Data protection policy

Last reviewed: 24 October 2026

This policy sets out how Cosgrove Leisure Parks UK Limited and the companies in our group look after personal information. It applies to everyone who works for us, including directors, staff, seasonal workers and contractors, and to all personal information we hold about buyers, owners, residents, visitors, staff and suppliers. Our privacy policy explains to the public what we collect and why.

The law we follow

We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations, and the changes made by the Data (Use and Access) Act 2025.

Our principles

Whenever we use personal information we make sure it is:

1. used lawfully, fairly and openly;
2. collected for a clear purpose and not used for anything unrelated;
3. enough for that purpose and no more;
4. accurate and kept up to date;
5. kept no longer than we need it;
6. kept secure;
7. handled in a way we can show complies with the law.

Who is responsible

The directors are responsible for this policy. Day to day, The office manager deals with questions, requests and any concerns about personal information. Every member of staff is responsible for following this policy in their own work.

Keeping information secure

• Staff only see the information they need for their job.
• Computers, phones and the website are protected with strong passwords and, where possible, a second log-in step. Software is kept up to date.
• Paper files are kept in locked cabinets in park offices and shredded when no longer needed.
• Personal information is not taken off site or put on personal devices or memory sticks unless it is needed and protected.
• Suppliers who handle personal information for us, such as our website host, must have a written agreement with us and keep it safe.

How long we keep information

We keep information only for as long as we need it, as set out in our privacy policy. Records are checked at least once a year and anything no longer needed is securely deleted or destroyed.

Requests from individuals

Anyone can ask for a copy of their information, or ask us to correct, delete or limit it. Staff must pass any such request to The office manager straight away. We reply within one month and do not charge.

Data breaches

If personal information is lost, stolen, sent to the wrong person or seen by someone who should not see it, staff must report it to The office manager at once. We will contain the problem, assess the risk and, where the law requires, tell the Information Commissioner’s Office within 72 hours and tell the people affected. Every breach is recorded, even small ones, so we can learn from it.

Marketing

We only send marketing emails or texts to people who have agreed to receive them, or to existing customers about similar homes and services, and every message gives an easy way to opt out. Marketing cookies on our website are only used with consent.

Training and review

New staff are told about this policy when they join, and all staff receive refresher guidance. We review this policy every year, or sooner if the law or the way we work changes.

Contact

Questions about this policy can be sent to The office manager at Cosgrove Leisure Parks UK Limited, Sheerness Holiday Park, Halfway Road, Minster On Sea, Sheerness, Kent ME12 3AA, or by phone on 0345 340 3964.