Last updated: 18 January 2026 Tywyn Holidays (Sim IT Ltd) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with UK GDPR.
1. Who We Are Tywyn Holidays is operated by Sim IT Ltd. We manage holiday accommodation including: Four Degrees West Beach House Venedotia Beach House If you have any questions about this policy, you can contact us using the details on our website.
2. What Personal Data We Collect We may collect and process the following information: Name Email address Telephone number Postal address Booking details and stay information Payment confirmation details (we do not store full card details) Communications with us IP address and website usage data
3. How We Collect Your Data We collect data when you: Complete a booking or enquiry form Make a payment or reservation Contact us by email, phone, or website Use our website (via cookies and analytics)
4. Why We Use Your Data We use your data to: Process and manage bookings Communicate with you about your stay Take and confirm payments Comply with legal obligations Improve our services and website Prevent fraud and misuse We only process your data where we have a lawful basis to do so.
5. Legal Basis for Processing We process your data under: Contractual necessity (to manage your booking) Legal obligation Legitimate business interests Consent (where applicable)
6. Who We Share Your Data With Your data may be shared with: Payment providers (e.g. Stripe, banks) Booking and channel management systems (e.g. Beds24) IT, hosting, and email providers Legal or regulatory authorities if required We never sell your personal data.
7. How Long We Keep Your Data We retain your data only for as long as necessary to: Fulfil bookings Meet legal and accounting obligations Resolve disputes After this period, data is securely deleted or anonymised.
8. Data Security We take appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access.
9. Cookies Our website uses cookies to: Improve website functionality Analyse visitor behaviour Remember user preferences You can control cookies through your browser settings.
10. Your Rights Under UK GDPR, you have the right to: Access your personal data Correct inaccurate data Request deletion Restrict processing Object to processing Request data portability Withdraw consent You can exercise these rights by contacting us.
11. Third-Party Links Our website may contain links to third-party websites. We are not responsible for their privacy practices.
12. Children’s Data We do not knowingly collect data from children under 16.
13. Complaints If you believe your data has been mishandled, you may contact the UK Information Commissioner’s Office (ICO).
14. Changes to This Policy We may update this Privacy Policy from time to time. The latest version will always be published on our website.
