Matthew Baker Caravans Ltd
Last updated: 18 February 2026 

1. Introduction
Matthew Baker Caravans Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This privacy notice explains how we collect, use, store and protect your personal data in accordance with UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

It applies to customers, prospective customers, website visitors, suppliers and anyone who interacts with us.

2. Who We Are
Data Controller Matthew Baker Caravans Ltd Dinas Cross Newport Pembrokeshire SA42 0XN Telephone: 01348 811220 Email: office@matthewbakercaravans.co.uk
Matthew Baker Caravans Ltd is the data controller responsible for your personal data.

3. Your Right to Complain
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection at ico.org.uk.
We would appreciate the opportunity to resolve your concerns first.

4. How We Collect Your Personal Data
We collect personal data when you:

• contact us by phone, email, post or in person,
• complete forms on our website
• enter into a contract with us
• request marketing communications
• enter competitions or promotions
• provide feedback
• purchase or sell a caravan or lodge
• through our website
• cookies and analytics.

We may also receive data from third parties who provide contact details of individuals interested in our caravans or lodges, credit reference agencies where finance checks are required, fraud prevention agencies, and publicly available sources.

5. The Types of Personal Data We Collect
We may collect and process identity data such as name and title, contact data such as address, email and phone number, and financial data, including limited payment details. We do not store full card numbers. We may also collect transaction data such as purchase history, contracts and invoices, marketing preferences, technical data such as IP address, browser type and device data, usage data such as website interaction data, and communications data including emails and call notes.

We do not knowingly collect data relating to minors.

6. Lawful Bases for Processing
We only process your personal data where the law allows us to.
We rely on the following lawful bases.

Contract
To perform a contract with you or take steps at your request before entering into a contract.

Legal Obligation
To comply with HMRC, accounting, finance, consumer law and regulatory requirements.

Legitimate Interests
To operate and grow our business, manage debts, improve services, prevent fraud, secure our systems and market to existing customers where permitted under PECR. We ensure our legitimate interests do not override your rights.

Consent
For email marketing, where required, SMS marketing, non-essential cookies and third-party marketing.

You can withdraw consent at any time.

7. How We Use Your Data
We use personal data to register you as a customer, process caravan purchases or sales, manage payments and recover debts, arrange viewings and appointments, conduct finance or affordability checks where applicable, communicate contractual changes, administer and protect our business and website, improve website performance and marketing, send marketing communications where permitted, conduct surveys, reviews or promotions, and prevent fraud.

We do not carry out automated decision-making that produces legal or similarly significant effects.

8. Marketing
We may send you marketing communications if you have opted in, or if you are an existing customer and we are marketing similar products in line with PECR soft opt-in rules.

You can opt out at any time by clicking unsubscribe in emails or contacting us directly.

We do not sell your personal data.

We will always obtain explicit consent before sharing your data for third-party marketing.

9. Website Visitors
When you visit our website, we collect technical data via cookies. We use analytics to understand website usage and only use non-essential cookies where you have given consent.

10. Third Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their privacy policies.

11. Sharing Your Data
We may share your data with:

– IT and website service providers
– CRM or email marketing platforms
– payment processors
– finance providers, if you apply for finance
– professional advisers such as lawyers and accountants
– third parties who undertake work throughout our caravan parks
– HMRC and regulatory authorities
– fraud prevention agencies.
All third parties are required to respect data protection law and only process data in
accordance with our instructions. In certain cases, contractors providing legally required services (such as gas safety inspections) may act as independent data controllers for the purpose of invoicing or regulatory compliance. Your information will only be used for this purpose and handled securely.

12. International Transfers
We do not routinely transfer personal data outside the UK.
If we use service providers based outside the UK, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement, adequacy regulations or approved Standard Contractual Clauses.

13. Data Security
We have implemented appropriate technical and organisational security measures including secure IT systems, restricted staff access, password protection and encrypted communications where appropriate.
We have procedures in place to deal with suspected data breaches and will notify the ICO and affected individuals where legally required.

14. Data Retention
We retain personal data only as long as necessary.

Contracts and financial records are typically retained for up to 7 years.

Enquiry data may be retained for up to 24 months.

Marketing data is retained until you withdraw consent.

Website analytics are retained according to cookie settings.

Where possible, data is securely deleted or anonymised.

15. Your Legal Rights
Under UK GDPR you have the right to access your personal data, correct inaccurate data, request erasure, object to processing, restrict processing, request data portability, and withdraw consent.

We aim to respond within one month.

No fee is usually required unless a request is excessive or unfounded.