Privacy Policy

Last updated: December 2024

1. Introduction

Northern Heritage Tours ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our website or enquire about our tour services.

We are based in York, North Yorkshire, United Kingdom, and operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect personal information that you voluntarily provide to us when you:

  • Submit an enquiry through our contact form
  • Email us directly
  • Book a tour with us
  • Communicate with us by telephone

The information we collect may include:

  • Name
  • Email address
  • Telephone number
  • Country of residence
  • Tour preferences and travel dates
  • Group size and special requirements
  • Any other information you choose to provide in your enquiry

3. How We Use Your Information

We use your personal information solely for the following purposes:

  • To respond to your enquiries: We use your contact details to communicate with you about tour options, availability, and pricing.
  • To provide our services: If you book a tour, we use your information to arrange and deliver the travel experience.
  • To improve our services: We may analyse enquiries to better understand customer preferences and enhance our offerings.
  • To comply with legal obligations: We may process your data where required by law.

We do not:

  • Sell, rent, or trade your personal information to third parties
  • Use your information for marketing purposes without your explicit consent
  • Share your data with third parties except as necessary to provide our services (e.g., accommodation providers, tour guides)

4. Legal Basis for Processing

Under UK GDPR, we process your personal data on the following legal bases:

  • Consent: When you submit an enquiry form, you provide consent for us to process your information to respond to your request.
  • Contractual necessity: When you book a tour, we process your data to fulfil our contractual obligations to you.
  • Legitimate interests: We process data to improve our services and communicate effectively with customers.

5. Data Storage and Security

We take reasonable measures to protect your personal information from unauthorised access, loss, misuse, or alteration. Your data is stored securely using industry-standard practices.

Data retention: We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is typically retained for 24 months, whilst booking and tour data may be retained longer for business and legal purposes.

6. Cookies and Tracking

Our website currently does not use cookies or tracking technologies. We do not collect browsing data or use analytics tools. If this changes in the future, we will update this Privacy Policy and provide appropriate notice.

7. Third-Party Services

When you submit a contact form, your data is processed through Netlify Forms, a secure form handling service. Netlify operates in compliance with GDPR. For more information, see Netlify's Privacy Policy.

During tour bookings, we may share necessary information with third-party service providers (such as accommodation providers, guides, and transportation services) solely to deliver the tour experience you have booked.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of the personal data we hold about you.
  • Right to rectification: You can request that we correct any inaccurate or incomplete data.
  • Right to erasure: You can request that we delete your personal data, subject to legal obligations.
  • Right to restrict processing: You can request that we limit how we use your data.
  • Right to data portability: You can request a copy of your data in a structured, commonly used format.
  • Right to object: You can object to our processing of your data in certain circumstances.
  • Right to withdraw consent: Where we process data based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us using the details below.

9. Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. International Data Transfers

We are based in the United Kingdom and primarily serve customers from the United States, Canada, Australia, and New Zealand. If you are located outside the UK, please be aware that your information may be transferred to and processed in the UK. We ensure that any such transfers comply with applicable data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact us:

Northern Heritage Tours
York, North Yorkshire
United Kingdom
Email: info@northernheritagetours.com

Your data protection rights are important to us. If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority. Visit ico.org.uk for more information.