We take your data protection very seriously and only gather the information we need to give you the best stay possible at our B&B or holiday cottage, as well as the best experience on our website. We DO NOT give any data to third parties for marketing purposes. We do not sell data. We do not share data unless compelled to do so by law.

Who we are
We are Fferm Glanyrynys B&B at Fferm Glanyrynys Farm, Porthyryd, Carmarthen, Carmarthenshire, SA32 8PX and Llwynpur Self Catering Holiday Cottage at Llwynpur Cottage, Torcoed Ganol, Porthyryd, Carmarthen, Carmarthenshire, SA32 8NY. The owners are Eluned & Hugh Jones. You can contact us by calling 01267 275226. Our website address is: https://glanyrynys-farm.co.uk.
What personal data we collect and why we collect it
We collect the personal information you give us when you complete our online contact form. This includes name, email address, phone number & your query. We collect this information to enable us to contact you to respond to your query. The lawful basis for processing this data is ‘consent’: You have given us clear consent for you to process your personal data for the specific purpose of submitting a query via our website form.
Should you contact us by phone or other contact method, with an enquiry, the same lawful basis of ‘consent’ applies. You have given us clear consent for you to process your personal data for the specific purpose of responding to your query.
If you contact us by phone or email or alternative contact method, to make a booking at our guest house, we collect the personal data needed in order to make your booking and give you the best service possible. We may collect sensitive personal data in relation to your stay, for example, food allergies if they affect your breakfast choice. The same lawful basis of ‘consent’ applies. You have given us clear consent for you to process your personal data for the specific purpose of making your booking and providing you with the services required whilst staying at our guest house.
We also use the lawful basis or ‘legitimate interest’. We collect your data in order for us to supply you with information or services you have requested.
We do not store any payment details. Any payment details taken are safely disposed of as soon as the payment has been processed.
What technical data we collect and why we collect it
In order to keep our website well optimised for users, we collect technical data. This may include third party plugins collecting technical data in order to keep their services running optimally. We use Google Analytics in order to optimise user experience on our website. This can include technical data such as the pages you visit, time spend on each page, your general location, browser, etc. Google has its own GDPR information which you can view on Google's website. Our Google Analytics data is stored (on Google Analytics) indefinitely. You can choose not to be tracked by changing your browser settings, for example, going ‘incognito’ or ‘private’, or amending your Cookie settings. Please see the Cookies section below for information about Cookies.
How we store your data & how long we store your data
Your data is stored on our email accounts and booking details are kept in a physical diary. The data that is kept is used to enable us to provide our B&B or self-catering holiday services. Emails are deleted shortly after your stay. Any payment details taken are safely disposed of as soon as the payment has been processed.
Technical data and website analytical data is kept on Google Analytics and is kept indefinitely.
Who we share your data with
There is very limited access to your data. Eluned & Hugh Jones (the owners of Glanyrynys and Llwynpur) do not employ additional staff who could have access to your data. We do not share your data with any third parties for marketing purposes. Booking & payment is by card, cash or cheque. Card details are safely disposed of once payment has processed.
Our accountant has access to the information which is necessary for them to prepare our accounts. They are subject to a duty of confidentiality. Our website developers are With Hindsite Ltd. They have potential access to website form content. You can see their Privacy Policy here. Our website is hosted with siteground.com. You can see their Privacy Policy here.
How long we retain your data
Emails and website enquiries are kept only for as long as necessary for us to provide our services to you. Once you have had your stay with us or your query has been dealt with, emails are deleted. Only information necessary for our company accounts is kept.
Google Analytics data is kept indefinitely.
What rights you have over your data
Under the GDPR your rights are as follows:
- the right to be informed
- the right of access
- the right to rectification
- the right to erasure
- the right to restrict processing
- the right to data portability
- the right to object
- the right to withdraw consent
To summarise, you can contact us to see what personal data we store about you and how we use it and store it. You can request for any of your details to be changed or removed. If you would like to implement any of the rights above, please contact us. You can read more about your rights in detail here.
You can request to receive a copy of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Additional information
Our website is SSL secure (https).
Cookies
To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
Contact information
You can contact us by calling 01267 275226 or by using the contact form on our website at https://glanyrynys-farm.co.uk/contact/.
What data breach procedures we have in place
Should we ever be made aware of a data breach, we will inform all affected customers. We will also inform the ICO (Information Commissioner's Office) within the specified 72 hours, if it is likely that there will be a risk to people’s rights and freedoms, for example, if personal data has been stolen or passed on to an unauthorised party.
