Privacy Policy

1. Introduction & Overview

This Privacy Notice explains how Travel Scotland Guide Ltd ("Company", "we", "us", "our") collects, uses, stores, and protects personal data when you visit our website travelscotlandguide.com or book travel services, walking tours, passes, and online masterclasses.

We operate strictly in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations (PECR).

2. Data Controller Information

The responsible Data Controller for processing your personal information is:

Travel Scotland Guide Ltd
45 Princes Street, Edinburgh, EH2 2BY, United Kingdom
Company Registration: SC684921 (Companies House Scotland)
Email: [email protected]
Telephone: +44 131 496 0842

3. Information We Collect

We may collect personal data from you in the following categories:

• Identity & Contact Data: Name, email address, phone number, residential address, and preferred travel dates submitted via inquiry or booking forms.
• Financial Data: Encrypted payment transaction metadata via UK FCA-regulated payment gateways (we do not store raw card numbers).
• Technical Data: IP address, browser type, device information, operating system, and cookie identifiers.
• Service Data: Tour preferences, dietary requirements (for day trip catering), and course progress.

4. Legal Basis for Processing

Under UK GDPR Article 6, we process your personal data under the following lawful bases:

• Contractual Necessity (Art. 6(1)(b)): To fulfill tour bookings, deliver masterclasses, or provide bespoke travel planner itineraries.
• Legitimate Interests (Art. 6(1)(f)): To improve website security, optimize user experience, and manage corporate accounting.
• Consent (Art. 6(1)(a)): For direct email newsletter communications or non-essential cookies.

5. Data Retention & Security

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, and reporting obligations under UK tax law (typically 6 years for transaction records). We maintain SSL/TLS encryption across all web traffic.

6. Your Data Protection Rights

Under the UK Data Protection Act 2018, you possess rights to:

• Access your personal data via a Subject Access Request (SAR).
• Request rectification of incorrect or incomplete data.
• Request erasure of personal data ('Right to be Forgotten').
• Object to or restrict data processing activities.
• Lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.