Purpose

This Privacy Policy explains:

1. The personal data we collect;
2. How we use collected data;
3. Who has access to the data collected;
4. Your rights as a user; and
5. Our cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

GDPR Compliance

For users in the European Union, we comply with Regulation (EU) 2016/679
(General Data Protection Regulation – GDPR).

For users in the United Kingdom, we comply with the UK GDPR as incorporated
into the Data Protection Act 2018.

Consent

By using our Site, you agree to the conditions set out in this Privacy Policy.

Where we rely on your consent to process your personal data, you may withdraw
that consent at any time by emailing
info@skiserviceportsmouth.co.uk.

Withdrawal of consent does not affect the lawfulness of processing carried out
before consent was withdrawn.

Legal Basis for Processing

Under Article 6 of the GDPR, we rely on the following legal bases:

• Your consent for one or more specific purposes;
• Processing necessary to take steps prior to entering a contract or to perform
  a contract with you.

If you do not provide the personal data required to perform a contract,
we will be unable to provide the requested service.

Personal Data We Collect

We only collect data necessary to fulfil the purposes outlined in this policy.

Data Collected in a Non-Automatic Way

We may collect the following data when you use our Site:

• First and last name
• Email address
• Phone number
• Address
• Payment information

This data is collected when you complete a payment form.

How We Use Personal Data

We use collected data solely for the purposes disclosed in this policy.

• To fulfil orders and receive payment

Who We Share Personal Data With

Employees

We may disclose user data to members of our organisation where access
is reasonably necessary to fulfil the purposes outlined in this policy.

Third Parties

We may share data with the following third parties:

• Stripe
• WP Pay

Data shared may include:

• Payment and bank details (as required to process transactions)

Third parties will only access data necessary to perform payment processing services.

Other Disclosures

We may disclose your data:

• Where required by law;
• In legal proceedings;
• To protect our legal rights; or
• In connection with the sale of the business.

We are not responsible for the privacy practices of external websites
linked from our Site.

Data Retention

Personal data is stored only as long as necessary to fulfil the purpose
for which it was collected. You will be notified if your data is retained longer.

Data Security

We use strong browser encryption and store data on secure servers.
While we take reasonable precautions, no internet transmission is entirely secure,
and we cannot guarantee absolute security.

Your Rights Under GDPR

• Right to be informed
• Right of access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to data portability
• Right to object

Children

We do not knowingly collect personal data from children under 16.
If we become aware that such data has been collected, it will be deleted promptly.
Parents or guardians may contact us using the details above.

Accessing or Modifying Your Data

To access, modify, delete, or challenge the data we hold about you,
please contact:

Cookie Policy

A cookie is a small file stored on your device to collect browsing data.
You may disable cookies in your browser settings, though this may affect
site functionality.

Types of Cookies We Use

• Functional Cookies: Used to remember your preferences
  and selections for future visits.

Modifications

We may update this Privacy Policy to remain compliant with the law or reflect
changes in our practices. The Effective Date will be updated accordingly.

Complaints

If you have concerns about how we process your data, please contact us first.
You may also lodge a complaint with the Information Commissioner’s Office (ICO).

Contact Information