Privacy Policy

1. Introduction and Data Controller Information

This Privacy Policy sets out the data processing practices carried out through the website winksypixelscabn.com. We take personal privacy seriously and are committed to transparency in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK Data Protection Act 2018 ("UK GDPR"), and applicable state privacy standards including the California Consumer Privacy Act ("CCPA/CPRA").

The statutory Data Controller responsible for your personal data is:

Winksypixels Beacon Stays Ltd
Company Registration Number: 14298104
Registered Address: 14 Harbourside Quayside, Falmouth, Cornwall, TR11 3DH, United Kingdom
Email: [email protected]

2. Personal Data We Collect

We collect personal information solely when voluntarily provided by you, or automatically via standard web server protocols and consent-based cookies.

A. Information You Submit Voluntarily

When utilizing our contact form or emailing our team, you provide:

• Your full name;
• Your electronic mail address;
• Inquiry subject category;
• The substantive text of your message and any incidental personal details contained therein.

B. Automatically Collected Technical Data

When accessing our web pages, our static host infrastructure automatically generates standard HTTP server log entries. This technical data includes:

• Internet Protocol (IP) address (anonymised where possible);
• Browser type and version string;
• Operating system and device category;
• Referring Uniform Resource Locator (URL);
• Time and timestamp of HTTP request and byte counts transferred.

3. Lawful Bases for Processing under GDPR / UK GDPR

We only process your personal information when supported by a verified lawful ground under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): Where you explicitly authorize optional analytical cookies or opt in to direct communications.
• Contractual or Pre-Contractual Steps (Art. 6(1)(b)): To respond to your direct inquiries regarding our coastal guides, publications, or advisory services.
• Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, prevent malicious automated spam submissions, and preserve static performance.
• Legal Obligation (Art. 6(1)(c)): Where statutory compliance mandates retention of financial or corporate communications.

4. Cookies and Analytical Tracking

Our website utilizes minimal, privacy-respecting cookies. We classify cookies into Strictly Necessary (essential for core layout and consent memory) and Optional Functional/Analytics cookies. For a detailed breakdown of specific cookie names, lifetimes, and management tools, please review our comprehensive Cookie Policy.

5. Third-Party Processors and International Transfers

We do not sell, rent, or trade your personal data to third-party data brokers or marketing organizations. We engage trusted third-party technical providers exclusively for:

• Static web hosting and Content Delivery Network (CDN) edge routing;
• Domain security, DDoS filtering, and encrypted DNS routing;
• Transactional email relay for contact form inquiries.

Where data is processed outside the European Economic Area (EEA) or the United Kingdom, transfers are protected via Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Addendum.

6. Data Retention Policies

We retain personal information only for as long as strictly necessary to fulfill the purposes for which it was collected:

• Contact inquiries: Maintained for twelve (12) months following the resolution of your inquiry to ensure consistent follow-up, after which they are securely purged.
• Server logs: Stored for thirty (30) days for operational threat detection and debugging, then automatically overwritten.
• Cookie consent selections: Stored locally in your browser's localStorage for twelve (12) months.

7. Your Statutory Rights (GDPR / UK GDPR / CCPA)

Subject to statutory conditions, you hold enforceable rights regarding your personal information:

• Right of Access: Request a confirmation of whether we hold personal data and obtain a machine-readable copy.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal records where no overriding legal basis exists.
• Right to Restriction and Objection: Object to processing carried out under legitimate interests or request restricted processing during verification disputes.
• Right to Data Portability: Obtain your submitted data in a structured, commonly used format.
• Rights Under CCPA/CPRA: California residents have the right to know what personal information is collected, request its deletion, and be free from discriminatory treatment for exercising privacy rights. We do not sell personal information.

8. Information Security Protocols

We apply technical and organizational measures appropriate to headland maritime operations and web publishing. All transmission across winksypixelscabn.com is encrypted using modern Transport Layer Security (TLS 1.3). Access to our communication channels is restricted to authorized personnel bound by strict confidentiality agreements.

9. Data Protection Officer and Supervisory Authority

For any questions, requests to exercise your statutory rights, or privacy concerns, please contact our privacy representative directly at:

Privacy Office
Winksypixels Beacon Stays Ltd
Email: [email protected]

If you believe your personal data has been handled inconsistently with applicable law, you have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or your local European Union supervisory authority.