Privacy statement

Privacy notices

VisitWales.com and the Welsh Government, respect and wish to protect the privacy of the users of our services. The privacy notices below set out the details in relation to information collected on this website.

Consumer Tourism Marketing

Visit Wales Privacy Notice

Wales Adventure Tourism Organisation (WATO)

Visit Wales Accreditation for Outdoor Activity Providers Privacy Notice

Wales Tourism Product Database (WTPD)

Wales Tourism Product Database Privacy Notice

Visit Wales privacy notice

Visit Wales is the tourism marketing department of the Welsh Government. Welsh Government is the data controller for the personal information you provide when completing forms on the website and will process it as part of undertaking our duties in promoting and supporting the tourism sector in Wales.

Newsletter Subscription

When you complete your details on the newsletter subscribe form and opt in to receive the Visit Wales newsletters, you provide your consent for Visit Wales to use your personal information to administer your email account and provide any products and services you have requested from us. 

You are free to unsubscribe at any time by clicking the unsubscribe link in any email you receive from us, or you can email us at visitwalesnewsletterenquiries@gov.wales.

We will send you news and information that we feel will be of interest to you from time to time based on your interest and holiday companion preferences or your geographical location.

Following industry standard practice when you unsubscribe, your email address will be retained on a system suppression list to ensure you no longer receive emails from Visit Wales. We regularly refresh our mailing list and will remove your details from our system if you do not open any of our emails sent to you over a three-year period. 

Who will have access to your data

Visit Wales and associated research companies.

Tourism Research

You will be given the option to further opt in to be contacted for research purposes on these online forms.  By providing this consent you may be selected to receive a tourism related follow up research questionnaire from time to time.  Completing the annual survey questionnaire is voluntary, but your feedback is valuable to help us to improve our promotion and support we provide to the tourism sector in Wales.

Website Survey

When you complete the website survey, the data you provide will be stored until the end of the year and will then be used to administer the prize draw according to the Visit Wales Website Survey Prize Draw - Terms and conditions. The information supplied on the survey will be shared with the contracted research company for evaluation on our behalf and for the delivery of the prize.

Visit Wales support service teams and its system technical administrators who support the IT system. System technical administrators will not use your details in any way.

How we keep your data secure

Personal data provided to Visit Wales is held on secure servers within the UK and your personal data is stored in a restricted folder and restricted to the immediate staff members.

Visit Wales has procedures to deal with any suspected data security breaches. If a suspected breach occurs, Visit Wales will notify you and any applicable regulator where we are legally required to do so.

Your rights

Under the data protection legislation, you have the right:

to be informed of the personal data Visit Wales holds about you and to access it

require us to rectify inaccuracies in that data

to (in certain circumstances) object to or restrict processing

to (in certain circumstances) data portability

for (in certain circumstances) your data to be ‘erased’

to lodge a complaint with the Information Commissioner’s Office (ICO) who is the independent regulator for data protection.

Should you have any queries regarding this privacy notice, please get in touch here:

visitwalesnewsletterenquiries@gov.wales

For further details about the information the Visit Wales holds and its use, or if you want to exercise any of these rights, please contact us using the details provided below.

Data Protection Officer
Welsh Government
Cathays Park
CARDIFF
CF10 3NQ

Email address: DataProtectionOfficer@gov.wales

The contact details for the Information Commissioner’s Office are:

Information Commissioner’s Office - Wales
2nd Floor
Churchill House
Churchill Way
Cardiff
CF10 2HH

Telephone – Helpline 029 2067 8400 (Wales Helpline) or 0303 123 1113 (UK Helpline)

Email - wales@ico.org.uk 

Website: www.ico.org.uk

Updated 17 September 2025

Visit Wales Accreditation for Outdoor Activity Providers privacy notice

The Welsh Government is the data controller for the purpose of compliance with the General Data Protection Regulation (GDPR). The processing of your application is part of our public task to administer the service.

Purpose of the Processing

In order to process your application and to update internal (other Departments within Welsh Government) and external partners (Data Partners, Local Authorities, TIC Managing Agents) about your business and accreditation status, Welsh Government requires you to provide various contact and business information as detailed on the application form. The processing of this data is necessary in order for Welsh Government to perform the following tasks.

Contact information (email address and telephone number) is required so that Visit Wales can contact you for operational reasons (e.g. clarification on accreditation and to request further information if appropriate) and is also sent to the Visit Wales Data Partners (Mid Wales Tourism, New Vision Group, Monmouthshire County Council) in order for them to contact you to populate your entry on the Visit Wales consumer website – www.visitwales.com

Recipients of the Data

Information held by Welsh Government about your business may be shared with following for the reasons outlined above:

• Other Departments in Welsh Government
• Data Partners (Mid Wales Tourism, New Vision Group, Monmouthshire County Council) – these are organisations are contracted to provide services to Visit Wales)
• National Tourist Organisations
• Local Authorities
• TIC Managing Agents

Retention of Data

Welsh Government will hold personal information for 7 years from the date of initial application.

Your rights in relation to your information

You have the right to:

• access to the Personal data that we are processing about you;
• require us to rectify inaccuracies in that data;
• the right (in certain circumstances) to object to or restrict processing;
• the right (in certain circumstances) for your data to be ‘erased’;
• lodge a complaint with the Information Commissioner’s Office (ICO) who is our independent regulator for data protection

Further Information

For further details about the information Welsh Government holds and its use, or if you wish to exercise your rights under GDPR , please contact:

Welsh Government,
Rhodfa Padarn,
Aberystwyth,
SY23 3UR

Email: quality.tourism@gov.wales:

Data Protection Officer
Welsh Government,
Cathays Park,
Cardiff,
CF10 3NQ:

Email: DataProtectionOfficer@gov.wales

Information Commissioner’s Office (Wales)

Contact details:
2nd Floor Churchill House,
Churchill Way,
Cardiff,
CF10 2HH
Phone: 029 2067 8400 or 0303 123 1113

Email: wales@ico.org.uk

Web: www.ico.org.uk

Wales Tourism Product Database Privacy Notice

wtpdThe Wales Tourism Product Database (WTPD) is a database of accommodation, attractions, activities and events that is owned by Visit Wales which is the team within Welsh Government responsible for the development and promotion of the visitor economy in Wales. If you choose to promote your business on WTPD it is necessary to process some personal data about you.

Welsh Government are the Controllers for personal information processed in the WTPD for the purpose of compliance with the UK’s Data Protection Legislation. Simpleview Europe trading as Granicus Firmstep operates the WTPD on behalf of Visit Wales.

The processing of your data is part of the Welsh Government’s public task to promote tourism in Wales. Being in the WTPD is voluntary and you can remove your information at any time by contacting the Visit Wales Data Steward on visitwalessupport@granicus.com.

Your data may be accessed and managed by authorised admin users within the Wales Tourism Product Database for the purposes of maintaining data accuracy, supporting business listings and ensuring compliance with platform standards.

This privacy policy relates to data collected through the website extranet-wales.newmindets.net (the “Website”).

INFORMATION WE MAY COLLECT FROM YOU
1. We may collect and process the following data about you and your business:
  1. Your name, address and contact email/telephone number.
  2. Information that you provide by completing forms provided to you in relation to the WTPD. This includes information provided at the time of registering to use the Website, subscribing to our service and any additional, posting material, contributions or requesting further services. We may also ask you for information when you enter a competition or promotion sponsored by us and when you report a problem with our Website.
  3. If you contact us, we will keep a record of that correspondence for 30 months.
  4. We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them
  5. Details of transactions you carry out through our Website.
  6. Details of your visits to the Website including, but not limited to, traffic data, location data, weblogs and other communication data, and the resources that you access.
IP ADDRESSES AND COOKIES
1. We may collect information about your device, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is statistical data about our users' browsing actions and patterns, and does not identify any individual.
2. For the same reason, we may obtain information about your usage of the Website by using a cookie which is stored on the hard drive of your device. Cookies are used to make our Website work and to deliver a better and more personalised service.
  
  They enable us:
  1. To estimate our audience size and usage pattern.
  2. To store information about your preferences, and so allow us to customise our Website according to your individual interests and preferences.
  3. To speed up your searches.
  4. To recognise you when you return to our Website.
3. The cookies used on our Website are:
  1. ASP.NET_SessionId - This cookie is essential for the operation and navigation of the website. The cookie is deleted when you close your browser.
  2. ASPSESSIONIDSXXXXXXA - This cookie is used to report website 404 errors to our Website host. This cookie is deleted when you close your browser.
  3. _utma, _utmb, _utmc, _utmz - These cookies are used by Google Analytics to collect information about how visitors use our Website. We use the information to compile reports and to help us improve the Website. The cookies collect information in an anonymous form, including the number of visitors to the Website, where visitors have come to the Website from and the pages they visited. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.
4. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org.
5. This privacy policy does not cover the links within the Website linking to other websites. We encourage you to read the privacy statements on the other websites you visit.
6. We may embed videos from our official YouTube channel using YouTube’s privacy- enhanced mode. This mode may set cookies on your device once you click on the YouTube video player, but YouTube will not store personally identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. To find out more please see YouTube’s embedding videos information page and associated terms of service: YouTube's Embed videos and playlists - Help page.
WHERE WE STORE YOUR DATA
1. Data stored in the WTPD is stored and processed within the United Kingdom. WHERE WE STORE YOUR DATA
2. All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
3. The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use appropriate procedures and security features to try to prevent unauthorised access.
USES MADE OF THE INFORMATION
1. We use information held about you and your business in the following ways:
  1. To ensure that content from our Website is presented in the most effective manner for you and for your device.
  2. To facilitate the publication of your business details on VisitWales.com and on other tourism websites that use the WTPD.
  3. To notify you about changes to the service.
2. Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
DISCLOSURE OF YOUR INFORMATION
1. Personal information will not be disclosed to third parties unless:
  1. there is a duty to disclose or share your personal data in order to comply with a legal obligation;
  2. in certain circumstances, you have asked us to do so;
  3. it is to be processed by contractor working on behalf of Welsh Government to deliver research or evaluation in relation to the performance of the WTPD or related policy development.
DATA RETENTION
1. If you cease to be published to VisitWales.com / CroesoCymru.com, data in the WTPD will be deleted after 6 months.
CHANGES TO OUR PRIVACY POLICY
1. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.
YOUR RIGHTS
1. Under the UK GDPR you have the following rights;
  - To access a copy of your own data;
  - For us to rectify inaccuracies in that data;
  - To object to or restrict processing (in certain circumstances);
  - For your data to be ‘erased’ (in certain circumstances);
  - To (in certain circumstances) data portability; and
  - To lodge a complaint with the Information Commissioner’s Office (ICO) who is the independent regulator for data protection.
CONTACT INFORMATION
1. If you have any questions about the WTPD then in the 1st instance please contact visitwalessupport@granicus.com
2. If you have any questions relating to this privacy notice or about how the Welsh Government handles your personal information, please contact our Data Protection Officer at
  Welsh Government, Cathays Park, Cardiff, CF10 3NQ,
  or Email: DataProtectionOfficer@gov.wales.
3. The Information Commissioner’s Office can be contacted at:
  Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
  Phone: 01625 545 745 or 0303 123 1113.
  Website: www.ico.org.uk.
4. The Information Commissioner’s Office - Wales can be contacted at:
  2nd Floor, Churchill House, Churchill Way, Cardiff CF10 2HH.
  Phone: 0330 414 6421,
  Email:wales@ico.org.uk,
  Website: www.ico.org.uk.