Last updated: 31 March 2026
At Wales Tourists Online, we take your privacy seriously. This notice explains what personal information we collect when you use our website, submit an enquiry, create an account, or contact a property owner through our platform, how we use it, and your rights under UK data protection law. This is the kind of information organisations are expected to provide under the UK GDPR “right to be informed”.
Who we are
Wales Tourists Online is a website that helps users find holiday accommodation in Wales and contact property owners or managers directly.
Data Controller: Wales Tourists Online
Website: https://www.walestouristsonline.co.uk/
Email: mail@walestouristsonline.co.uk
Postal address: Y Bedol Gaerwen Anglesey
Telephone: 01248 422364
If you have any questions about this notice or how we use your data, please contact us using the details above.
What information we collect
Depending on how you use the site, we may collect:
- your name
- your email address
- your telephone number
- the details of your enquiry or message
- travel or booking-related details you choose to provide, such as dates, guest numbers, property preferences, or special requests
- account registration details if you create an account
- technical website data such as IP address, browser/device information, and cookie-related information where applicable
Privacy notices should explain what personal data is collected and how it is used, and they should do so clearly.
How we use your information
We use your personal data to:
- process and send your enquiry to the relevant property owner, manager, or accommodation provider
- respond to your message or support request
- help property owners reply to your enquiry
- manage user accounts and website functionality
- keep our website secure and help prevent spam, misuse, or fraud
- maintain internal records relating to enquiries and site administration
- send marketing communications only where you have clearly opted in, or where another lawful basis applies
Under the UK GDPR, organisations must identify a lawful basis for each processing purpose before using personal data.
Our lawful bases for processing
We rely on the following lawful bases under the UK GDPR:
1. Contract / taking steps before a contract
When you submit an enquiry about accommodation, we use your details to help you contact the relevant owner or manager and to take steps you have asked us to take before any booking arrangement may be made.
2. Legitimate interests
We may process certain information where it is necessary for our legitimate interests, including operating and improving the website, administering enquiries, keeping records, preventing abuse, and maintaining website security, provided those interests do not override your rights and freedoms.
3. Consent
Where required, we rely on your consent for things like optional marketing emails, SMS messages, or non-essential cookies. You can withdraw consent at any time. ICO guidance distinguishes consent requests from general privacy information and expects consent to be clear and manageable.
Who we share your information with
When you send an enquiry through our site, we may share the personal information you provide with the relevant property owner, manager, or accommodation provider so they can respond directly to you. We may also share data with trusted service providers who help us operate the website, such as hosting, form handling, spam protection, email, analytics, or technical support providers, where appropriate.
If we are required to do so by law, we may also disclose information to legal, regulatory, or law enforcement bodies.
ICO guidance says organisations must identify a lawful basis before sharing personal data and be transparent about this sharing.
Important note about property owners and managers
Once your enquiry has been passed to a property owner, manager, or accommodation provider, they may process your information as a separate controller for the purpose of responding to your enquiry or managing any booking discussions. You should review their own privacy information where available.
How long we keep your information
We only keep personal data for as long as necessary for the purpose it was collected, including to deal with enquiries, keep appropriate business records, resolve disputes, and meet legal, accounting, or security obligations.
ICO guidance says if you do not give a fixed retention period, you should explain the criteria you use to decide how long information is kept.
You can make this stronger by replacing the paragraph above with actual retention periods, for example:
- enquiry form submissions: 12 months
- customer service messages: 12–24 months
- registered account data: for as long as the account remains active, then deleted after [x period] unless needed for legal reasons
- marketing preferences: until consent is withdrawn or reviewed
Your data protection rights
Under UK data protection law, you have rights that may include:
- the right to be informed
- the right to access your personal data
- the right to have inaccurate data corrected
- the right to have data erased in certain circumstances
- the right to restrict processing in certain circumstances
- the right to object to processing in certain circumstances
- the right to data portability in certain circumstances
- rights relating to consent, including the right to withdraw consent where consent is the lawful basis
These rights are set out in UK data protection guidance and government guidance.
To exercise any of your rights, please contact us at mail@walestouristsonline.co.uk.
Complaints
If you are unhappy with how we use your personal data, please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection matters. ICO guidance says privacy notices should tell people how they can complain if they have concerns.
Cookies and similar technologies
Our website may use cookies or similar technologies. Some cookies may be essential for the website to function, while others may be used for analytics, preferences, or other non-essential purposes.
ICO guidance says users must be told about cookies and, for non-essential cookies, consent must be actively and clearly given.
You should make sure your cookie banner and cookie policy are separate and correctly set up, especially if the site uses analytics, advertising, or third-party tracking.
Marketing communications
We will only send you marketing emails, newsletters, or promotional messages where you have specifically agreed to receive them, or where we are otherwise legally permitted to do so. You can unsubscribe or withdraw your consent at any time.
The ICO’s PECR guidance says unsolicited marketing by email, text, or similar electronic means often requires specific consent, especially for individuals.
Changes to this privacy notice
We may update this notice from time to time to reflect changes to our website, services, or legal obligations. The latest version will always be posted on this page.
