Privacy Policy

1. Identity of the Data Controller

The data controller responsible for the processing of your personal information collected via pebblerankcabints.com is Pebblerankcabints Voyages Ltd, a private limited company registered in England and Wales under Company Registration Number 14298104, with registered offices at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom (referred to herein as "the Company", "we", "us", or "our").

You can reach our designated Data Protection Officer (DPO) at [email protected] for any inquiries concerning data privacy, data subject requests, or regulatory queries.

2. Information We Collect and Methods of Collection

We collect and process personal data strictly where necessary to operate our editorial travel directory, respond to reader inquiries, and ensure technical performance. Data categories include:

• Directly Provided Information: When you complete our contact inquiry form, you provide your full name, email address, thematic travel interest, and message contents.
• Automated Telemetry & System Logs: When accessing our server infrastructure, standard server access logs automatically record your Internet Protocol (IP) address, operating system, browser type, referring URLs, access timestamps, and page request headers.
• Cookie Identifiers: Subject to your prior consent via our cookie banner, we may process randomized pseudo-anonymous identifiers stored in browser cookies to quantify website traffic and regional guide readership.

3. Legal Bases for Processing Under the GDPR

Under the General Data Protection Regulation (Regulation (EU) 2016/679 and UK GDPR), our lawful bases for processing personal data include:

• Consent (Article 6(1)(a)): For non-essential analytics and preference cookies, which are activated solely upon your affirmative selection in our cookie management banner.
• Contractual Necessity / Pre-contractual Inquiries (Article 6(1)(b)): To process and respond to direct communication inquiries submitted through our contact portal.
• Legitimate Interests (Article 6(1)(f)): To maintain web server security, mitigate malicious automated denial-of-service attempts, diagnose server faults, and preserve platform stability.

4. Third-Party Data Processors and Transfers

Pebblerankcabints Voyages Ltd does not sell, rent, or lease user personal information to commercial data brokers. We utilize selected third-party service providers acting strictly as data processors under binding Data Processing Agreements (DPAs):

• Hosting and Infrastructure: Secure cloud hosting centers located within the United Kingdom and European Economic Area (EEA).
• Transactional Email Services: Encrypted SMTP relay infrastructure ensuring inquiries reach our editorial desk securely.

Where personal data is transferred outside the United Kingdom or EEA, appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or European Commission Standard Contractual Clauses (SCCs) are instituted.

5. Data Retention Schedules

We retain personal data only for the durations necessary to fulfill the purposes documented herein:

• Contact Inquiries: Stored for up to twelve (12) months following the resolution of your inquiry to facilitate follow-up communication, unless longer statutory retention is required.
• Server Access Logs: Retained for a maximum of ninety (90) days for intrusion detection and diagnostic analysis, after which they are permanently purged.
• Cookie Consent Choices: Stored locally in your client browser storage for a maximum of 365 days or until cleared manually.

6. Your Statutory Rights (GDPR, UK DPA & CCPA)

Depending on your jurisdiction of residence, you possess enforceable statutory rights concerning your personal data:

• Right to Access (Subject Access Request): You may request formal confirmation and copies of personal data we hold about you.
• Right to Rectification: You may request the correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where no overriding lawful basis justifies retention.
• Right to Restrict or Object to Processing: You have the right to halt specific processing activities based on legitimate interests.
• Right to Data Portability: You may request transfer of provided data in a structured, machine-readable format.
• Non-Discrimination: For California residents under the California Consumer Privacy Act (CCPA), exercising privacy rights will never result in altered service tiers or pricing discrimination.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within thirty (30) calendar days.

7. Supervisory Authority Contact

If you believe our data processing activities infringe applicable data protection legislation, you have the right to lodge a formal complaint with the competent supervisory authority:

In the United Kingdom: The Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (ico.org.uk).