How Caravanvio collects, uses, and protects your personal data in accordance with UK GDPR.
Last Updated: 10 April 2026
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are committed to protecting your privacy and handling your data transparently and responsibly.
Caravanvio is a UK-based online marketplace that connects caravan owners with holidaymakers looking for unique caravan holiday experiences across the United Kingdom.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Caravanvio is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or how we handle your data, please contact us.
We use your personal data for the following purposes, each supported by a lawful basis under UK GDPR:
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your account | Contract |
| Processing listing payments via Stripe | Contract |
| Sending booking enquiry notifications | Contract |
| Notifying you of listing approval or rejection | Contract |
| Improving site performance and user experience | Legitimate Interests |
| Preventing fraud and ensuring security | Legitimate Interests |
| Sending marketing emails (if opted in) | Consent |
| Complying with legal obligations | Legal Obligation |
We do not sell your personal data to third parties. We only share your data with trusted service providers who help us operate the platform, and only to the extent necessary:
Stripe
Payment processingHandles all payment transactions securely. Subject to their own privacy policy.
View their privacy policy →Supabase
Database & authenticationStores your account data and powers authentication. Data is hosted in the EU.
View their privacy policy →Email service providers
Transactional emailsUsed to send booking enquiry notifications, listing approvals, and account emails.
We may also disclose your data if required to do so by law, or in response to valid requests by public authorities (e.g. a court or government agency).
We retain your personal data only for as long as necessary for the purposes set out in this policy:
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Ask us to correct inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing
Ask us to limit how we use your data in certain circumstances.
Right to Data Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent.
Right to Complain
Lodge a complaint with the ICO (ico.org.uk) if you believe we have mishandled your data.
To exercise any of these rights, please contact us. We will respond within 30 days. We may need to verify your identity before processing your request.
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.
Encryption in transit
All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
Secure authentication
Passwords are hashed using industry-standard algorithms. We never store plain-text passwords.
Payment security
All payments are processed by Stripe, which is PCI DSS Level 1 certified. We never store card details.
Access controls
Access to personal data is restricted to authorised personnel on a need-to-know basis.
Despite our best efforts, no method of transmission over the internet is 100% secure. If you suspect a security breach, please contact us immediately.
We use cookies and similar tracking technologies on our website. For full details on the cookies we use and how to manage them, please read our Cookie Policy.
Caravanvio is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will take steps to delete that information promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please get in touch:
We use cookies
We use strictly necessary cookies to keep the site working, plus optional analytics and functional cookies to improve your experience. or read our Cookie Policy.