Privacy Policy

5 Valleys Barn Ltd (“We”) are committed to protecting and respecting your privacy.
This policy ( together with our terms and conditions of use ) sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
For the purpose of the Data Protection Act (the Act) and GDPR, the data controller is 5 Valleys Barn Ltd.

Information you provide to us
When using the the forms on our site, whilst emailing us or over the phone you will typically provide us with the following information:
Name & billing address
Email address
Guests for the booked stay
Card summary information, eg last 4 digits, type and expiry, via PayPal provide these details.

Information we may passively collect
We may collect your IP address and browser user agent string ( eg “Chrome” ) when you submit forms on the site, this is used for anti-fraud purposes and to identify and block abusive users of the site ( anti-abuse, eg form spam).

Where and how your information is stored
The information you provide to us is stored primarily in the United Kingdom and as such within the European Economic Area (EEA).
Our site as well as that of all of our chosen service providers use SSL/TLS enforced/encrypted connections to protect
your information during transit over the Internet.
On our servers your personal details are partially encrypted (the high resolution components of your address, telephone numbers and email address) using currently deemed secure methods (primarily AES 256 with both site and account level keying).
Your password, if provided is not stored in a recoverable format, a representation of it is stored hashed using a high workload key derivation function, which includes site and per-account level salting, the method we use is currently (at the time of writing, early 2018) deemed secure for password storage by current industry standards.

What do we use your information for?
We use your information for processing your bookings. Any information we may collect passively as indicated in the section/s above are used to maintain a smooth operation of the site and to track errors as well as performance.

Cookies
We use cookies (temporary “variables”) required for essential function of the site as well as for customer support and performance monitoring of the site. This includes session cookies, and cookies placed by either Google or Tawk.to for the function of those services.
Cookie in use: SID_CC15, ANYA_CC15, propShortList, propPrefs, and 2-3 tawk prefixed variables.
You may disable cookies by following the instructions for your chosen web browser, however the site will cease to fully function for you.

Your access to information
The Act gives you the right to access information held about you. Your right of access can be exercised in accordance with the Act.

Right to be forgotten
If you wish to have us remove any information that we may have related to you, you may request that we remove that information from our systems where possible. Please note that if you have made financial transactions with us we are required to keep detailed records of those and will not be able to remove information related to those. We can remove your email address, telephone numbers along with anything that may be used for email or online marketing purposes upon request.

Changes to our privacy policy
We may change our privacy policy from time to time. We will always update the privacy policy on our website, so please try to read it when you visit the website.