This privacy policy explains how Heritage Trails handles personal data when you use the website, send an inquiry, or arrange a guided architecture or photo walk. It also explains the limited cookie use on the site and the choices available to you.
This introduction outlines how information is handled, what rights may apply, and where to direct policy-related questions.
We may process the name, email address, phone number if provided, inquiry message, tour date and group details, and any accessibility or dietary information you choose to share. We also process limited technical data such as server request metadata and browser or device information.
We receive personal data when you contact us through the website, by email, or by phone, and when you submit booking or inquiry details. Some technical data is generated automatically when you use the site.
We use cookies for essential site operation and to remember privacy preferences. We do not confirm analytics or marketing cookies as active on this website.
You can manage cookies through your browser settings and, where available, through the site’s privacy preference controls. Essential cookies are used to keep the website working, and preference cookies help remember your selected settings.
Data processing overview
This section outlines the primary purposes for processing personal data, the categories of recipients involved in service delivery, and the legal context that may govern disclosure.
We process personal data to answer inquiries, manage booking requests, confirm routes and timing, handle payment-related administration, support website security, and keep the site technically functional. Where relevant, we also use information to review accessibility or practical route needs for a specific guest and route.
We may share personal data with service providers that help us operate the website, process messages, support technical delivery, or maintain security. These parties are expected to use the data only for the services they perform for us.
We may disclose personal data if we are required to do so by law or if disclosure is necessary to protect our rights, respond to lawful requests, or address security and fraud concerns.
Depending on the situation, you may have the right to access your data, correct inaccurate details, ask for deletion, object to certain processing, or request restriction of use. If we rely on consent for a specific activity, you may withdraw that consent for future processing.
To exercise a right, send a clear request through one of the contact channels listed in this policy and describe the data or action you are asking about. We may need additional information to verify your identity and understand the request before we act on it.
Inquiry and booking records are kept for the period needed to manage the request, complete the service, and meet legal, accounting, or dispute-handling obligations. When data is no longer needed, we delete it or anonymize it where appropriate.
If we make material changes, we will update the policy on the website and use reasonable steps to draw attention to the update when appropriate. The latest version applies from the date it is posted unless stated otherwise.
Where the GDPR applies, we process personal data on a lawful basis and only for the purposes described in this policy. We keep the scope of processing limited to what is needed for communication, booking handling, site security, and technical delivery.
Where applicable, you may ask for access, correction, deletion, restriction, objection, or portability of your personal data. You may also withdraw consent where processing relies on consent, without affecting earlier lawful processing.
