This Privacy Policy explains how Heritage Trails processes personal data when you use the website, make an enquiry, or book a guided culinary or market experience.
Personal data is used to respond to enquiries, manage date and group requests, collect dietary information, confirm venue availability, prepare route and tasting details, process booking payments, arrange meeting-point check-in, deliver guided tasting walks, provide post-tour recommendations where relevant, maintain records, secure the website, and meet legal and accounting obligations.
We may disclose data to payment processors, website hosting and technical support providers, communication tools, and other operational partners that help us manage bookings and website functions. These parties are expected to handle data under appropriate confidentiality and security obligations.
We may share personal data with public authorities, courts, or other parties when required by law, to protect our rights, to prevent fraud or misuse, or to comply with a valid legal process.
We may process identification and contact details, booking and payment information, group size and date preferences, dietary information you choose to provide, meeting-point and route details, communication records, and technical data such as device and usage information when you use the website.
We receive data from booking requests, email or phone enquiries, payment-related interactions, and information entered during consultation or check-in. We may also collect limited technical data automatically through the website and cookies.
Session cookies help the site function during a visit, persistent cookies remember basic settings, and analytics cookies help us understand how the site is used. We do not rely on cookies to collect more information than is needed for these purposes.
You may block or delete cookies through your browser settings and, where available, through any cookie controls on the site. Essential cookies may still be needed for basic site operation and security.
Subject to legal conditions, you may request access to your data, correction of inaccurate information, deletion, restriction of processing, or objection to certain processing activities. You may also raise concerns about how your data is handled.
To exercise a privacy right, use the contact details in this policy and describe your request clearly. We may ask for information needed to confirm your identity and to locate the relevant records before responding.
We keep personal data only for as long as needed to manage bookings, provide the service, maintain business records, resolve disputes, and meet legal obligations. When data is no longer required, we delete it or anonymise it where appropriate.
The updated version will apply from the date it is posted unless a different effective date is stated. We recommend reviewing this policy periodically to stay informed about how we handle personal data.
Where the GDPR applies, we process personal data on a lawful basis such as performance of a contract, compliance with legal obligations, legitimate interests, or consent where required. The relevant basis depends on the context of the interaction.
If you are located in the European Economic Area, the GDPR may apply to our processing of your personal data.
Where applicable, you may have rights to access, rectify, erase, restrict, or object to processing, and to request data portability. You may also withdraw consent where processing is based on consent, without affecting prior lawful processing.
