Last updated: 10 September 2026

1. About this policy

This privacy policy explains how Chalet Collection Ski Hire (“we”, “us” or “our”) collects, uses and protects personal data when you visit our website, contact us, or hire ski equipment from us.

We process personal data in accordance with the UK GDPR, the Data Protection Act 2018 and applicable electronic-marketing and cookie rules.

2. Who we are

Controller: Chalet Collection Ski Hire
Address: 3 Chapel Road, Llanharan, Pontyclun, Wales, CF72 9QA
Email: Contact us on our contact form

If you have questions about this policy or how we use your data, please contact us using the details above.

3. Personal data we collect

Depending on how you interact with us, we may collect:

• your name and contact details;
• booking, hire and payment information;
• delivery, collection and accommodation details;
• information about equipment requirements, including height, weight, shoe size, ability and preferred equipment;
• correspondence and customer-service information;
• marketing preferences;
• technical information, such as IP address, browser type, device information and website-usage data; and
• information contained in cookies or similar technologies.

Please do not provide health information unless it is necessary for a specific request or service. If we need to process special category data, we will identify an additional legal condition and apply appropriate safeguards.

4. How we obtain personal data

We obtain personal data:

• directly from you when you make an enquiry, booking or payment;
• when you communicate with us by telephone, email, social media or through our website;
• from the person who makes a booking on behalf of other members of a group;
• from service providers involved in fulfilling your booking; and
• automatically through cookies and similar technologies.

If you provide information about another person, you must ensure that you are authorised to do so and that they have been informed about this policy.

5. How we use personal data

We may use personal data to:

• respond to enquiries;
• provide quotations and process bookings;
• provide, deliver, collect and manage hired equipment;
• process payments and prevent fraud;
• communicate with you about your booking or account;
• provide customer support and handle complaints;
• maintain business, financial and accounting records;
• improve our website, services and customer experience;
• keep our website and systems secure;
• comply with legal and regulatory obligations; and
• send marketing communications where permitted by law.

We will not use your personal data for a new, incompatible purpose without first providing relevant information, unless an applicable legal exception applies.

6. Our legal bases

We rely on one or more of the following legal bases:

Purpose	Legal basis
Managing enquiries and bookings	Necessary for entering into or performing a contract
Processing payments and maintaining records	Contract and legal obligation
Preventing fraud and protecting our business	Legitimate interests
Website security and service improvement	Legitimate interests
Sending direct marketing	Consent or legitimate interests, where permitted
Processing information required by law	Legal obligation
Processing special category data, where necessary	An Article 6 legal basis and an applicable Article 9 condition

We document the legal basis relied upon for each processing purpose.

7. Sharing personal data

We may share personal data with:

• payment processors and financial institutions;
• booking, reservation and customer-management providers;
• website hosting, analytics, email and IT-support providers;
• delivery, transport or local operational providers;
• professional advisers, insurers and auditors;
• law-enforcement or regulatory authorities where required; and
• a purchaser or prospective purchaser of our business.

Service providers may process personal data only on our instructions and subject to appropriate contractual and security arrangements.

8. International transfers

Some suppliers may process personal data outside the United Kingdom. Where this occurs, we will use a lawful transfer mechanism and appropriate safeguards required by applicable data-protection law, and provide information about those safeguards where required.

9. Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to:

• provide our services;
• maintain business and financial records;
• resolve disputes;
• enforce agreements; and
• comply with legal, tax, accounting or regulatory obligations.

Our retention periods are reviewed periodically. When personal data is no longer required, we securely delete or anonymise it.

10. Cookies

Our website may use cookies and similar technologies for:

• essential website functionality;
• remembering preferences;
• measuring website performance; and
• analytics or marketing, where permitted.

Where required, we will obtain consent before storing or accessing non-essential information on your device. You can manage cookie preferences through our cookie banner or your browser settings. Refusing non-essential cookies should not prevent access to essential website functions.

Cookie use does not replace our obligations under data-protection law.

11. Marketing

We may send you service-related communications that are necessary to administer your booking.

We will send promotional communications only where we have a lawful basis to do so. You can unsubscribe at any time by using the unsubscribe link in the communication or contacting us. You have an absolute right to object to the use of your personal data for direct marketing.

12. Your rights

Subject to legal exceptions, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent where processing relies on consent; and
• complain to the Information Commissioner.

To exercise a right, contact us at [insert privacy email address]. We may need to verify your identity. We will generally respond within one month, although that period may be extended where legally permitted.

You may complain to the Information Commissioner’s Office at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: https://ico.org.uk

13. Automated decision-making

We do not currently make decisions producing legal or similarly significant effects based solely on automated processing. If this changes, we will provide the information and safeguards required by law.

14. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

15. Children

Our website is not directed at children. We do not knowingly collect children’s personal data except where it is provided by a parent, guardian or booking organiser in connection with a ski-hire booking.

16. Third-party websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices. You should review their privacy policies before providing personal data.

17. Changes to this policy

We may update this policy from time to time. The current version will be published on this page with its effective date. We will bring material changes to your attention where required.

Sources

Regulation (EU) 2016/679 as retained in UK law (UK GDPR), arts 5, 13 and 14 Data Protection Act 2018 Information Commissioner’s Office, ‘Special category data’ Information Commissioner’s Office, ‘A guide to lawful basis’ Privacy and Electronic Communications (EC Directive) Regulations 2003, SI 2003/2426, regs 4 and 6