Privacy Policy
Last Updated: October 2025
Introduction
Welcome to All in Wales. We are committed to protecting your privacy and ensuring your personal information is handled safely and responsibly. This Privacy Policy explains how we collect, use, and protect your data when you use our website.
All in Wales is based in the United Kingdom and complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information We Collect
Information You Provide Directly
Newsletter Subscriptions
- Email address
- Name (if provided)
- Subscription preferences
User Accounts
- Email address
- Username
- Password (stored securely and encrypted)
- Profile information you choose to provide
Contact Forms
- Name
- Email address
- Any information you include in your message
Information Collected Automatically
Cookies and Analytics
We use Google Analytics to understand how visitors use our website. This helps us improve our content and user experience. Google Analytics collects:
- IP address (anonymised)
- Browser type and version
- Device type
- Pages visited and time spent on pages
- Referring website
- Geographic location (country/city level only)
For more information about how Google uses data, please visit: https://policies.google.com/privacy
How We Use Your Information
We use your personal information for the following purposes:
- Newsletter Service: To send you travel information, updates, and content about Wales that you’ve subscribed to receive
- Account Management: To create and manage your user account and provide you with access to account features
- Website Improvement: To analyse how our website is used and improve our content and services
- Communication: To respond to your enquiries and provide customer support
- Legal Compliance: To comply with legal obligations and protect our rights
Legal Basis for Processing
Under UK GDPR, we process your personal data based on:
- Consent: When you sign up for our newsletter or create an account
- Legitimate Interests: To analyse website usage and improve our services, provided this does not override your rights and interests
Data Retention
- Newsletter Data: We retain your email address until you unsubscribe
- User Accounts: We retain your account data until you request deletion
- Analytics Data: Google Analytics data is retained for 26 months by default
Your Rights
Under UK GDPR, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request that we limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Unsubscribe from newsletters or delete your account at any time
To exercise any of these rights, please contact us using the details below.
Cookies
Our website uses cookies to enhance your experience. You can control cookies through your browser settings. Please note that disabling cookies may affect website functionality.
Types of Cookies We Use:
- Essential Cookies: Required for website functionality (e.g., user login)
- Analytics Cookies: Google Analytics cookies to understand website usage
- Preference Cookies: Remember your settings and preferences
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:
- Secure password encryption
- Regular security assessments
- Limited access to personal data on a need-to-know basis
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.
Children’s Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
Email: info@allinwales.com
Address: The Glas Pontcanna Cardiff
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113