1. Introduction

This Privacy Policy explains how Aberdunant Hall Holiday Park ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website or use our services. We are committed to protecting your privacy and ensuring the security of your personal data.

Company Information: Y Bistro and ybistro.co.uk are trading styles of Portmadoc Holiday Camp Limited trading as Aberdunant Hall Holiday Park.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, postal address, and other contact details when you make enquiries or bookings
• Booking Information: Reservation details, dietary requirements, and special requests
• Website Usage Data: IP address, browser type, pages visited, and time spent on our website
• Communication Records: Correspondence with us via email, phone, or contact forms

3. How We Use Your Information

We use your personal information for the following purposes:

• Processing and managing your reservations and bookings
• Responding to your enquiries and providing customer service
• Sending you important information about your bookings or our services
• Improving our website and services
• Complying with legal obligations
• Marketing communications (only with your consent)

4. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To fulfil our obligations under any contract with you
• Legitimate Interests: To improve our services and website functionality
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws and regulations

5. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist us in operating our website and business (under strict confidentiality agreements)
• When required by law or to protect our rights and safety
• In connection with a business transfer or merger
• With your explicit consent

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. When we no longer need your information, we will securely delete or anonymise it.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct any inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Rights Related to Automated Decision Making: Not to be subject to automated decision-making

9. Cookies and Tracking

Our website uses cookies to enhance your browsing experience and analyse website traffic. You can control cookie settings through your browser preferences. For more detailed information about our use of cookies, please refer to our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. International Data Transfers

If we transfer your personal data outside the UK or EEA, we will ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website with a new effective date.

14. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Aberdunant Hall Holiday Park
Prenteg, Porthmadog
Gwynedd, LL49 9SR
Email: hello@ybistro.co.uk
Phone: 01766 512001

Data Protection Officer:
If you have concerns about how we handle your personal data, you can also contact the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Last updated: October 2025