Privacy Policy

Last updated: 11 September 2026

Who We Are – Brighouse Bay & Gillespie Leisure

This website, brighousebayholidaypark.co.uk, is operated by Gillespie Leisure Limited, trading as Brighouse Bay Holiday Park (referred to in this policy as “we”, “us” or “our”).

We are the data controller responsible for your personal data. Our details are:
Gillespie Leisure Limited, trading as Brighouse Bay Holiday Park Borgue, Kirkcudbright, DG6 4TS Telephone: 01557 870 267 Email: info@gillespie-leisure.co.uk

Gillespie Leisure Limited is authorised and regulated by the Financial Conduct Authority (FRN 756263). We are a credit broker, not a lender.
This policy explains what personal data we collect, how we use it, who we share it with, and the rights you have under UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Personal Data We Collect and Why
We collect personal data when you interact with us. The information we collect depends on how you use our website and services.

Enquiries and contact forms
When you submit an enquiry, contact form, brochure request or ownership enquiry, we collect the details you provide, such as your name, email address, telephone number and the content of your message. We use this information to respond to you and to provide the information or service you have asked for.

Bookings
When you book a holiday or a stay with us, we collect the information needed to process and manage your booking, such as your name, contact details, address, party details and payment information. Bookings made through our online booking system are handled by our booking provider on our behalf. We use this information to fulfil your booking, manage your stay and meet our legal and accounting obligations.

Holiday home ownership enquiries
If you enquire about buying a holiday home or lodge, we collect the details you provide so we can respond, arrange viewings and, where relevant, discuss finance options. Where finance is involved, additional information may be required and further privacy information will be provided at that stage.

Newsletter and marketing sign-ups
If you sign up to receive news, offers and updates from us, we collect your name and contact details (such as email address and mobile telephone number) so we can send you marketing communications. See the Marketing and Advertising section below for full details.

Website usage and technical data
When you visit our website, we automatically collect certain technical information, including your IP address, browser type and version, device type, operating system, the pages you view, the time and date of your visit, and the website you came from. We use this to keep our website secure, to understand how it is used, and to improve it.

Comments and user content
If you leave a comment or upload content to our website, we collect the information shown in the relevant form, along with your IP address and browser information, to help detect spam and misuse. If you upload images, please avoid uploading images that contain embedded location data (EXIF GPS), as visitors may be able to download and extract that data.

Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing your personal data. We rely on the following:
• Consent: where you have given us clear consent, for example to send you marketing by email or SMS, or to place non-essential cookies and advertising tags. You can withdraw consent at any time.
• Contract: where processing is necessary to take steps at your request before entering a contract, or to perform a contract with you, for example to manage your booking or holiday home purchase.
• Legitimate interests: where processing is necessary for our legitimate business interests, such as responding to enquiries, running and improving our website, keeping our systems secure, and marketing our products and services to existing customers, provided your rights do not override those interests.
• Legal obligation: where we need to process your data to comply with the law, for example for accounting, tax or regulatory purposes.

Cookies
Our website uses cookies and similar technologies. Cookies are small text files placed on your device that help the website function, remember your preferences and understand how the site is used.
We use the following broad categories of cookie:
• Essential cookies, which are needed for the website to work and cannot be switched off.
• Analytics cookies, which help us understand how visitors use our site.
• Advertising and targeting cookies, which are used to deliver relevant advertising and measure campaign performance.
Non-essential cookies are only placed with your consent. You can manage your preferences through our cookie banner and change them at any time. You can also control or delete cookies through your browser settings. Blocking some cookies may affect how the website works.

Analytics and Website Performance
We use Google Analytics to understand how visitors interact with our website, such as which pages are viewed, how long visitors stay and how they arrived at our site. This helps us improve our website and services.
Google Analytics may collect information including your IP address (in anonymised form where available), browser type and version, device type and operating system, pages visited and time spent on them, referring website addresses, and approximate geographic location at country or city level.
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout. For information on how Google handles data, see https://policies.google.com/technologies/partner-sites.

Marketing and Advertising
We promote Brighouse Bay Holiday Park through email, SMS, and online advertising on Facebook, Instagram and Google. This section explains how each channel works and how you can control it.
We only send you direct marketing where you have consented, or where we are otherwise permitted to do so, for example where you are an existing customer and we are contacting you about similar products and services. You can opt out of marketing at any time using the methods described below, without affecting any bookings or services you have with us.

Email marketing (Mailchimp)
We use Mailchimp, a platform provided by Intuit Inc., to send our email newsletters and marketing emails. When you sign up, your name and email address, along with information about how you interact with our emails (such as whether you open them or click links), are stored and processed within Mailchimp on our behalf.
We use this information to send you relevant news, offers and updates, and to understand which content is useful so we can improve our communications. Every marketing email we send includes an unsubscribe link. You can opt out at any time by clicking that link or by contacting us using the details at the end of this policy.
Mailchimp is operated by a company based in the United States. Where your data is transferred outside the UK, appropriate safeguards are in place, as described in the International Transfers section below. Mailchimp’s privacy notice is available at https://www.intuit.com/privacy/statement/.

SMS marketing
If you have provided your mobile telephone number and consented to receive marketing, we may send you marketing communications by SMS, such as special offers, availability and event information. We use a third party SMS delivery provider to send these messages on our behalf.
You can opt out of SMS marketing at any time by replying STOP to any marketing text message you receive from us, or by contacting us using the details at the end of this policy. We will action your request promptly.

Facebook and Instagram advertising (Meta)
We use Meta (the company behind Facebook, Instagram, Messenger and WhatsApp) to advertise our park and services. To do this, we use the Meta Pixel and similar tools on our website.
The Meta Pixel collects information about your visit and the actions you take on our website (such as page views and form submissions), along with device and browser information and your IP address. We use this to:
• Show you relevant advertisements on Facebook and Instagram.
• Measure how well our advertising performs and track conversions.
• Build custom audiences and similar (lookalike) audiences for our advertising campaigns.
Retargeting: we use retargeting so that people who have visited our website may later see our advertisements when using Facebook, Instagram and other Meta services. These adverts are based on your previous interactions with our website.
You can control how Meta uses your data for advertising in your Facebook and Instagram ad settings. Meta’s Privacy Policy is available at https://www.facebook.com/privacy/policy/.

Google advertising (Google Ads)
We may use Google Ads to advertise across Google Search, the Google Display Network, YouTube and partner sites. We use Google Ads tags and conversion tracking on our website.
Google may collect information including your IP address, browser and device information, the pages you visit on our site, and your interactions with our advertisements. We use this to:
• Show you relevant advertisements across Google’s network.
• Measure the performance of our advertising and track conversions.
• Build audiences for our campaigns.
Remarketing: we use Google remarketing so that people who have visited our website may later see our advertisements on other websites, YouTube and Google Search, based on their previous interactions with our site.
You can control the ads you see and opt out of personalised advertising through Google’s Ads Settings at https://myadcenter.google.com. Google’s advertising and privacy information is available at https://policies.google.com/technologies/ads.

Embedded Content From Other Websites
Pages on this website may include embedded content, such as videos, maps, images or social media posts. Embedded content from other websites behaves as though you had visited that website directly. These third party websites may collect data about you, use cookies, embed additional tracking, and monitor your interaction with that content. We do not control these third party services, and we recommend reviewing their privacy policies.

Who We Share Your Data With
We do not sell your personal data. We share it only where necessary to run our business and provide our services, including with:
• Our booking and reservation system provider, who processes bookings on our behalf.
• Mailchimp (Intuit Inc.), for email marketing.
• Our SMS delivery provider, for text message marketing.
• Meta and Google, for advertising, analytics and conversion measurement.
• Payment processors, for handling payments securely.
• IT, hosting and website service providers who support our systems.
• Professional advisers, and regulators or authorities, where we are required to do so by law.
These providers act as our processors and may only use your data in line with our instructions and applicable law, except where they act as controllers in their own right (such as the advertising platforms in respect of their own systems).

International Transfers
Some of the providers we use, including Mailchimp, Meta and Google, are based outside the United Kingdom, including in the United States. Where your personal data is transferred outside the UK, we take steps to ensure it is protected to a standard equivalent to UK data protection law. This is usually achieved through the UK’s International Data Transfer Agreement, the International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision by the UK government.

How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes we collected it for, including to meet legal, accounting and regulatory requirements.
• Enquiries and contact form submissions are kept for up to 3 years, unless we have an ongoing relationship with you or a legal reason to keep them longer.
• Booking and customer records are kept for the length of our relationship with you and for a further period to meet legal and accounting obligations.
• Marketing data is kept until you unsubscribe or withdraw consent, and for a short period afterwards to record your preference.
• Website analytics data is retained in line with the settings in Google Analytics.
• Advertising platform data is processed in line with the retention policies of the relevant platform.
Once your data is no longer needed, we securely delete or anonymise it.

Data Security
We use appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. While no online service can be guaranteed to be completely secure, we take reasonable steps to keep your information safe.

Children’s Privacy
Our website and services are intended for adults. We do not knowingly collect personal data from children without the consent of a parent or guardian. Where children stay with us, their details are provided by the adult making the booking.

Your Rights
Under UK data protection law, you have the following rights:
• The right to be informed about how your data is used.
• The right of access to the personal data we hold about you.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure (the “right to be forgotten”).
• The right to restrict processing.
• The right to data portability.
• The right to object to processing, including direct marketing.
• Rights relating to automated decision-making and profiling.

To exercise any of these rights, please contact us using the details below. We will respond within the timescales required by law. We will not charge a fee in most cases, and we may need to verify your identity before acting on your request.

Withdrawing Consent
Where we rely on your consent, you can withdraw it at any time. You can unsubscribe from emails using the link in any marketing email, reply STOP to marketing text messages, adjust your cookie and advertising preferences, or contact us directly. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.

Complaints
If you have any concerns about how we handle your personal data, please contact us first so we can try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection:
Information Commissioner’s Office Website: https://ico.org.uk Telephone: 0303 123 1113

Contact Us
If you have any questions about this privacy policy, or you wish to exercise your data rights, please contact us:
Gillespie Leisure Limited, trading as Brighouse Bay Holiday Park Borgue, Kirkcudbright, DG6 4TS Telephone: 01557 870 267 Email: info@gillespie-leisure.co.uk

Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal, regulatory or operational reasons. Any changes will be posted on this page, and the date at the top of this policy shows when it was last updated. We encourage you to review this page periodically.