Wide Mouthed Frog

Privacy Policy and Cookie Statement – Dunstaffnage Marina Limited

Dunstaffnage Marina Limited owns and operates Dunstaffnage Marina and the Wide Mouthed Frog.

We are committed to ensuring that our customers, our suppliers and our employees privacy is protected. Should we ask you to provide information by which you can be identified when using this website, or by other means, you can be assured that it will only be used in accordance with this privacy policy, the Data Protection Act 2018 and UK General Data Protection Regulation (UK GDPR).

Unless we are negligent in exercising our responsibilities then we shall not be held liable for unauthorised access to information supplied by you.

We may occasionally change this policy by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

  1. What information do we collect and how do we use it?

Website Users’ Data 

We do not collect any unique information about you via our website – such as your name, email address, contact details, etc.  Our web site is purely to provide information.  We do not use cookies to collect personal data.  See information on cookies below.

1.1         Our Clients’, Business Contacts’ & Suppliers’ Data 

What information we collect, use and why

Our policy is to ask for, or collect and store only the business and personal data necessary for conducting our business and for relevant record keeping.

We collect or use the following information to provide services and goods, and to operate customer accounts:

  • Names and contact details (eg name, address, telephone numbers, email addresses)
  • Purchase or account history
  • Payment details (including card or bank information for transfers and direct debits)
  • Health information (including dietary requirements, allergies and health conditions)
  • Health and Safety information
  • Account information
  • Purchase history
  • Website user information (eg user journeys and cookie tracking)
  • Photos or video recordings
  • Records of meetings and decisions
  • Identification documents
  • Information relating to compliments or complaints

We retain this information for the operation of customers, business contacts and supplier accounts.

The information we hold about you will not be shared with any other entity or organisation, (without your explicit consent) unless we are required to do so by law, except for our service providers who operate elements of our service and process data on our behalf – such as our IT suppliers and our accountants.

We also collect or use the following information to comply with legal requirements:

  • Names and contact details (eg name, address, telephone numbers, email addresses)
  • Identification documents
  • Financial transaction information
  • Health and safety information

1.2         Our Employees Data

We collect or use the following information for recruitment purposes:

  • Contact details (eg name, address, telephone numbers, personal email address)
  • Date of birth
  • National insurance number
  • Copies of passports or other photo ID
  • Employment history (eg job application, employment references)
  • Education history (eg qualifications)
  • Right to work information

We retain this information for the duration of your employment, and also

  • Health and Safety records
  • Training records
  • Absence records
  • Any other records required to comply with our legal obligations.

1.3         Dealing with queries, complaints or claims

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Payment details
  • Account information
  • Purchase or service history
  • Video recordings of public areas
  • Dashcam footage – outside vehicle
  • Relevant information from previous investigations
  • Customer or client accounts and records
  • Financial transaction information
  • Information relating to health and safety
  • Correspondence

1.4         Updating or Deleting Your Information

You have the right to access any of the information held about you and can request this using the contact details below.  Any personal data we hold on you will be updated upon request and any inaccurate or misleading data held will be changed or deleted upon your request.

We cannot delete your data until our obligations under any legal requirements are satisfied eg we will hold details of invoices and services provided for such period as HMRC may require from time to time.

2. Lawful bases and data protection rights

Under UK GDPR we must have a “lawful basis” for collecting and using your personal information.  There is a list of possible lawful bases in the UK GDPR.  Which lawful basis we rely on may affect your data protection rights which are set out in brief below.  You can find out more about your data protection rights and the exemptions which may apply on the ICO’s web site.

  • Your right of access – You have the right to ask us for copies of your personal information.  You can request other information such as details about where we get personal information from and who we share personal information with.  There are some exemptions which means your may not receive all the information you ask for.
  • Your right to rectification – You have the right to ask us to correct or delete personal information you think is inaccurate or incomplete.
  • Your right to erasure – You have the right to ask us to delete your personal information.
  • Your right to restriction of processing – You have the right to object to the processing of your personal data.
  • Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you. 
  • Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent at any time.

You can read more about these rights at www.ico.org.uk

If you make a request we must respond to you without undue delay and in any event within one month.

To make a data protection request please contact us using the contact information provided at the end of this policy.

2.1         Our lawful bases

for collecting or using personal information to provide goods and services are:

  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you.  All if your data protection rights may apply except the right to object.
  • Legal obligation – we have to collect or use your information so we can comply with the law.  All of your data protection rights may apply, except the right to erasure, the right to object and the right to data portability.

for collecting or using personal information for the operation of customer accounts, supplier accounts and any guarantees are:

  • Contract – as above
  • Legal obligation – as above

for collecting or using personal information for legal requirements are:

  • Contract – as above
  • Legitimate interests – We’re collecting or using information because it benefits you, our organisation or someone else, without causing undue risk or harm to anyone.  All your data protection rights may apply, except the right to portability.  Our legitimate interests are:
    • We hold health and safety data to comply with our legal requirements.
  • Legal obligation – as above

for collecting or using personal information for recruitment purposes are:

  • Contract – as above
  • Legitimate interests – We’re collecting or using information because it benefits you, our organisation or someone else, without causing undue risk or harm to anyone. All your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • We hold next of kin details for employees during their employment.
  • Legal obligation – as above
  • Vital obligation  – We’re collecting or using information needed when someone’s physical or mental health and well being is at urgent or serious risk.  All your data protection rights may apply, except the right to object and the right to portability.  Vital obligation might arise eg if we had to provide emergency services with information about you.

for collecting or using personal information for dealing with queries, complaints or claims are:

  • Contract – as above
  • Legal obligation – as above

3. Where we get personal information from

  1. Directly from you
  2. Schools, colleges, universities or other education organisations
  3. Publicly available sources
  4. Previous employers
  5. Suppliers and service providers

4. How long we keep information

For those for whom we provide goods and services, and for the operation of customer and supplier accounts

  • For the duration of your contract with the Marina and a further period of six years or as prescribed by the Limitation Act 1980 or equivalent legislation in place from time to time
  • For invoicing and financial data – for six years or for such period as required by HMRC from time to time

For our employees

  • For the duration of your contract with the Marina and a further six months
  • For payroll and financial data – for the period required by HMRC from time to time

5. Who we share information with

Data Processors

Hubdoc Inc – this data processor does the following activities for us:  Manages data storage for Accounts;

MacIntyre Hudson LLP – this data processor does the following activities for us:  Process our payroll;

Oban Computer Services – this data processor does the following activities for us:  Manages the Company’s IT systems;

Xero (UK) Limited – this data processor does the following activities for us:  Accounts.

Others we share personal information with

Professional and legal advisors as necessary.

6. Cookies

Cookies are solely used for the purpose of functionality for the website.  The cookies we use do not collect any personal information about you or data that can be used to identify you.  Any information is collected anonymously and is not sold to any third parties.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages are frequently used and which you do not use.

To find out more about cookies, visit www.allaboutcookies.org

Links to other sites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we cannot be responsible for the protection and privacy of any information which you provide whilst visiting other sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

7. Who can I ask if I have additional questions about Dunstaffnage Marina’s Privacy Policy?

We will answer any additional Privacy related questions you may have raised by:

Post to:

The Manager

Dunstaffnage Marina

Dunbeg

OBAN

Argyll

PA37 1PX

Telephone: 01631 566555

Emailing:  manager@dunstaffnagemarina.co.uk. 

8. How to Complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details above. 

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire SK9 5AF

Helpline No: 0303 123 1113

Website:  https://www.ico.org.uk/make-a-complaint

Last updated

June 2025