Data controller
The data controller for personal data processed through this site is Caravan Guide.
Postal address: Caravan Guide.
Contact details are published in the site footer and company settings where available.
What data we collect
- Account and profile: email address, password (stored hashed), and business or contact details you provide at registration or in your account.
- Billing and subscriptions: plan, subscription status, and payment-related identifiers. Card details are processed by our payment provider (Stripe); we do not store full card numbers on our servers.
- Usage of the guide: when you are signed in, searches may be logged to operate the service and analytics (for example in
guide_search_log). - Support: messages and attachments you send through support tickets or email.
- Referrals: if you use referral links we may record link usage and rewards in our database. With optional cookies we also store a referral code in a cookie; otherwise the code may be passed in the registration URL and held in your session briefly to apply a discount at sign-up.
- Security and abuse prevention: IP addresses or identifiers may be used for rate limiting, audit logs, and protecting accounts.
- Technical logs: standard server and application logs may include IP address, user agent, timestamps, and requested URLs.
Why we use your data (legal bases)
Under UK GDPR we rely on one or more of the following, depending on the activity:
- Contract, to provide the service you signed up for, process payments, and manage your subscription.
- Legitimate interests, to secure the site, prevent fraud and abuse, improve the product, analyse aggregated usage, and handle referrals in line with our programme rules.
- Legal obligation, where we must retain or disclose information for tax, accounting, or law enforcement requests.
- Consent, where required (for example optional cookies via our cookie banner, or marketing communications if we ask separately).
Sharing and processors
We use trusted service providers who process data on our instructions, including:
- Stripe for payments and related tax or invoicing data.
- Email delivery providers to send transactional messages (such as verification and receipts).
- Hosting and infrastructure providers that store and transmit data.
Public pages may load resources from third-party CDNs (for example Google Fonts, Tailwind); those providers may process technical data under their own terms.
International transfers
Some processors may be located outside the UK. Where we transfer personal data, we aim to use appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or other mechanisms recognised under UK law.
Retention
We keep data only as long as needed for the purposes above: for example for the life of your account and a reasonable period afterwards for legal, tax, and dispute resolution. Logs and analytics may be retained for shorter operational periods. Specific retention may vary by data type and obligation.
Your rights
Under UK data protection law you have rights including access, rectification, erasure, restriction of processing, objection to certain processing, and data portability where applicable. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. If you are not satisfied with how we handle your personal data, you may complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.
To exercise your rights, contact us using the details above. We may need to verify your identity before responding.
Children
The service is not directed at children. We do not knowingly collect personal data from children without appropriate consent.
Automated decisions
We do not use solely automated decision-making that produces legal or similarly significant effects on you in the sense of UK GDPR Article 22 for general account access. Valuation outputs are informational tools and not a substitute for professional advice.
Changes
We may update this policy from time to time. The “Last updated” date will change when we do. Material changes may be communicated by email or a notice on the site where appropriate.
Governing law
UK data protection law applies to our processing of your personal data in the UK. Any other contractual terms between you and us may specify the courts and laws that apply to those terms.