This page describes what happens to your data when you use girvanholidayhome.co.uk. It is written from what the site actually does rather than from a template, and if you find anything here that does not match your experience we would like to know.
Who we are
This site is published by the owners of the seafront holiday apartment shown on the home page. For data protection purposes we are the data controller for the enquiry form.
How we measure visits
We use Rybbit, a privacy-first analytics tool, to see which pages people read and where they arrive from. It is cookieless: it sets nothing on your device, so there is no cookie banner because there is nothing to consent to.
It records the page you viewed, the site that referred you, your browser, operating system, screen size and device type, and the country and region worked out from your IP address — the address itself is not stored. Visitor identifiers are re-salted every day, so nobody is followed from one day to the next, and you are not tracked across other websites.
There is no Google Analytics, no tag manager, and no advertising or social pixels on this site, and we do not sell or share any of it.
The enquiry form
The form on the home page is the only place we collect personal data. When you send an enquiry we receive:
- Your name, email address and message — what you typed.
- Your IP address and the time you sent it — recorded automatically, so we can identify abuse of the form.
- A reCAPTCHA score — a number between 0 and 1 indicating how likely Google thinks it is that you are a person rather than a bot.
What happens to it: the message is emailed straight to us. Nothing is written to a database or saved on the web server — there is no store to be breached, because there isn't one.
Why we are allowed to: we process it on the basis of our legitimate interest in answering enquiries about the apartment, and to take steps at your request before entering into a contract.
How long we keep it: we keep enquiry emails while the enquiry is live and for a reasonable period afterwards, then delete them. If an enquiry becomes a booking, we keep the records for as long as tax and accounting rules require, which is currently six years.
What we never do: we do not add you to a mailing list, sell your details, or pass them to anyone else for marketing.
Third parties
Rybbit provides the analytics described above. It is cookieless and collects no personal data; its cloud service is hosted in the EU.
Three Google services also run on this site. All of them mean your IP address, and some information about your browser, reach Google.
- Google Fonts loads the typefaces on every page. This is a design dependency rather than a tracking one, but it is a request to Google's servers all the same.
- reCAPTCHA v3 runs on the home page only, because that is where the enquiry form is. It works invisibly, scoring how likely you are to be a human, and it sets Google cookies to do so. We use it to stop the form being abused by automated spam. Google's privacy policy and terms apply to that processing.
- Google Maps is embedded on a few pages only, such as our page on Austins restaurant, to show where a place is. The map loads only when you scroll down to it, and once it loads Google may set cookies, as it does on its own site. Google's privacy policy applies to that too.
Server logs
Our web host keeps standard server logs, which typically include IP addresses, timestamps and the pages requested. These are generated by the hosting platform for security and diagnostics rather than by us, and we do not use them to build any picture of individual visitors.
Links out
We link to a great many other websites — clubs, restaurants, attractions, the National Trust for Scotland, ScotRail and so on. We are not responsible for what those sites do with your data, and their own privacy policies apply once you leave here.
Your rights
Under UK data protection law you can ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, or stop using it. You can also object to our processing it.
In practice, for this site, that almost always means one thing: ask us to delete your enquiry and we will delete the email. Use the enquiry form on the home page and say so — we do not need a formal request.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to put it right first.
Changes
If we add anything that changes this picture — a booking system, a newsletter, analytics — we will update this page and say what changed rather than quietly revising it.
See also about this guide for who publishes the site and how it is researched.
