This privacy notice explains how Heritage Trails processes personal data when you use timetreatseed.garden, make an inquiry, or arrange a guided architecture or photo walk. It follows the data lifecycle from collection through use, disclosure, retention, and deletion.
This introduction summarizes the subjects addressed in the policy and points to related internal guidance.
Data handling overview
This section outlines the categories of personal information we may process, where that information comes from, the types of cookies used on the site, and the controls available to you.
We may process name, email address, phone number if provided, inquiry message, tour date and group details, and any accessibility or dietary information you choose to share. We also process limited technical data such as server request metadata and browser or device information to keep the website secure and functioning properly.
We receive personal data when you contact us through the website, by email, by phone, or through other booking-related communication. Some technical data is generated automatically when you visit the site, and cookie-related preferences are recorded when you set them.
The confirmed cookie categories are essential cookies, which support basic site operation, and preference cookies, which store privacy choices. No confirmed analytics or advertising cookie use is included in this notice.
We use essential cookies for core site operation and preference cookies to remember privacy settings. Because tracking is not enabled, we do not rely on analytics or marketing cookies on the basis of the confirmed website facts. You can usually block or delete cookies in your browser, although essential functions may be affected.
We use personal data to respond to inquiries, review date and group details, confirm routes, manage booking payment, carry out equipment and weather checks, provide guided walk services, and share location recommendations where relevant. We also use technical data to secure the website, deliver pages correctly, and maintain basic site functionality.
We may share limited data with service providers that help us operate the website, process communications, or support technical delivery. These recipients are expected to use the data only for the services they provide to us and to handle it under appropriate confidentiality and security obligations.
We may disclose personal data to public authorities, courts, or other parties when necessary to comply with legal obligations, respond to lawful requests, protect our rights, or address security concerns. Any such disclosure is limited to what is reasonably necessary for the relevant purpose.
Subject to applicable law, you may have rights to access your data, correct inaccurate information, request deletion, object to certain processing, or ask for restriction of processing. Where we rely on consent, you may withdraw it for future processing based on that consent.
To exercise a privacy right, send a request through one of the contact channels listed in this policy and describe the data or action you are asking about. We will review the request, verify it where necessary, and respond within the timeframe required by applicable law.
We retain personal data for the period needed to manage inquiries, confirm bookings, provide the requested service, maintain security, and meet legal or accounting obligations. When the relevant purpose ends, we delete the data or anonymize it where appropriate, unless a lawful reason requires continued retention.
If we make material changes, we will update this page and use reasonable means to draw attention to the revision when appropriate. The updated version applies from the date it is posted unless a different effective date is stated.
When GDPR applies, we process personal data on a lawful basis appropriate to the purpose, such as responding to inquiries, managing bookings, meeting legal obligations, and protecting the security of the website. We limit processing to what is relevant for those purposes and avoid using data in ways that are incompatible with the original context.
Where GDPR applies, it governs our processing of personal data for users in the European Economic Area and related cross-border situations covered by law.
Where GDPR applies, you may request access, correction, deletion, restriction, objection, or portability, depending on the circumstances. We may ask for information needed to verify the request and to confirm that the response is sent to the correct person. If a request cannot be fully granted, we will explain the reason where the law requires it.
Use the contact details below for questions about this policy or the handling of your data.
