Privacy Policy

Dated: January 2024 

1. Important information and who we are

This privacy notice provides information on how we collect and process your personal information when you make a booking or booking enquiry through us, visit our website, contact us or use our services. This privacy notice is separate to our booking conditions and other important information available on our website and does not replace or supersede them.

We are The Old Perfume Factory ("we" or "us").  We, as controller, are responsible for your personal information. We will keep your personal information secure and use the information you provide only in accordance with applicable privacy and data protection legislation and the terms of this privacy notice.

2. What personal information do we collect and how?

We will only process personal information about you when we need to and this may include:

• Name
• Contact details including phone number, email address and home address
• Payment details
• Date of birth
• Booking information
• Information gathered via cookies (please see our Cookie Policy for more information)

If you are making a booking on behalf of other people, this privacy notice will apply to all personal information that you have provided on their behalf and you are required to bring this privacy notice to their attention.

We will only collect special categories of personal information where this is required by us or our suppliers to provide our service to you. We will only process this information to meet your specific requirements (for example, where you provide us with health information, including any difficulties with mobility, in order for us to ensure that your requirements can be met) or where we are required to do so.

We will generally collect personal information directly from you. If you have booked via one of our booking partners, we will receive your information from them. We may also receive your information from other guests in your party.

The provision of some personal information is a legal or contractual requirement and if you do not provide it, we may not be able to enter into or perform the contract with you and, we can cancel your booking. We will tell you if this is the case and will not be liable to you.

3. How do we use your information and why?

We will only use personal information for certain reasons and when one or more of the following lawful bases apply:

• Where we need to process personal information in order to perform the contract we have entered into with you, or take steps to enter into a contract with you
• Where we have your consent
• Where we need to comply with a legal obligation
• Where it is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests

In order to process special categories of personal information, we must have additional justification to do so and will only process this type of information where we have your explicit consent, where you have made the information public, in relation to legal claims or where it is necessary for reasons of substantial public interest.

We may use your personal information for any of the below purposes and have explained the lawful bases we rely on, and where necessary, our legitimate interest.

• To enable us to complete your booking or related travel arrangements
• To manage your account with us
• Record keeping and providing good customer service
• To invite you to leave a review about our services
• Understanding the perception of our business and improving our services
• To send service messages, including booking updates and changes to our terms and conditions
• Keeping our customers updated
• To provide details or information you may have requested
• To manage customer service queries, including complaints and call recording
• Improving our service, staff training, record keeping and resolving issues
• To personalise our services to you, for example regarding any repeat visits to our websites
• To carry out marketing activities
• Working out which of our services you may be interested in and telling you about them
• For statistical purposes
• Evaluating our range of services or the success of our services
• In the event of a travel crisis or other unforeseen travel incident whereby we may need to provide your contact details to a third party to provide you emergency assistance
• Protecting our business and customers
• To comply with a legal obligation, process or request
• To comply with government advice or guidance
• Enforce our booking conditions and other agreements, including investigation of any potential breach
• Detect, prevent or report crimeLegal obligation
• Assisting law enforcement and government bodies
• Address security, fraud or technical issues
• Protect the rights, property or safety of us, our users, owners, customers, employees, contractors, a third party or the public

4. Who will you share my personal information with?

We may share your personal information with:

• our employees and contractors as is necessary in order to provide our services to you
• service providers, acting as processors who provide IT, system administration services, website hosting and support, marketing and other services
• professional advisors, including bankers, lawyers, auditors, accountants and insurers who provide us with services
• our preferred insurance provider(s) (if you purchase the personal travel insurance policy we offer)
• credit/debit card companies
• payment service providers
• government agencies, regulators and other authorities
• third parties who we may need to work with to deliver services or fulfil travel plans on your behalf, for example resorts, holiday parks, management companies, owners’ associations
• third party booking or distribution platforms, travel agents and booking partners
• customer review companies and marketing service providers
• third parties that we may choose to sell, transfer, or merge parts of our assets or business to or with and businesses we acquire or merge with
• third parties you have authorised us to speak to, including ABTA

Third parties are required to process your personal information in line with data protection legislation. Where a third party is acting on our behalf, we do not allow them to use your information for their own purposes and we ensure they have appropriate security measures in place to protect your information.

5. International transfers

We will only transfer your personal information outside of the UK where we are satisfied that there are adequate measure in place to protect your personal information in a way that is consistent with, and respects, UK data protection legislation. We will ensure at least one of the following safeguards is implemented:

• an adequacy decision
• approved contractual measures and where necessary, supplementary measures

If you would like further details of the applicable transfer mechanism, please get in touch (see our contact details).

6. Updating Your Details

It is important that the personal information we hold about you is accurate and correct. Please tell us if your personal information changes during your relationship with us.

If you would like to change any of your personal information or preferences relating to the way in which we use your personal information, including for direct marketing, then please make the necessary updates in My Account or get in touch (see our contact details).

7. How long will we hold your information for?

We will only keep your information for as long as necessary. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information, any legal or regulatory requirements and any relevant industry standards or guidelines. Where your information is no longer required, we will ensure it is disposed of or deleted in a secure manner or anonymised so that it can no longer be associated with you.

8. Your rights

Under certain circumstances, you have the right to:

• Request access to your personal information (commonly known as a "subject access request"). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
• Request rectification of the personal information that we hold about you. You can update some of your personal information by logging into your My Account page (such as changes to your address). However, if it remains inaccurate or incomplete, you can request that this be corrected or completed.
• Request erasure of your personal information (commonly known as the “right to be forgotten”). This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it.
• Object to processing of your personal information where we are relying on legitimate interests to process it or using it for direct marketing.
• Request restriction of the processing of your personal information. This enables you to ask us to limit the way we process your personal information, for example if you dispute the accuracy of the information we hold about you.
• Data portability, which enables you to receive the personal information you have provided to us in a structured, commonly used and machine-readable format or request that we transmit it directly to a third party.
• Withdraw your consent where we rely on your consent to process your information.

You are not required to pay any charge for exercising any of these rights, unless your request is unfounded or excessive, in which case we may charge you a reasonable fee or refuse to comply with the request. We may need to request information from you to help us confirm your identity and identify the information you are referring to. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

If you wish to exercise any of these rights, get in touch (see our contact details). We aim to respond to requests within one month. If your request is particularly complex, we are permitted to extend this by two months and will notify you of this. You may not have a right to information if we have responded to a request previously and you have made a repeat request without a reasonable period of time passing between the requests.

9. Does this privacy notice apply to linked websites?

Our websites may contain links to other websites. This privacy notice only applies to this website. Linked websites will have their own privacy policies that you should read to understand what information they collect about you and how they use it. We do not accept any responsibility or liability for these policies.

10. How do we update this privacy notice?

We keep our privacy notice under review and we will place any updates on our webpage. We will contact you to let you know about any significant changes.

11. Who can I contact if I have queries about this privacy notice?

You can contact us at info@theoldperfumefactory.co.uk or 60 Tangasdale, Castlebay, Isle of Barra, HS9 5XW.

You have the right to raise concerns about our use of your personal information with the Information Commissioner (https://ico.org.uk) at any time, but we encourage you to contact us in the first instance so that we may discuss your concerns.