Celtic Trails Walking Holidays Privacy Statement
1. Who We Are
In this policy, “we”, “us” and “our” refer to Celtic Trails Ltd.
2. How We Collect Information
When you make an initial enquiry, we ask for an e-mail address/telephone number so that we can respond to your requests and queries.
When you book a holiday we require additional information regarding your travel plans and payment information. This allows us to process your booking, send you your holiday details and provide a means of contact should we or any of our representatives need to contact you during your holiday.
We will also ask you if you wish to receive marketing information from us.
By providing your personal data, you agree to the storing and processing of your data to the extent of what is deemed necessary for us to deliver our service to you.
3. How We Use Your Information
We may use your information to:
- process a booking that you have made;
- to carry out our obligations arising from any contracts entered into by you and us;
- contact you during your holiday;
- seek your views or comments on the services we provide;
- notify you of changes to our services;
- send you communications which you have consented to receive
- these may include information about campaigns, appeals, promotions of our associated companies goods and services; information about competitions; process a grant or job application.
4. How We Retain Information
We retain data for the purposes of ease of communication between us and clients. Following the use of our services, we will hold that information in the event that you choose to use our service again. We review our retention periods for personal information on a regular basis. We do not hold this data indefinitely ‘just in case’, and you may request to have your personal data removed from our system – the conditions of which can be found in section 8c: ‘The Right to Erasure’.
If you contact us, asking to be unsubscribed from an email or postal mailing list, your details will be held on a ‘opt-out’ list. We hold this data to check against other e-mail and postal mailing lists, ensuring that you won’t receive direct marketing as per your stated preference.
If we archive any information in an offline format, your request to access personal data is still applicable.
5. How we Secure Your Information
When you provide our personal information, we take adequate steps to ensure that your information is treated securely. Credit or debit card details are encrypted and protected through our Secure Online Payment provider, and to help protect against fraud we are PCI compliant.
All other details are kept on a secure network. Only authorised members of staff can access, alter, disclose or destroy personal data. Those people only act within the scope of their authority and if personal data is accidentally lost, altered or destroyed, it can be recovered to prevent any damage or distress to the individuals concerned.
6. Who We Share Your Information With
We may need to pass your information to our third party service providers, agents, subcontractors and other associated organisations for the purposes of delivering our contracted service to you. However, when we use third party service providers and we disclose only the information that is necessary to deliver that particular service.
We will not release your information to any other parties beyond the aforementioned, unless we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
7. Types of Data We Collect
7 (a): Cookies
7 (b): Google Analytics
When someone visits our website we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.
8. Your Rights
Here, we have summarized the rights that you have under data protection law. Some of the rights are complex, and not all of the details have been included in our summaries. Accordingly, you should read the relevant laws and guidance from the regulatory authorities for a full explanation of these rights.
8 (a): Request Information
If you wish to access any of the details we hold on you, please get in contact with us at email@example.com. We’ll be more than happy to provide the requested information, although repeat requests may require an administrative fee.
8 (b): Updating Information
You have the right to have us rectify incorrect personal details, as well as to have any incomplete information about you added.
8 (c): The Right to Erasure
The Right to Erasure or ‘right to be forgotten’ ensures the right to the erasure of your personal data without undue delay, and we will be happy to comply with requests that include: the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed; you withdraw consent to consent-based processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; and the personal data have been unlawfully processed.
However, there are exclusions of the right to erasure and we may refuse the request under the following circumstances: for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
8 (d): Your Choice
You have a choice about whether or not you wish to receive information from us. If you do not want to receive direct marketing communications from us (i.e. the latest in developing new walking routes, competitions and walking related articles), then you can select your choices by ticking the relevant boxes situated on the form(s) on which we collect your information.
We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent. We will not contact you for marketing purposes by post if you have indicated that you do not wish to be contacted. You can change your marketing preferences at any time by contacting us by email: firstname.lastname@example.org or telephone on 01291 689 774.
9. Links to Other Web Sites
10. Review of this Policy
We keep this Policy under regular review. This Policy was last updated in May 2018.
If you have any further queries about how we protect or process your data, please contact us.