you have any questions regarding the Privacy and Data collection, please feel free to contact us and we will help you as best we can.

What personal data we collect and why we collect it

Personal Information

When you enquire or book a holiday with us, we collect certain data from you in order to help you with your booking and contact you. We will ask for certain information via email in order to help ensure we have all the information we require to make your holiday as successful as we can, this information is all provided by you to us.

Comments

When visitors leave comments, write testimonials or fill out our booking forms we collect the data shown in each form.  We also record visitor’s IP addresses and browser user agent string to help spam detection and prevent malware.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service or Facebook to see if you are using it.  If you’d like more information please see the Gravatar service privacy policy and the Facebook privacy policy.  After approval of your comment, your profile picture is visible to the public in the context of your comment.

Cookies

This site uses cookies for navigation purposes. These cookies recognise whether you are looking at our Summer or Winter section so that we can display the relevant information accordingly. The cookies are called ‘session cookies’ which means that they are stored on the computer or device being used to view the website and they expire at the end of a browser session.  So, they are not stored long term.

We also use cookies to monitor the performance of our website, enable commenting and to allow people to share links to our website.

We use social media (Twitter, Facebook, Youtube, Instagram) and their buttons to integrate with their websites. Please check their cookie use policies.

What are cookies?

A cookie is a small piece of data or message that is sent from a website’s server to your web browser and is then stored on your hard drive. They’re generally used to improve your user experience by – for example – remembering what’s in your online shopping basket or keeping you logged in on a website as you navigate from one page to another.  Cookies can’t read data off your hard drive or other cookie files, and do not damage your system.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

When you look at our website we track how you use it using Google Analytics and this information is stored for 26 months.  For more information please see Google Analytics’ data privacy and security information.  We use this analytical software to help us understand more about our customers so that we can provide a better service.

We also use Facebook Pixel to help us track how people use our site.  Facebook processes data on our behalf in order to measure the performance and reach of advertising campaigns and report back insights about our users and how they saw and interacted with adverts.  If you’d like more information please see the Facebook Pixel privacy policy.

Who we share your data with

We share your information with our french sister company 45 Degrees North SARL who follow the same processes as seen in this policy. We won’t share your information with any other companies unless you give us permission to and then we’ll only use your basic contact information to organise in-resort services on your behalf.

How long we retain your data

If you leave a comment on our website, the comment and its metadata are retained indefinitely.  This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue. Any other data we obtain from you before and during your holiday, we retain for 3 years in order to help you if you would like to return to us and make booking and organising your holiday an easier process. After the 3 years we will delete any personal information we have from you.

What rights you have over your data

The GDPR provides the following rights for individuals:

  1. The right to be informed-to know how your information is being processed, what, where and why it is being collected.
  2. The right of access-you have the right to access  all the data stored on you.
  3. The right to rectification- you have the right to make any corrections to any of the data stored on you.
  4. The right to erasure – under certain circumstances you may request to have any of your data deleted from our servers.
  5. The right to restrict processing – under certain circumstances you have the right to restrict how your data is used.
  6. The right to data portability – where possible you have the right to transfer your information to another party.
  7. The right to object – to the processing of your information under certain grounds or if you would like to object to direct marketing.
  8. Rights in relation to automated decision making and profiling. –  you have the right to object to automated Processing, including profiling and be able to obtain human intervention.

If you would like us to show you any information that we have stored on you, you can contact our Data Protection Officer (DPO) Anna Moresby  and she will produce any information on our system of you. If you would like any amendments in our storage of your data, this maybe also done by our DPO.

If you have written any information on our website that you would like us to erase please let us know and one of our admin team will do this for you.  This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

We will only use your data for purposes of your holiday. Your information that you have provided with us will be used by upper management who will filter down the vital information for your chalet host to cater for you for the week. We do not share information with third parties unless requested by you for services regarding to your holiday. Visitor comments may be checked through an automated spam detection service on our website.

Your contact information

As a previous summer or winter guest you will be given the opportunity to subscribe to our newsletter and receive a 5% loyalty discount.  Other website users can also choose to sign up to our newsletter. This newsletter is processed through MailChimp who holds your name and email address until you choose to unsubscribe, which can be found as an option on every newsletter sent. MailChimp has their own Privacy policy about how they handle your information.  In both cases contact information will be securely stored using Google Drive cloud based system.

Additional information

How we protect your data

We do our best to protect your information as much as we can but do to the internet not being completely secure we cannot guaruntee complete security of the data provided. We do however take all the reasonable steps to ensure the best security we can. Any personal data that we store on your behalf is stored in the cloud using Google Drive and is only accessible to management level staff.   If you would like to know more about how information is stored please see Google Drive’s privacy policy. We will do everything we can to minimise any risks and protect your privacy.

What data breach procedures we have in place

We use software to protect our website from viruses and malware.  Any breaches are blocked and the website admin and data privacy teams are notified immediately so that we can ensure your data is secure. If we have a breach of data security, we will contact the authorities to make them aware and work to correct this breach or minimise immediately. We will contact you directly if your stored information was breached. For further information please see the privacy policy for our software provider.

Changes to our Privacy Policy

We reserve the right to update or alter this Privacy Policy from time to time without notice to you.

Last Modification made on the 24th may 2018.