Privacy Policy for Florida Delight Bookings

Last Updated: 15 July 2025

1. Introduction

Welcome to Florida Delight Bookings, operated by Richard Marsh, a sole trader. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you inquire about, book, or stay at our villa, and when you interact with our website or services.

We are registered with the Information Commissioner’s Office (ICO) as a data controller. Our registration is currently pending/applied for. We will update this policy with our ICO registration number once received.

2. Who We Are (Data Controller)

  • Name: Richard Marsh, trading as Florida Delight Bookings
  • Address: Florida Delight, 548, Orange Cosmos Boulevard, Watersong, Davenport, Florida FL 33837
  • Email for Privacy Queries: richard.marsh@watersongvillarental.co.uk

3. What Information We Collect

We collect various types of personal data to provide our villa rental services.

a. Information You Provide Directly to Us:

  • Booking & Contact Details: When you make an inquiry or booking, we collect your full name, email address, telephone number, and postal address (for the lead guest). We also collect the full names of all other guests in your party and the total number of individuals in your group via our guest request form.
  • Identity Verification: To confirm identity and for security purposes, we request a picture of the lead guest’s driving license. This image is used solely for identity verification related to your booking.
  • Payment Information: When you make a payment, we collect transaction details (e.g., amount, booking dates).
    • Direct Bank Transfers: If you choose to pay via direct bank transfer, we will receive your account name, sort code, and account number to identify and reconcile your payment with your booking.
  • Children’s Data: For family bookings, we collect the number of children in your party and their ages, as provided by parents or guardians. Please note that children’s names are not stored on our core booking records or systems after the initial booking process.
  • Correspondence: Any information you provide in emails, phone calls, or other communications with us (e.g., special requests, dietary needs).

b. Information Collected Automatically (via Website and Third Parties):

  • Website Analytics (Potential Future Use of Google Analytics): We may use various analytics tools to help us understand how visitors interact with our website. This information allows us to improve the functionality, performance, and content of our site, ultimately enhancing your user experience. When we implement such tools, they typically collect information about your Browse activity, such as pages viewed, time spent on pages, referring websites, device information (e.g., browser type, operating system), and IP address (which may be anonymised where possible). This data is generally collected using cookies and similar tracking technologies. We will always strive to anonymise or pseudonymise data where feasible. We will update this Privacy Policy with more specific details about the analytics providers we use, the types of data collected, and how you can manage your preferences (including opting out) once these tools are actively implemented on our website.
  • Marketing and Advertising (Facebook Pixel): We use the Facebook Pixel on our website to understand how users interact with our content and to improve the effectiveness of our advertising campaigns. This pixel allows us to measure conversions from Facebook ads, optimize ads based on collected data, build targeted audiences, and remarket to individuals who have interacted with our website. We may also use Facebook Advanced Matching functionality, which involves sending hashed (pseudonymised) customer data (e.g., email addresses or phone numbers) to Facebook to improve advertising precision. This data is transmitted securely and is immediately hashed before being sent to Facebook. The information collected may include your IP address, device information, Browse activity on our website, and hashed identifiers.
  • Basic Server Logs: Our website hosting provider automatically collects standard server log information, which may include your IP address, browser type, pages visited, and timestamps for security and diagnostic purposes.

c. Information from Third Parties:

  • Watersong Gate Management: To facilitate your access to the Watersong community, we provide the Watersong gate management entry system with the names of all adult guests in your party. Upon arrival, the gate management may require a swipe of a driver’s license from one or more adult guests to confirm identity before issuing a parking permit. This is a requirement of the Watersong community for security and access control. We do not control how the Watersong gate management processes or retains this data beyond their immediate access requirements.

4. How We Use Your Information (Purposes of Processing)

We use your personal data for the following purposes and on the following legal bases:

  • To Perform Our Contract with You (Legal Basis: Performance of a Contract):
    • To process your booking, manage your reservation, and facilitate your stay at the villa.
    • To process your payments and send booking confirmations and payment receipts.
    • To provide keyless entry codes and manage access to the villa.
    • To provide your adult guest names to Watersong gate management for community access.
    • To communicate with you about your booking, important updates, and pre/post-stay information.
  • For Our Legitimate Interests (Legal Basis: Legitimate Interests):
    • To verify the identity of the lead guest using a driving license picture for security and fraud prevention.
    • To maintain records for dispute resolution or to defend legal claims.
    • To analyse website usage (if analytics are enabled) to improve our website’s functionality and user experience.
    • To improve our services and tailor our villa offering.
    • To send targeted offers or information about our villa to existing customers for a limited period after their stay (you can always opt-out).
  • To Comply with Legal Obligations (Legal Basis: Compliance with a Legal Obligation):
    • To maintain financial and booking records for tax and accounting purposes (e.g., HMRC requirements).
    • To comply with health and safety regulations or other statutory requirements.
    • To respond to lawful requests from public authorities or law enforcement.
  • With Your Consent (Legal Basis: Consent):
    • To set marketing cookies (such as the Facebook Pixel) on your device for targeted advertising and audience building. You can manage your cookie preferences via our cookie consent banner.
    • For direct marketing communications (e.g., newsletters or special offers) if you are not an existing customer, where we have obtained your explicit consent. You have the right to withdraw this consent at any time.

5. Sharing Your Information (Third Parties)

We may share your personal data with the following categories of third parties, where necessary and with appropriate safeguards:

  • Payment Processors:
    • Stripe: We use Stripe to process secure online payments. Your payment card details are collected and processed directly by Stripe, not by us. You can review Stripe’s Privacy Policy here: https://stripe.com/privacy
    • PayPal: We use PayPal for secure online payments. Your payment details are collected and processed directly by PayPal, not by us. You can review PayPal’s Privacy Statement here: https://www.paypal.com/uk/legalhub/paypal/privacy-full
  • Villa Access Providers:
    • Keyless Entry System: [If your keyless entry system is managed by a third-party company, name them here. Otherwise, state “Managed internally.”] Your surname and entry code are processed to facilitate villa access.
    • Watersong Gate Management: We share adult guest names with the Watersong gate management entry system for community access and parking permit issuance.
  • Website & IT Service Providers: Our website hosting provider and other IT service providers who help us operate our website and manage our booking systems may process your data on our behalf.
  • Marketing and Analytics Providers:
    • Meta Platforms (Facebook): We share hashed customer data and website activity data with Meta Platforms for Facebook Pixel advertising and analytics, based on your consent.
    • Google (Potential Google Analytics): If implemented, Google will process website usage data on our behalf.
  • Professional Advisors: Such as accountants, legal advisors, and consultants, where necessary for their professional services.
  • Law Enforcement & Regulators: If required by law, court order, or governmental request.

We ensure that all third parties we share data with are compliant with data protection laws and have appropriate safeguards in place.

6. International Data Transfers

Some of the third parties we use (e.g., Stripe, PayPal, Meta, Google) may store or process your personal data outside the UK/European Economic Area (EEA). Whenever your personal data is transferred outside the UK/EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • The transfer is to a country that has been deemed to provide an adequate level of protection for personal data by the UK government or European Commission.
  • We use specific contracts approved for use in the UK/EEA which give personal data the same protection it has in the UK/EEA (e.g., Standard Contractual Clauses (SCCs) and the UK Addendum).
  • Where personal data is transferred to the USA, we ensure the recipient is part of the Data Privacy Framework (if applicable and valid).

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Booking Records (Financial & Legal): We are legally required to retain certain financial and booking records for a period of 6 years plus the current tax year in the UK for tax and auditing purposes.
  • Booking History (Repeat Guests & Offers): We may retain your telephone and email booking records for a period of up to 3 years after your last stay to facilitate repeat bookings and to inform you of targeted offers or updates about our villa that we believe may be of interest to you, based on our legitimate interests. After this period, or if you request deletion, this data will be securely deleted or anonymised, unless we have an ongoing legal obligation to retain it.
  • Keyless Entry Codes: The link between your surname and your entry code for the villa is automatically removed from the system following your departure.
  • Children’s Names: Children’s names, while provided for booking purposes, are not stored on our core booking records.
  • Driving License Pictures: Images of driving licenses are securely deleted after identity verification for your booking is complete, or within a very short, defined period necessary for administrative purposes related to your stay (e.g., 7 days post-departure), unless there is an ongoing legal requirement to retain them.
  • Communication Records: Email and phone correspondence related to your booking will be retained for the duration of your booking and for a reasonable period thereafter to manage any post-stay queries or resolve disputes.

8. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal data we process. However, please remember that we cannot guarantee that the internet itself is 100% secure. While we do our best to protect your personal data, transmission of personal data to and from our website is at your own risk.

We rely on highly secure third-party payment processors (Stripe, PayPal) to handle sensitive payment card data, ensuring we do not directly store your full credit card information.

9. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • The Right to be Informed: To be informed about how your personal data is collected and used (which this Privacy Policy aims to do).
  • The Right of Access: To request a copy of the personal data we hold about you.
  • The Right to Rectification: To request that inaccurate personal data we hold about you is corrected or completed.
  • The Right to Erasure (the “Right to be Forgotten”): To request that we delete your personal data in certain circumstances (e.g., when it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing).
  • The Right to Restrict Processing: To request that we limit the way we use your personal data in certain circumstances (e.g., if you contest its accuracy).
  • The Right to Data Portability: To request that we transfer the personal data you have provided to us to another organisation, or to you, in a structured, commonly used, machine-readable format.
  • The Right to Object: To object to our processing of your personal data where we are relying on legitimate interests as our legal basis, or for direct marketing purposes.
  • Rights in Relation to Automated Decision-Making and Profiling: We do not engage in automated decision-making or profiling that would have a significant legal effect on you.
  • The Right to Withdraw Consent: Where we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time.

10. How to Exercise Your Rights

If you wish to exercise any of the rights listed above, please contact us by email at richard.marsh@watersongvillarental.co.uk

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.

We will respond to all legitimate requests within one month. Occasionally, it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

11. How to Complain

If you have any concerns about our use of your personal data, please contact us at richard.marsh@watersongvillarental.co.uk in the first instance so we can try to resolve it for you.

You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. You can find their contact details and information on how to complain on their website: https://ico.org.uk/make-a-complaint/

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make. We will post the updated version on our website with a revised “Last Updated” date.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Richard Marsh

Florida Delight, 548, Orange Cosmos Boulevard, Watersong, Davenport, Florida FL 33837

Email: richard.marsh@watersongvillarental.co.uk