THC PRIVACY POLICY

1. Information collection

1.1 In order to provide a better service to you, we may collect and process the following data about you:

1.2 We only retain personal data for so long as it is necessary. Data may be archived as long as the purpose for which the data was used still exists.

2. Uses made of the information

2.1 The purposes for which information may be used by us include:.

2.2 We intend to use your data in direct marketing and we require your consent (which you provide when you register your details with us) for that purpose. By registering to use our site, you agree that:

3. Disclosure of your information

We will keep the personal data we hold confidential but may provide information to:

4. Cookies

4.1 Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. You are notified of our use of cookies when you use our site.

4.2 We use cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.

4.3 We may use the following third party services on the website. The service providers that administer these services may use technologies such as cookies, web server logs and web beacons to help us analyse how visitors use the website. The information collected through these means (including IP address) is disclosed to these service providers, who use the information to evaluate use of the website. These analytic services may use the data collected to contextualise and personalise the marketing materials of their own advertising network.

5. Protecting your information

5.1 We maintain reasonable physical, electronic, and operational security measures to protect your information against accidental or unlawful destruction or accidental loss, alteration, or unintended disclosure or access. We use Secure Socket Layer technology to encrypt credit card information during transit. No credit card details are stored on our site.

5.2 Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

5.2 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. We do not accept any liability for such transmissions. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

6 Changes to our privacy policy

If or when we update our privacy policy, we will make reasonable efforts to notify users in advance of the effective date of the changes.

7. Data transfers

7.1 We may hold your data on servers in the UK, Europe, Australia and any other territories as we see fit from time to time.

7.2 We share your personal data within our corporate group. This may involve transferring your data outside the European Economic Area (EEA).]

7.3 Where our external third parties are based outside the EEA, their processing of your personal data will involve a transfer of data outside the EEA.

7.4 Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

7.5 Where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.

7.6 Please contact us via the contact form if you want further information on the specific mechanism used by us when transferring your personal data out of the EEA.

8. Your consent and rights (Australia)

8.1 By using our service, making an application or visiting our website, you consent to the collection and use of your information and other activities as outlined in this policy.

8.2 Under the Privacy Act (the "Act"), individuals have the right:

8.3 You may exercise your opt-out right by notifying us by using our contact form if you wish to withdraw your consent to the use of your personal data for direct marketing purposes. Please send requests to opt-out and for access to data, correction of data, information regarding policies and practices and kinds of data held, questions or complaints via our contact form:

8.4 In accordance with the Act, we have the right to and may charge a reasonable fee for processing any data access request.

9. Your consent and rights (UK and Europe)

9.1 We will retain your information for the period necessary to fulfil the purposes outlined in this Privacy Policy and internal company policies. When we no longer need to use your information, we will – unless we need to keep your information to comply with applicable legal or regulatory obligations or the information is required to carry out corporate tasks and achieve our business objectives – remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it.

9.2 You can easily correct your account name and contact details at any time by signing in to your account on the website. Correcting booking information may incur costs depending on the terms of an actual booking. Alternatively, please contact us via our contact form to exercise any of the following rights:

9.3 Access: You are entitled at any time to obtain information about your personal information that we store, in accordance with applicable law and without any fee. However, in exceptional cases we ask you to pay reasonable fees before we provide the information if permitted by applicable law.

9.4 Rectification: You may request that we rectify any of your personal information that is incomplete or incorrect.

9.5 Deletion: You may request that we delete your account.

9.6 Restrictions of Processing: You may ask us to cease processing of your personal information for example if you have objected to the processing and whether legitimate grounds exist is still under consideration.

9.7 Objection: You may object, at any time, to your personal information being processed for direct marketing purposes.

9.8 Right to Revoke Consent: You have the right to withdraw your consent at any time, without affecting the lawfulness of our processing based on such consent before it was withdrawn.

9.9 Data Portability: If applicable, you may request us to send you your personal information which we store, in a commonly used and machine readable format which shall be decided at our sole discretion.

9.10 To protect your privacy and security, we will verify your identity before responding to such request, and your request will be answered within a reasonable timeframe. We may not be able to allow you to access certain personal information in some cases e.g. if your personal information is connected with personal information of other persons, or for legal reasons. In such cases, we will provide you with an explanation why you cannot obtain this information. We may also deny your request for deletion or rectification of your personal information due to statutory provisions, especially those affecting our accounting processes, processing of claims, for fraud detection or prevention purposes, and mandatory data retention, which may prohibit deletion or anonymization.