This Privacy Policy explains how Heritage Trails processes personal data in connection with its website, enquiries, and guided architecture and photo walk services. It follows the data lifecycle from collection through use, sharing, retention, and deletion.
This introduction summarizes the subjects addressed in the policy and points to related internal guidance.
Data handling overview
This section outlines the categories of personal information we may process, where that information comes from, the types of cookies used on the site, and the controls available to you.
Depending on how you interact with Heritage Trails, we may process your name, email address, phone number if you provide it, inquiry message, tour date and group details, and any accessibility or dietary information you choose to share. We also process limited technical data such as server request metadata and browser or device information to keep the website working securely and reliably.
We receive personal data when you submit a contact or booking request, communicate with us by email or phone, or provide details needed to review a route, date, group size, or practical requirements. Technical data is generated through your use of the website and its security and delivery functions.
Our cookie use is limited to essential cookies that support site operation and preference cookies that remember privacy choices. We do not confirm the use of analytics cookies or marketing cookies on this website.
We use cookies only for essential site operation and to remember privacy preferences. If your browser blocks or removes cookies, some site functions may not work as intended, but the website should remain available for basic use.
We use personal data to respond to contact requests, review tour dates and group details, confirm route and language preferences where relevant, manage booking and payment administration, carry out website security, and support technical delivery. Where you provide accessibility or dietary information voluntarily, we use it only to assess whether a requested route or service arrangement can be handled appropriately.
We may share limited personal data with service providers that support website hosting, technical delivery, security, or communication handling. Any such recipient is expected to process the data only for the relevant operational purpose and under appropriate confidentiality and security obligations.
We may disclose personal data to public authorities, courts, or other competent bodies when required by law, regulation, or a lawful request. We may also share information where necessary to establish, exercise, or defend legal claims, or to comply with record-keeping obligations.
You may have rights relating to your personal data, including the ability to request access, correction, deletion, restriction, or objection in appropriate circumstances. Where we rely on consent, you may also withdraw it for future processing. Some requests may be limited by legal duties or by the need to keep records connected with a booking or service interaction.
To exercise a privacy right, send a clear request through one of the contact channels listed in this policy and describe the data or activity concerned. We will assess the request, respond within the applicable legal timeframe, and explain any limitation or refusal where the law allows us to do so.
We retain personal data for the period needed to respond to enquiries, manage bookings, provide the requested service, maintain security, resolve disputes, and meet legal or accounting obligations. When data is no longer needed for those purposes, we delete it or anonymise it where appropriate.
If we make material changes, we will update this page and may use reasonable means to draw attention to the revised notice when appropriate. The version in force is the one published on the website at the relevant time.
Heritage Trails processes personal data as a controller for website enquiries, booking administration, service delivery, security, and related operational needs. Where GDPR applies, processing is carried out on a lawful basis appropriate to the purpose, such as performance of a contract, steps taken at your request before a booking, compliance with legal obligations, or our legitimate interests in operating and protecting the website and services.
Where GDPR applies, it governs our processing of personal data relating to individuals in the European Economic Area and, in relevant cases, to processing carried out in connection with our services.
Where GDPR applies, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to receive data portability in appropriate cases. If processing is based on consent, you may withdraw it for future processing. We may need to verify your identity and assess whether any legal exception limits a request.
