Privacy Policy & GDPR
Huge Holiday Homes is committed to protecting your privacy and handling your personal data securely and transparently. This policy explains how we collect, use, store, and protect your information in line with UK GDPR and the Data Protection Act 2018.
1. Who We Are
Huge Holiday Homes acts as the data controller for personal information we collect from you.
2. What Information We Collect
Information you provide to us:
-
Name, email address, and phone number
-
Postal address
-
Payment information (processed securely through our payment provider)
-
Booking details including dates, group size, and preferences
-
Correspondence and communications with us
-
Accessibility needs
Information we collect automatically:
-
IP address and device information
-
Browser type and version
-
Pages visited and links clicked
-
Time spent on pages
-
Referring website
3. How We Use Your Information
Contract Performance:
-
Processing and managing your bookings
-
Communicating about your reservation
-
Providing customer support
-
Processing payments and refunds
Legitimate Interests:
-
Improving our website and services
-
Analysing how guests use our site
-
Preventing fraud and maintaining security
-
Sending service updates and important notices
Consent:
-
Sending marketing emails about offers, new properties, and inspiration
-
Using cookies for analytics and personalisation (see section 9)
4. Legal Basis for Processing
Under UK GDPR, we process your data on the following bases:
-
Contract: Processing necessary to fulfil our booking agreement with you
-
Legitimate Interest: Processing necessary for our business operations, where it does not override your rights
-
Consent: Processing you have explicitly agreed to, which you can withdraw at any time
-
Legal Obligation: Processing required by law, including tax and accounting requirements
5. Who We Share Your Data With
We may share your personal data with:
-
Payment Processors: For handling booking payments securely
-
Email Service Providers: For sending booking confirmations and communications
-
Analytics Providers: Google Analytics (anonymised data)
-
Legal Authorities: Where required by law or to protect our rights
We do not sell your personal data to third parties for marketing purposes.
6. International Data Transfers
Some of our service providers operate outside the UK and EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK ICO and adequacy decisions recognising equivalent data protection standards.
7. How Long We Keep Your Data
-
Booking Data: 7 years after your last booking, for tax and accounting purposes
-
Marketing Data: Until you unsubscribe or withdraw consent
-
Website Analytics: 26 months (Google Analytics default)
-
Customer Support: 3 years after last contact
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
-
Access: Request a copy of the data we hold about you
-
Rectification: Request correction of inaccurate or incomplete data
-
Erasure: Request deletion of your data in certain circumstances
-
Restriction: Request we limit how we use your data
-
Portability: Receive your data in a structured, machine-readable format
-
Object: Object to processing based on legitimate interests or for direct marketing
-
Withdraw Consent: Withdraw consent at any time for consent-based processing
-
Lodge a Complaint: Complain to the ICO if you believe we have breached data protection law
To exercise any of these rights, contact us at mark@hugeholidayhomes.co.uk. We will respond within one month.
9. Cookies
Our website uses cookies to improve your experience. We use:
-
Essential Cookies: Required for the website to function
-
Analytics Cookies: Help us understand how visitors use our site
-
Marketing Cookies: Track activity for advertising purposes (with consent)
You can manage your preferences through our cookie banner or your browser settings.
10. Security
We use appropriate technical and organisational measures to protect your personal data, including SSL encryption, secure payment processing through PCI-DSS compliant providers, access controls, and regular security reviews.
11. Marketing Communications
With your consent, we will send you emails about new properties, special offers, and group travel inspiration. You can unsubscribe at any time by clicking the unsubscribe link in any email or contacting us directly.
12. Children's Privacy
Our services are not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have inadvertently done so, please contact us immediately.
13. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email or via a notice on our website.
You also have the right to complain to the Information Commissioner's Office:
Website: www.ico.org.uk Phone: 0303 123 1113
Last updated: 23rd May 2026