Privacy Policy

1. Who We Are

For the purposes of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR), the Data Controller is Adventure Beyond Ltd.

If you have any questions about this policy, please contact us at: [fun@adventureebyond.co.uk].

2. Information We Collect

To provide you with our adventure services, we may collect the following:

• Identity Data: Names, date of birth, and gender.
• Contact Data: Billing address, email address, and telephone numbers.
• Travel Documents: Passport details (for expeditions requiring permits/manifests).
• Medical / Special Category Data: Details of medical conditions, allergies, or injuries. This is collected strictly for the purpose of health and safety during your trip.

3. How We Use Your Data

We only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Performance of Contract: To process your booking, manage your trip, and ensure we can deliver the service you paid for.
• Legal Obligation: To comply with tax laws or safety regulations (e.g., AALA).
• Vital Interests: To protect your life or health in an emergency (e.g., sharing medical data with emergency services).

Note: We do not allow the automatic logging of your personal data for advertising purposes, and we do not sell your data to third parties.

4. Sharing Your Data

On some of our trips and expeditions, it is necessary to share your data with third parties to facilitate the activity. This may include:

• Permit Issuers & Authorities: To obtain necessary travel permits, we may need to share your name, passport number, and contact details with local authorities or governing bodies.
• Accommodation & Transport Providers: To secure your bookings.

We do not ask for "assumed consent" for this; rather, this data transfer is necessary for the performance of the contract. Without providing this data, we may be unable to fulfil the booking.

5. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for.

• Trip Documentation: Client dossiers, manifests, and passport copies collected for specific expeditions will be securely destroyed/deleted upon the successful completion of your holiday.
• Financial Records: We are legally required to keep basic information about our customers (including Contact, Identity, and Transaction Data) for six years for tax purposes.

6. Medical Information

We require you to disclose relevant medical conditions for your own safety. This is classified as "Special Category Data."

This information is treated with the utmost sensitivity. It is stored securely and is only accessible by the specific staff members or instructors leading your trip to ensure your safety. Once the trip is complete and no incident has occurred, this sensitive data is securely deleted.

7. Your Legal Rights

Under UK data protection laws, you have rights in relation to your personal data, including:

• Right to Access: You can request a copy of the data we hold about you.
• Right to Correction: You can ask us to fix incorrect data.
• Right to Erasure: You can ask us to delete your data (where we do not have a legal reason to keep it).
• Right to Complain: You have the right to make a complaint at any time to the Information Commissioner's Office (ICO).