Privacy Policy

Privacy Policy

Last updated: 20/01/2026

This Privacy Policy explains how Cilbronnau Farm ("we", "us", or "our") collects, uses, and protects your personal data when you visit our campsite, use our website, or contact us. We are committed to protecting your privacy and handling your data transparently and securely, in accordance with UK data protection law.

1. Who we are

Campsite name: Cilbronnau Farm
Address: Cilbronnau Farm, Llangoedmor, Cardigan, SA43 2LP
Email: info@cilbronnaufarm.co.uk
Telephone: 07825 239369

For the purposes of data protection law, we are the data controller of your personal data.

2. The personal data we collect

We may collect and process the following types of personal data:

  • Identity and contact information: name, postal address, email address, telephone number

  • Booking information: arrival and departure dates, pitch or accommodation details, number of guests, vehicle details, and whether you are bringing dogs

  • Dog-related information: number of dogs, dog names (if provided), and any relevant information you choose to share to help us accommodate your stay safely

  • Payment information: payment status and transaction references (we do not store full card details)

  • Communications: emails, phone calls, messages, or other correspondence you send us

  • Website usage data: IP address, browser type, pages visited, and cookies (see section 8)

3. How we collect your data

We collect personal data when you:

  • Make an online booking through our website or booking system

  • Make a booking or enquiry by phone

  • Book in person as a walk-in guest

  • Contact us by email, phone, social media, or contact forms

  • Subscribe to updates or newsletters (if applicable)

  • Stay at our campsite

4. How we use your personal data

We use your personal data to:

  • Manage online, phone, and walk-in bookings

  • Provide a safe and enjoyable stay for all guests, including accommodating dogs in line with our dog-friendly policies

  • Communicate with you before, during, and after your stay

  • Take and administer payments and deposits

  • Maintain booking records and guest registers

  • Improve our services, facilities, and website

  • Meet legal, regulatory, insurance, and health and safety requirements

  • Send occasional updates or marketing communications (only where permitted or with your consent)

5. Lawful basis for processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

  • Contract: where processing is necessary to fulfil a booking or provide services

  • Legal obligation: where we must comply with the law (for example, accounting or safety requirements)

  • Legitimate interests: to run and improve our campsite business, provided your rights do not override these interests

  • Consent: where you have given clear permission (for example, for marketing emails)

6. Sharing your data

We do not sell your personal data. We may share it only with:

  • Booking or payment service providers

  • IT and website service providers

  • Professional advisers such as accountants or insurers

  • Authorities where required by law

All third parties are required to respect the security of your data and to treat it in accordance with the law.

7. How long we keep your data

We keep personal data only for as long as necessary:

  • Booking and financial records are typically kept for 3 years to comply with tax and legal obligations

  • Guest registers and stay records are kept for a reasonable period for operational, insurance, and safety purposes

  • Enquiry and correspondence data is kept only as long as needed to respond and manage enquiries

  • Marketing data is kept until you withdraw consent or opt out

8. Cookies and website data

Our website may use cookies to help it function properly and to understand how visitors use it. You can control or disable cookies through your browser settings.

9. Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, or disclosure.

10. Your data protection rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate or incomplete data

  • Request erasure of your data in certain circumstances

  • Object to or restrict processing

  • Request data portability

  • Withdraw consent at any time (where consent is the lawful basis)

To exercise any of these rights, please contact us using the details above.

11. Complaints

If you have concerns about how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO):

Website: https://www.ico.org.uk
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns first.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website or on request.