Privacy Policy

Last updated: January 2024

Introduction

Ash-wren ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our tour services.

Information We Collect

We may collect information about you in various ways, including:

Personal Data

When you book a tour or contact us, we may collect:

• Name and contact information (email address)
• Tour preferences and booking details
• Communication history with our team
• Payment information (processed securely through third-party providers)

Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• Browser type and version
• Operating system
• Pages visited and time spent on pages
• Referring website addresses
• IP address (anonymised where possible)

How We Use Your Information

We use the information we collect for the following purposes:

• To process and manage tour bookings
• To respond to enquiries and provide customer support
• To send booking confirmations and tour-related communications
• To improve our website and services
• To comply with legal obligations

Legal Basis for Processing

Under UK data protection laws, we rely on the following legal bases:

• Contract performance: processing necessary to fulfil tour bookings
• Legitimate interests: improving our services and website functionality
• Consent: where you have explicitly agreed to receive communications
• Legal compliance: where required by law

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Booking records are retained for seven years to comply with financial record-keeping requirements. You may request deletion of your data at any time, subject to legal retention requirements.

Data Sharing

We do not sell your personal information. We may share data with:

• Service providers who assist in operating our website and services
• Payment processors for secure transaction handling
• Legal authorities when required by law

Your Rights

Under UK data protection laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent at any time

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

International Transfers

Your data is primarily stored and processed within the United Kingdom. If any data transfer to other countries occurs, we ensure appropriate safeguards are in place to protect your information.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Email: [email protected]

Address: 47 Marchmont Street, Bloomsbury, London WC1N 1AP, United Kingdom