Privacy Policy

Effective date: 12 August 2026

1. Who we are

DVC Exchange UK Ltd provides a booking and matching service that connects guests seeking Disney Vacation Club accommodation with Disney Vacation Club Members who have points available to rent.

DVC Exchange UK Ltd is currently operated by Louise Ellis

Email: support@dvcexchangeuk.co.uk
Website: www.dvcexchangeuk.co.uk
Business address: 9 Darley Dale Crescent, Grantham, Lincolnshire, NG31 8EH

For the purposes of UK data protection law, DVC Exchange UK Ltd is the data controller responsible for the personal information described in this policy.

DVC Exchange UK Ltd is an independent business and is not affiliated with, endorsed by or operated by Disney Vacation Club or The Walt Disney Company.

2. Information we collect

We may collect and use the following personal information.

Guests and prospective guests

  • Name

  • Email address

  • Telephone number

  • Address

  • Travel dates and accommodation requirements

  • Resort and room preferences

  • Names and ages of other guests included in a reservation

  • Disney reservation information

  • Enquiry and correspondence history

  • Payment and transaction information

  • Any special requests or accessibility information you choose to provide

Disney Vacation Club Members

  • Name

  • Email address

  • Telephone number

  • Address

  • Disney Vacation Club membership information

  • Home Resort, Use Year and points information

  • Reservation and guest-matching information

  • Payment and bank information

  • Copies of relevant membership or identification documents where reasonably required for verification

  • Correspondence and transaction history

DVC Members Ball attendees

  • Name and contact details

  • Ticket and payment information

  • Dietary requirements

  • Accessibility requirements

  • Names of other attendees included in a booking

Dietary, medical or accessibility information may constitute special-category personal data. We will only request and use this information where necessary and with your explicit consent, or where another lawful basis applies.

Website visitors and newsletter subscribers

  • Name and email address

  • Newsletter preferences

  • IP address

  • Browser and device information

  • Pages visited

  • Referring website

  • Cookie preferences

  • Information provided through our contact forms or live-chat service

3. How we collect your information

We collect personal information when you.

  • Contact us or request a quotation

  • Use our Price Checker

  • Request an availability check

  • Make or enquire about a booking

  • Register Disney Vacation Club points with us

  • Enter into a guest or DVC Member agreement

  • Purchase a ticket for an event

  • Contact us by email, telephone, social media or live chat

  • Subscribe to our newsletter

  • Visit or interact with our website

  • Make a payment

We may also receive information from a matched DVC Member, Disney, Stripe, Squarespace or another service provider involved in administering your enquiry, reservation or payment.

4. How we use your information

We may use personal information to:

  • Respond to enquiries

  • Prepare and provide quotations

  • Check requested DVC availability

  • Match guests with suitable DVC Members

  • Arrange and administer Disney Vacation Club reservations

  • Provide guest details to the matched DVC Member

  • Enable the DVC Member to create and manage a Disney reservation

  • Process payments and payments to DVC Members

  • Verify DVC membership and reduce the risk of fraud

  • Administer event bookings

  • Communicate important information about enquiries, reservations or events

  • Provide customer service and deal with complaints

  • Maintain accounting, tax and business records

  • Operate, secure and improve our website

  • Send marketing communications where permitted

  • Comply with our legal obligations

  • Establish, exercise or defend legal claims

We will not sell your personal information.

5. Our lawful bases

We rely on the following lawful bases under UK data protection law.

Contract

We process information where it is necessary to provide a quotation, take steps requested before entering into a contract, arrange a reservation or fulfil an agreement with a guest or DVC Member.

Legal obligation

We process certain information where required to comply with tax, accounting, fraud-prevention or other legal obligations.

Legitimate interests

We may process information where necessary for our legitimate business interests, including:

  • Operating and improving our services

  • Responding to enquiries

  • Maintaining appropriate business records

  • Preventing fraud and misuse

  • Protecting our business and customers

  • Handling complaints and legal claims

We will only rely on legitimate interests where those interests are not overridden by your rights and interests.

Consent

We rely on consent for certain activities, including optional email marketing, non-essential cookies and the use of special-category information such as dietary, medical or accessibility information where required.

You may withdraw your consent at any time by contacting us.

6. Sharing your information

We only share personal information where necessary to provide our services, operate our business or comply with the law.

Your information may be shared with:

  • The DVC Member matched with your booking

  • Disney Vacation Club and other relevant Disney services

  • Squarespace, which hosts and supports our website

  • Stripe, which processes online payments

  • Our email and communications providers

  • Our live-chat provider

  • Professional advisers such as accountants, solicitors or insurers

  • IT, security and website-support providers

  • Government authorities, regulators, law enforcement agencies or courts where legally required

When a guest is matched with a DVC Member, the Member will receive the information required to make and manage the reservation. This may include the names and ages of guests, travel dates and contact information.

Stripe processes card payments on our behalf. DVC Exchange UK Ltd does not normally receive or store your complete payment-card details. Stripe processes payment information under its own privacy terms and security arrangements.

7. International transfers

Disney, Squarespace, Stripe and some of our other service providers may process personal information outside the United Kingdom, including in the United States.

Where personal information is transferred internationally, we will take reasonable steps to ensure that an appropriate legal safeguard is used. This may include UK-approved contractual protections, applicable adequacy regulations or another lawful transfer mechanism.

Guest information must be provided to Disney’s systems in the United States for a Disney Vacation Club reservation to be created and administered.

8. How long we retain information

We retain personal information only for as long as reasonably necessary.

We will normally retain:

  • Unsuccessful enquiries and quotations for up to 12 months after our last communication

  • Guest booking and payment records for up to six years after the booking is completed or cancelled

  • DVC Member agreements, booking and payment records for up to six years after the relevant transaction or the end of our working relationship

  • Event booking and payment records for up to six years

  • General correspondence for as long as needed to deal with the matter

  • Marketing information until consent is withdrawn or you unsubscribe

We may retain limited information for longer where necessary to comply with a legal obligation, resolve a dispute, prevent fraud or establish or defend a legal claim.

If someone unsubscribes from marketing, we may retain their email address on a suppression list to ensure that we respect that request.

9. Marketing communications

We may send news, offers and updates where you have asked to receive them or where another lawful marketing basis applies.

You can unsubscribe at any time by:

Unsubscribing from marketing will not prevent us from sending essential communications about an enquiry, booking, payment or event you have purchased.

We will not automatically add you to our marketing list simply because you requested a quotation or made a booking unless legally permitted.

10. Cookies and website information

Our website uses cookies and similar technologies to operate correctly, remember choices, understand website use and, where consent has been provided, support analytics or marketing.

Non-essential cookies will only be used where the appropriate permission has been obtained.

Further information is available in our separate Cookie Policy.

11. Keeping information secure

We use appropriate organisational and technical measures to protect personal information from:

  • Unauthorised access

  • Accidental loss

  • Misuse

  • Alteration

  • Disclosure

  • Destruction

Access to personal information is limited to people and service providers who reasonably require it for the purposes described in this policy.

No method of storing or transmitting information is completely secure, but we take reasonable steps to protect the information under our control.

12. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • Ask for a copy of your personal information

  • Ask us to correct inaccurate or incomplete information

  • Ask us to delete your information

  • Ask us to restrict how your information is used

  • Object to certain processing

  • Receive certain information in a portable format

  • Withdraw consent

  • Object at any time to the use of your information for direct marketing

These rights are subject to legal conditions and exemptions.

To exercise a right, contact:

support@dvcexchangeuk.co.uk

We may need to confirm your identity before completing a request. We will normally respond within one month.

13. Complaints

If you are concerned about how we use your personal information, please contact us first so that we can investigate.

You also have the right to complain to the Information Commissioner’s Office

www.ico.org.uk⁠
Telephone: 0303 123 1113

14. Links to other websites

Our website may contain links to websites operated by Disney and other third parties. Those organisations are responsible for their own privacy practices, and we recommend reviewing their privacy information.

15. Changes to this policy

We may update this Privacy Policy when our services, service providers or legal obligations change.

The latest version will be published on this page with a revised effective date.