Privacy & Cookies Policy

This privacy policy is for the website Arranwildwalks.com and governs the privacy of browsers and customers of the site. The purpose of this policy is to explain to you how we control, process, handle and protect your personal information while browsing or using this website, and booking activities with us, including your rights under current laws and regulations. 

If you do not agree to the following policy you may wish to cease viewing / using this website.

Policy key definitions:

  • “I”, “our”, “us”, or “we” refer to the business, [Arran Wild Walks, Lucy Wallace ML, Stuart Wallace ML].
  • “you”, “the user” refer to the person(s) using this website and customers who book activities with us.
  • GDPR means General Data Protection Act.
  • PECR means Privacy & Electronic Communications Regulation.
  • ICO means Information Commissioner’s Office.
  • Cookies mean small files stored on a users computer or device.

Processing of your personal data

We promise to follow the following data protection principles:

  • Personal information must be fairly and lawfully processed
  • Personal information must be processed for limited purposes
  • Personal information must be adequate, relevant and not excessive
  • Personal information must be accurate and up to date
  • Personal information must not be kept for longer than is necessary
  • Personal information must be processed in line with the data subjects’ rights
  • Personal information must be secure
  • Personal information must not be transferred to other countries without adequate protection

Your individual rights

Under the GDPR your rights are as follows:

  1. The right to be informed
  2. The right of access
  3. The right to rectification
  4. The right to erasure
  5. The right to restrict processing
  6. The right to data portability
  7. The right to object
  8. Rights in relation to automated decision making and profiling.

You also have the right to complain to the ICO (www.ico.org.uk) if you feel there is a problem with the way we are handling your data.

We handle subject access requests in accordance with the GDPR.

Personal information you provide

When you use our Services, we collect information from you in a number of ways.  

When a visitor requests information from this website using our enquiry form or when they subscribe using a subscription form, we collect their name and email address and non-personally identifiable information about the request which includes the IP address of the computer making the request and the time and date of the request.

When you contact us to make a booking, we collect your name, email address, and other relevant information connected to your booking that you provide us with. We collect this information to ensure that we can provide the best possible service to you when delivering your activity. 

Information automatically collected about you

When a visitor accesses this website, we automatically collect certain non-personally identifiable information about the request. This information is stored by cookies and other session tools. This information includes the IP address of the computer making the request and the time and date of the request, the type of web browser being used, and, sometimes, the page from which the visitor is coming. The information does not contain the visitor’s name or email address.

How we use your personal data 

We use your Personal Data in order to:

  • Provide our information, news and promotions to you.
  • Enhance your customer experience.
  • Fulfil an obligation under law or contract.

We use the following lawful bases in order to process your personal data:

Consent

You explicitly give your consent to a specific kind of processing of your personal information.

With your consent we process your personal data:

  • to answer any specific queries or questions about our services. 
  • to send you newsletters and campaign offers if you have subscribed to the newsletter. 
  • for other purposes we have asked your consent for

You can unsubscribe from newsletters through an online system, which you will find links to in any subscription confirmation email or marketing message we sent to you since May 2018.

We will continue to process your information until you withdraw consent or it is determined your consent no longer exists.

Your personal data under the consent lawful basis is not shared with any third parties.

Legitimate interests

The processing of the personal data is a legitimate, expected behaviour of a business.

On the basis of legitimate interest we process your personal data for the following purposes:

  • Update you about products or services. 
  • Manage your booking and payment
  • Send you information about your activity booking

If you subscribe to our newsletter, you can unsubscribe or manage your personal information at any time through an online system, which you will find links to in any subscription confirmation email or marketing message we sent to you since.

We will continue to process your information until you withdraw consent or it is determined your consent no longer exists.

Legal obligation

The processing of the personal data is required for legal reasons (e.g., a VAT or Tax ID).

On the basis of legal obligation we process your personal data on the basis in order to fulfil obligation rising from law and/or use your Personal Data for options provided by law.

We reserve the right to anonymise personal data gathered and to use any such data. We will use data outside the scope of this Policy only when it is anonymised.

Additional purposes

We might process your personal Data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was gathered, for example using the IntuitQuickbooks secure online invoicing system (Intuit Privacy Statement). To do this, we will ensure that:

  • the link between purposes, context and nature of Personal Data is suitable for further processing
  • the further processing would not harm your interests and
  • there would be appropriate safeguard for processing

We will inform you of any further processing and purposes.

If, as determined by us, the lawful basis upon which we process your personal information changes, we will notify you about the change and any new lawful basis to be used if required. We shall stop processing your personal information if the lawful basis used is no longer relevant.

Cookies we use

We use cookies on this website to provide you with a better user experience. We do this by placing a small text file on your device / computer hard drive to track how you use the website, to record or log whether you have seen particular messages that we display, to keep you logged into the website where applicable, to display relevant adverts or content, referred you to a third party website.

Some cookies are required to enjoy and use the full functionality of this website.

You can remove cookies stored in your computer via your browser settings. Alternatively, you can control some 3rd party cookies by using a privacy enhancement platform such as optout.aboutads.info or youronlinechoices.com. For more information about cookies, visit allaboutcookies.org.

Data security and protection

We do our best to keep your personal data safe.  We use safe protocols for communication and transferring data (such as HTTPS). We use anonymising and pseudonymising where suitable. We monitor our systems for possible vulnerabilities and attacks.

Even though we try our best we can not guarantee the security of information. However, we promise to notify suitable authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything we reasonably can to prevent security breaches and to assist authorities should any breaches occur.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

Transparent Privacy Explanations

We have provided some further explanations about user privacy and the way we use this website to help promote a transparent and honest user privacy methodology.

PComments made on posts on this website

 

Email marketing messages & subscription

Under the GDPR we use the consent lawful basis for anyone subscribing to our newsletter or marketing mailing list. We only collect certain data about you, as detailed in the “Processing of your personal data” above. Any email marketing messages we send are done so through an EMS, email marketing service provider. An EMS is a third party service provider of software / applications that allows marketers to send out email marketing campaigns to a list of users.

Email marketing messages that we send may contain tracking beacons / tracked clickable links or similar server technologies in order to track subscriber activity within email marketing messages. Where used, such marketing messages may record a range of data such as; times, dates, I.P addresses, opens, clicks, forwards, geographic and demographic data. Such data, within its limitations will show the activity each subscriber made for that email campaign.

Any email marketing messages we send are in accordance with the GDPR and the PECR.

You can unsubscribe or manage your personal information at any time through MailChimp, for which you will find links to in any subscription confirmation email or marketing message we sent to you since.

Our EMS provider is MailChimp. We hold the following information about you within our EMS system;

  • Email address
  • Name
  • Subscription time & date
  • How subscribed

The MailChimp privacy policy can be viewed at: https://mailchimp.com/legal/privacy/

Contact information

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to info@arranwildwalks.co.uk.

Changes to this Privacy Policy

We reserve the right to make change to this Privacy Policy.
Last modification was made 23rd May 2018.