Privacy Policy
 
Last updated: January 2026
 
This Privacy Policy explains how MVM Leisure Ltd (Trading As Harley’s) ("we", "us", "our") collects, uses, and protects personal information when you visit or interact with our website: harleyshemsby.wixsite.com/home . MVM Leisure Ltd (Trading As: Harley's and is used throughout the privacy policy) throughout this policy the following terms are used ("we", "us", "our") which mean Harley's.  
 
This policy applies to UK users only and is written in accordance with:
 
The UK General Data Protection Regulation (UK GDPR)
The Data Protection Act 2018
The Data Use and Access Act 2025
The Privacy and Electronic Communications Regulations (PECR)
 
We are committed to handling personal data lawfully, fairly, and transparently.

This website is hosted by wix.com and as such some features of the website are automatically completed by Wix including some automatic data collection that is required for the functionality of the website.
 
Who We Are
 
Harley’s is the data controller responsible for personal data collected through this website.
 
If you have any questions about this policy or how your personal data is handled, you can contact us using the contact details provided on the website.
 
Information We Collect
 
We may collect and process the following categories of personal data:
 
a) Information You Provide
 
Name
Email address
Phone number (if provided)
Enquiry or booking details
Information submitted when signing up to marketing communications
Information provided when creating a user account, such as login credentials and profile details
 
b) Automatically Collected Information
 
IP address
Browser type and version
Device and operating system information
Pages visited and interactions with the website
 
We do not knowingly collect data from children under the age of 16.
 
How We Use Your Personal Data
 
We use personal data for the following purposes:
 
To respond to enquiries and customer communications
To provide and manage our services
To send marketing emails, where you have given consent
To administer and manage user accounts (if implemented)
To improve website functionality, content, and user experience
To maintain website security and prevent fraud
To comply with legal and regulatory obligations
 
Marketing Communications (PECR Compliance)
 
We will only send you marketing emails where:
You have actively opted in to receive them, or
You are an existing customer and the marketing relates to similar services, in line with PECR
 
You can withdraw your consent or opt out of marketing communications at any time by:
 
Using the unsubscribe link in our emails, or
Contacting us via the website
 
We do not send unsolicited marketing communications.
 
Lawful Bases for Processing
 
Under UK GDPR and the Data Use and Access Act 2025, we rely on the following lawful bases:
 
Consent – for marketing communications and optional cookies
Contract – where processing is necessary to provide services or manage bookings
Legitimate interests – to operate, maintain, and improve our website and services
Legal obligation – where we are required to process data by law
 
 
User Accounts (Future Use)
 
If user accounts are introduced on the website, we will:
 
Collect only the data necessary to create and manage accounts
Use appropriate security measures such as password protection and access controls
Allow users to access, update, or delete their account information
 
Further information will be provided at the time user accounts are launched.
 
 
Data Storage and Security
 
Personal data is stored securely using appropriate technical and organisational measures.
 
We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements.
 
 
Sharing Personal Data
 
We do not sell or trade personal data.
 
We may share personal data with trusted third parties only where necessary, including:
 
Website hosting and infrastructure providers (such as Wix)
Email marketing service providers (Such as Wix, Mailchimp, MailerLite)
Professional advisers or regulators where required by law
 
All third parties are required to process data in compliance with UK data protection laws.
 
 
Your Rights
 
Under UK GDPR, the Data Protection Act 2018, and the Data Use and Access Act 2025, you have the right to:
 
Access your personal data
Request rectification of inaccurate or incomplete data
Request erasure of your personal data
Restrict or object to processing
Request data portability
Withdraw consent at any time (where processing is based on consent)
Lodge a complaint with the Information Commissioner’s Office (ICO)
 
How to Contact the ICO
 
If you believe your data protection rights have been infringed, you can contact the Information Commissioner’s Office:
 
Website: ico.org.uk Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
 
We encourage you to contact us first so we can try to resolve any concerns.
 
Cookies and Tracking Technologies
 
Please see the Cookie Policy below for information about how we use cookies and similar technologies.
 
Changes to This Privacy Policy
 
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.