This Privacy Policy explains how TourCrafted processes personal data in connection with its website and related booking and excursion services.
Where GDPR applies, we process personal data on a lawful basis such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. We apply data minimisation and purpose limitation and do not use personal data in a way that is incompatible with the reasons for which it was collected.
If you are located in the European Economic Area, the General Data Protection Regulation may apply to our processing of your personal data.
Where applicable, you may request access, rectification, erasure, restriction, portability, or objection to processing. If processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You may also lodge a complaint with the competent data protection authority.
Subject to applicable law, you may have rights to be informed about our processing, access your data, correct inaccurate information, request deletion, object to certain processing, and request restriction or portability in appropriate cases. Some requests may be limited where we must retain information for legal, accounting, or security reasons.
To exercise your rights, provide enough information for us to identify the relevant data and assess the request. We may ask for additional details to confirm identity or clarify the scope of the request. We will respond within the period required by applicable law and explain any lawful refusal or limitation.
We keep personal data only for as long as needed for the relevant purpose, including booking administration, customer communication, accounting, dispute handling, and compliance with legal obligations. When data is no longer required, it is deleted, anonymised, or otherwise securely handled according to our retention practices.
When we make material changes, we will update the policy text and may provide additional notice where appropriate. The revised version applies from the date indicated in the policy unless a different effective date is stated.
We may collect identification and contact details, booking and payment-related information, trip preferences, fitness or route suitability details you choose to provide, communication records, and technical data such as device and usage information. Where needed for a specific excursion, we may also process information relevant to meeting arrangements, weather checks, access conditions, and return planning.
We receive data directly from you when you submit a request, make a booking, communicate with us, or provide details for route suitability review. We also collect limited technical data automatically through the website and may receive operational information generated during payment handling, scheduling, or service administration.
We may use strictly necessary cookies, preference cookies, and limited analytics cookies. Necessary cookies support core site functions, preference cookies remember selected settings, and analytics cookies help us understand general site use and improve content and navigation. We do not use cookies to collect more information than is needed for these purposes.
You can manage cookies through your browser settings and, where available, through the cookie controls presented on the website. Some cookies are necessary for basic site functions and may not be fully disabled without affecting performance or availability of certain features.
We use personal data to respond to enquiries, manage bookings, assess date and fitness requests, review route suitability, confirm meeting and return plans, process payments, provide excursion services, handle customer support, maintain records, improve website performance, and meet legal, accounting, and security obligations.
We may share personal data with service providers that assist with website hosting, communications, payment processing, booking administration, and technical support. We may also share information with professional advisers or other operational partners when needed to deliver services or manage business functions, subject to appropriate confidentiality and data protection obligations.
We may disclose personal data where necessary to comply with law, respond to lawful requests from public authorities, protect our rights or the rights of others, or support the establishment, exercise, or defence of legal claims.
