Privacy 2018-05-25T10:22:01+00:00


Welcome to Grenadier Exmouth’s Privacy Policy.

Grenadier Exmouth is committed to protecting and respecting your privacy and ensuring best practice compliance with data protection laws. Our Privacy Policy gives you information about how Grenadier Exmouth collects, uses and protects any personal data that you provide to us, including any personal data provided through our website. It is important that you read our Privacy Policy.

Any changes we may make to our Privacy Policy in the future will be posted on this page, so you will always know what personal data we collect about you, the purposes we might use it for and to whom we might disclose it.

This version of our Privacy Policy was published in May 2018 in line with the General Data Protection Regulation (GDPR) and applies to the collection and use of personal data by Grenadier Exmouth from 25 May 2018. Earlier versions of our Privacy Policy can be obtained by contacting Grenadier Exmouth’s Data Protection Officer (whose contact details are set out in the Important information and who we are section of our Privacy Policy).

Please click on the headings below to find out more:

Important information and who we are
Your legal rights
The personal data we collect about you
How we use your personal data
Disclosures of your personal data
International transfers
Security of personal data
Retention of personal data
Third party websites etc.

Important information and who we are
Grenadier Exmouth Limited (company number 09627200) is the entity responsible for the collection and use of personal data by Grenadier Exmouth. Grenadier Exmouth Limited is registered as a data controller at the Information Commissioner’s Office (ICO) with registration number ZA286933.

Grenadier Exmouth has appointed a Data Protection Officer who can answer questions in relation to our Privacy Policy. If you have any questions or would like more information about the collection and use of personal data by Grenadier Exmouth, you can contact our Data Protection Officer by sending an email to or by writing to us at Grenadier Exmouth Limited, Oxygen House, Grenadier Road, Exeter, Devon EX1 3LH.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

Your legal rights
Under certain circumstances, you have legal rights under GDPR in relation to your personal data which are known as data subject rights. Those rights are:

  • The right to request access to your personal data. This is commonly known as a ‘subject access request’.
  • The right to request correction of your personal data.
  • The right to request erasure of your personal data. This is commonly known as ‘the right to be forgotten.
  • The right to object to use of your personal data.
  • The right to request restriction of use of your personal data.
  • The right to request transfer of your personal data.
  • The right to withdraw consent, where consent is being relied upon to use your personal data.

Where you seek to exercise any of your data subject rights, we may need to request specific information from you to help us confirm your identity and establish your right to exercise such rights. This is a security measure to ensure that your personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to exercise your data subject rights to speed up our response.

If you wish to exercise any of your data subject rights set out above, please contact the Data Protection Officer using the contact information set out in the Important information and who we are section of our Privacy Policy.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances. 

You have the right to make a complaint at any time to the ICO regarding the collection and use of personal data by Grenadier Exmouth. However, we would appreciate being given the chance to help you with your concerns before you approach the ICO, so please contact us using the details above in the first instance.

The personal data we collect about you
Personal data is any information about an individual which can identify that person. It does not include any information where the individual’s identity has been removed (this is known as anonymous data), which we may collect, use and share for any purpose.

We may collect the following personal data about you:

  1. Personal data you give us

 We may collect and process the following personal information about you, which you will give us by filling in the forms on our site or by corresponding with us by e-mail or otherwise through use of our site:

  • Name;
  • Contact information, including your email address if you provide this to us;
  • Your comments on our design or any other feedback you provide relating to our proposed water sports centre for Exmouth;
  • The information you submit as part of the ‘have your say’ feedback form;
  • Other personal information that you provide when you submit any enquiries to us or report a problem with our site; and
  • Cookies (see below).
  1. Personal data we collect about you

 With regard to each of your visits to our website, we may automatically collect technical information, including the internet protocol (IP) address used to connect your computer to the internet, and information about your visit.

Our website uses cookies that we put on your computer, if you agree, to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our website. Further information about cookies can be found at

How we use your personal data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.
  • Where we need to perform the contract we are about to enter into or have entered into with you.

 Set out below is a description of all the ways we plan to use your personal data. We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and will explain the legal basis which allows us to do so.

Please note that we may use your personal data without your knowledge or consent where this is required or permitted by law.

We will use your personal information to inform our consultation process and for the following specific reasons:

  • To register and consider your feedback on the proposed water sports centre as part of the consultation process;
  • Provide you with information you request from us;
  • To register your interest in receiving updates on the project via email
  • Internal record keeping; and
  • To improve our services and our site.

We will not sell, distribute or lease your personal information to third parties.

 Disclosures of your personal data
We may share your personal information with another group company, Grenadier Estates Limited, in order to consider your feedback or correspondence submitted by you via our site.

International transfers
The majority of the personal data we collect will be stored and used in the UK at our offices and in our secure data centre(s). We will only transfer your data outside of the European Economic Area where it is necessary for us to do so.

 Security of personal data
We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

In addition, we limit access to your personal data to those who have a business need to know. They will only use your personal data for specified purposes and are required to keep your personal data confidential.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our website; any transmission is at your own risk.

Retention of personal data
 We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of your personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we use your personal data, whether we can achieve those purposes through other means and applicable legal requirements.

Third party websites etc.
Our website may, from time to time, include links to third party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share personal data about you. We do not control these third party websites, plug-ins or applications and are not responsible, and do not accept any liability, for their compliance with data protection laws.

When you leave this website, we encourage you to read the privacy policies of every website you visit or plug-in or application you download, in particular before submitting any personal data to those websites, plug-ins or applications.