This Privacy Notice is for Hebridean Island Cruises Ltd of:
Carleton New Road
and explains how we comply with the appropriate data protection regulations as well as how we collect, manage, store and process your personal details.
- What data do we collect?
- How do we collect your data?
- How will we use your data?
- How do we store your data?
- How do we process your data?
- Who do we share your data with?
- What are your Data Protection Rights?
- Privacy Policies of other websites
- Changes in our Privacy Notice
- How to contact us or complain
1)What data do we collect?
We currently collect and process personal identification information including full name, email address, postal address, contact phone number and any specific dietary preferences or health requirements you may have.
2) How do we collect your data?
You directly provide us with most of your personal information. This data and collected and processed when you:
2.1. Register or interact with us via our website, telephone, email or letter for general information or to place a booking.
2.2. You contact us in response to an advert we have placed, complete a survey or to provide feedback.
3) How will we use your data?
We use this information to:
3.1. Provide you with the service you require when you ask for further information about our company, the cruises we provide, booking and taking a cruise and associated trips with us.
3.2. Process your booking and manage your account.
3.3. Ensure any specific requirements are met.
3.4. Keep you informed, via the contact method you have specified about new cruises, trips and any special offers we think you may like.
4) How will we store your data?
4.1. Your personal information is stored securely, and the appropriate technical and organisational measures are in place to safeguard your data protection rights.
4.2. With your consent, your relevant personal information will be kept for 10 years for the purposes of continued general contact and marketing.
4.3. After you have completed your cruise, apart from the information we are obliged to keep for contractual or legal reasons, we will securely delete your information and inform all those third parties with whom your data has been shared that it needs to be deleted.
5) How do we process your data?
Under the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 (“DPA 2018”) and Privacy and Electronic Communications Regulation (“PECR”) the lawful bases we rely on for processing this information are:
5.1. Consent – which you have freely provided directly to us and given your agreement to your data being processed because you have requested something from us. You can withdraw your consent at any time by contacting email@example.com. Your request will be actioned within 10 days.
5.2. Contractual Obligation – to enable us to provide you with the goods and / or services you have requested or for us to provide something before entering into a contract eg a quotation.
5.3. Legal Obligation – to process your personal data to comply with a legal or statutory obligation.
5.4. Vital Interest – to process your personal data to protect someone’s life.
5.5. Public Task – to process your personal data to perform a specific task in the public interest which is laid down in law.
5.6. Legitimate Interest – to process your personal data in a way you would reasonably expect with minimal impact on your interests, rights and freedoms.
6) Who do we share your data with?
We collect and share your personal information for the following reasons:
6.1. UK Maritime & Coastguard Agency – Safety of Lives at Sea Regulations:
Following the enforcement of the 2021 regulatory changes with regards to counting and registration of persons on board passenger ships, it is a requirement that as well as passenger numbers, personal information including forename, surname, gender, nationality and date of birth are collected. Where volunteered, information concerning special care, assistance and / or a contact number that might be needed in an emergency must be reported to the Master of the Ship before departure.
6.2. Tour Guides:
Only your name and contact phone numbers are provided to the Tour Guides via electronic transmission from the Ships so that you can be sure you are on the correct trip, can safely enjoy it and return to the ship at the end of the excursion.
6.3. Bursars / Ship crew:
Your personal details, which includes your name, address, mobile phone number, next of kin and potentially some relevant sensitive data, are available to the Ship’s crew to ensure you receive a top-level service to make your trip as comfortable and enjoyable as possible.
6.4. Travel companies:
Your relevant personal details being your name and including where necessary, your address, destination details, timings for travel to complete any transfers between your home, modes of transport, the port and vice versa.
6.5. PT Trustees Ltd (“PTT”):
PTT is the company we use to hold customers’ deposits and balances when you book a cruise with us. We share your name and the date of and value payments with them.
6.6. Constant Contact:
Our email marketing is carried out using a product call Constant Contact and your relevant data is protected by the appropriate terms and conditions.
6.7. Survey Monkey:
Our post cruise questionnaire is carried out using a product called Survey Monkey. Your relevant data is protected by the appropriate terms and conditions.
6.8. Payroll Company:
We hold employee data which is shared with the relevant payroll company for payroll purposes. This data is protected by the appropriate terms and conditions.
6.9. Payment Processing:
If you pay by debit or credit card then payment transaction data is shared with Ilixium Limited to enable them to process the payment. This data is protected by the appropriate terms and conditions.
7) What are your Data Protection Rights?
You have legal data protection rights as follows:
7.1. Right to be Informed about the collection and use of your personal data. If your data is obtained from sources other than directly from yourself, we will let you know what data has been collected and where from as soon as possible and within one calendar month.
7.2. Right of Access gives you the right to ask us for copies of all your personal information and supplementary information that we hold in digital and paper formats. This can be done by using the Subject Access Request “SAR” process. Request your data here >>
7.3. Right to Rectification gives you the right to ask us to rectify any personal information you think is inaccurate and to complete information that you think is incomplete. Your request can be made either verbally or in writing. Request your data here >>
7.4. Right to Erasure gives you, under certain circumstances, the right to have your personal data to be erased. This is also known as “the Right to be Forgotten” and your request can be made verbally or in writing. Request your data here >>
7.5. Right to Restriction of Processing gives you, under certain circumstances, the right to request the restriction or suppression of your personal data and your request can be made verbally or in writing. Where processing is restricted, we are permitted to store your data but not to use it. Request your data here >>
7.6. Right to Data Portability allows you to ask us to transfer the data that we have collected to another organisation or directly to yourself, under certain circumstances, in a safe, secure and structured way.
7.7. Right to Object gives you an absolute right to stop your data from being used for direct marketing and your request can be made verbally or in writing. Request your data here >>
7.8. Right not to be subject to Automated Decision Making and Profiling where the decision is made solely by automated means without the intervention of a human being, or the profiling is automated to evaluate certain things about you. Profiling can be part of the automated decision-making process. Request your data here >>
There is no charge for exercising your rights if your request is reasonable and easily achievable. If you make a request under any of your rights, we have one calendar month in which to respond to you.
If your request is complicated and could take longer than a calendar month to answer, we have the right to extend this timeframe so long as we have been in touch with you within the first calendar month and you have agreed to the extension.
We would like to send you information about our cruises, trips and services which we think you may like. If you have agreed to receiving marketing materials from us, you may always change your preferences or opt out completely at a later date by contacting us.
Cookies are small, often encrypted text files placed on your computer, laptop, smartphone or tablets when you visit websites to collect standard internet log and visitor behaviour information. When you visit our website, we may collect information from you automatically through cookies or similar technologies. For further information about what type of cookies, how we use[NC1] [NC2] them and how you can manage them please click here. See our cookies notice here.
For further information visit https://allaboutcookies.co.uk/
10) Privacy Policies of other websites:
Our website contains links to other websites, but our Privacy Notice only applies to our website. If you click on a link to another website, please ensure you read their Privacy Notice / Policy.
11) Changes in our Privacy Notice:
We keep our Privacy Notice under regular review and place any updates on this web page.
This Privacy Notice was last updated on 30 May 2023.
12) How to contact us or complain:
If you have any questions about our Privacy Notice, the data we hold about you, would like to exercise one or more of your data protection rights or have concerns about our use of your personal information please contact us at:
The Data Protection Manager
Hebridean Island Cruises Ltd
Carleton New Road
Telephone: 01756 704704
CONTACT US BELOW:
If you are unhappy with our response or how we have used your data, you can also complain to the Information Commissioners Office (“ICO”) at:
The Information Commissioner’s Office
Helpline number: 0303 123 1113
ICO website: https://www.ico.org.uk