Privacy Policy & UK GDPR Declaration
Effective Date: 1 January 2026 | Last Updated: July 2026
Explore Wales Guide Ltd ("we", "us", or "our") is committed to protecting and respecting your privacy in full compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).
1. Data Controller Information
The data controller responsible for personal data processed through explorewalesguide.com is:
Explore Wales Guide Ltd
14 High Street, Conwy, LL32 8DE, United Kingdom
Company House Registration: 14892041
Data Protection Officer Email: [email protected]
Telephone: +44 1492 581902
2. Personal Data We Collect
We may collect, process, and store the following categories of personal data:
- Identity & Contact Data: Full name, email address, telephone number, and billing address provided during tour bookings or contact form submissions.
- Travel & Expedition Safety Data: Emergency contact details, fitness levels, medical conditions, or dietary requirements relevant to guided mountain or outdoor activities.
- Transaction & Payment Data: Payment card details processed securely via PCI-DSS compliant third-party payment gateways (e.g. Stripe, PayPal). We do not store raw card numbers on our servers.
- Technical & Analytical Data: IP addresses, browser types, device information, operating system, and interaction data collected anonymously via essential cookies.
3. Legal Bases for Processing Data
We process your personal information under the following legal bases:
- Contractual Necessity: To fulfill tour reservations, deliver digital travel guides, or process course enrollments.
- Legal Obligations: To comply with UK statutory accounting, tax, and safety regulations.
- Legitimate Interests: To improve our travel services, respond to user inquiries, and maintain website security.
- Explicit Consent: Where you opt-in to receive email newsletters or marketing updates. You may withdraw consent at any time.
4. Data Retention & Third-Party Sharing
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to satisfy statutory tax obligations (up to 6 years for accounting records). We never sell, rent, or lease customer data to third parties. Data is shared exclusively with accredited service partners (e.g. certified mountain guides escorting your trip, secure payment processors).
5. Your Rights Under UK GDPR
Under UK data protection law, you possess the following rights:
- The right to access a copy of personal data held about you.
- The right to request rectification of inaccurate or incomplete data.
- The right to request erasure ("right to be forgotten") under certain conditions.
- The right to restrict or object to processing of your data.
- The right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.