Harvington Mill & Drydock Ltd
Last updated: 14/04/2026
1. Data Controller
Harvington Mill & Drydock Ltd
Anchor Lane
Harvington
Evesham
WR11 8PA
Company No: 16892697
Email: bookings@harvingtonmilldrydock.uk
Harvington Mill & Drydock Ltd is the Data Controller responsible for your personal data.
2. Our Legal Framework
We process personal data in accordance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Privacy & Electronic Communications Regulations (PECR)
3. The Data We Collect
We may collect:
Identity Data
Name and title.
Contact Data
Address, email address, telephone number.
Booking & Vessel Data
Boat name, docking dates, declared works, insurance details.
Financial Data
Payment confirmation information (processed securely via third-party payment provider; we do not store full card details).
Technical Data
IP address, browser type, usage data collected via cookies.
Incident & Safety Records
Names and relevant details in the event of accidents or safety incidents, processed for legal compliance.We do not intentionally collect special category data unless required due to a health and safety incident.
4. How We Collect Data
We collect personal data through:
- Online booking forms
- Email and telephone correspondence
- In-person communication at the dry dock
- Website cookies and analytics
5. Lawful Basis for Processing
We rely on the following lawful bases under UK GDPR:
Data Type Lawful Basis
- Booking & vessel information Contract
- Payment records Legal obligation
- Accounting records Legal obligation
- Health & safety records Legal obligation
- Website analytics Legitimate interests
- Marketing emails Consent
Where processing is based on consent, you may withdraw that consent at any time.
6. How We Use Your Data
We use your personal data to:
- Manage dry dock bookings
- Communicate regarding safety and operational matters
- Process payments
- Maintain legally required records
- Improve our website and services
- Comply with legal and regulatory obligationsWe do not sell personal data.
7. Data Sharing
We may share data with:
- Payment service providers
- Accountants and professional advisers
- IT and hosting providers
- Legal or regulatory authorities where required
- Some service providers may store or process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR.
8. Data Retention
We retain:
- Booking and financial records for six years (UK tax requirements)
- Health & safety records for the period required by law
- Website analytics data in anonymised or aggregated form
- Data is securely deleted when no longer required.
9. Data Security
We implement appropriate technical and organisational measures to protect personal data from unauthorised access, loss or misuse.
In the event of a personal data breach, we will assess and notify affected individuals and the Information Commissioner’s Office (ICO) where legally required.
10. Your Rights
You have the right to:
- Access your personal data
- Request correction
- Request erasure (where legally permissible)
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent
Requests can be made via: admin@harvingtonmilldrydock.co.uk
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters: www.ico.org.uk
11. Cookies
Our website uses essential and analytics cookies.
Non-essential cookies are only used with your consent.
Please see our Cookies Policy for further information.