DAVID WHEATER TRADING AS 'ADVENTURES IN SCOTLAND'

 Website privacy policy

This website is operated by DAVID WHEATER TRADING AS 'ADVENTURES IN SCOTLAND'. The privacy of our users is extremely important to us and therefore we encourage all users to read this policy very carefully because it contains important information regarding:

• who we are;

• how and why we collect, store, use and share personal information;

• your rights in relation to your personal information; and

• how to contact us and supervisory authorities in the event that you have a complaint.

Who we are

DAVID WHEATER TRADING AS 'ADVENTURES IN SCOTLAND' ('we', 'us', 'our') collect, use and are responsible for storing certain personal information about you ('you', 'your', 'yours').

The personal information we collect and use

Personal information is information which you can be identified from (and does not include any anonymised forms of information).

1. Types of personal information

We may process the following types of personal information in relation to you:

• Contact details including your name, postal address, email address and telephone number.

• Secure bank details such as your full debit and credit card details.

• The specific information listed below in Appendix A

How your personal information is collected

This section describes how the above types of personal information are collected by us. Your personal information will be collected as follows:

1. Personal information obtained from you directly

We will sometimes obtain information from you directly, including when you:

Subscribe to a newsletter, to enquire and purchase a product or service, to create a user profile and use the 'contact' us chat service.

2. Personal information obtained by use of cookies or other automated means

We will sometimes obtain information via automated technology. This shall be by use of cookies and other similar technology. A cookie is a small text file which is placed onto your computer or electronic device when you access our website. Similar technologies include web beacons, action tags, local shared objects ('flash cookies') and single-pixel gifs. Such technologies can be used to track users' actions and activities, and to store information about them. Usually this will be in order to monitor and obtain information regarding:

How many times a user visits the website, which pages a user visits, traffic data and location data.

On the first occasion that you use our site we will ask whether you consent to our use of cookies and/or other similar processing technologies. If you do not consent, such technologies will not be used. Thereafter you can opt-out of using cookies at any time or you can set your browser not to accept cookies. However, some of our website features may not function as a result.

For further information on our use of cookies and other similar technologies, please see our policy document as described below.

3. Changes to the way in which we collect your personal information

In the event that we need to obtain personal information in relation to you from any other source than those described above, we shall notify you of this.

How we use your personal information

1. General purposes

In general, your personal information will generally be processed for the following purposes:

To enter into a contract for the sale of goods and services to you, to manage our business and website and to provide marketing and newsletters to you.

2. Monitoring

We may monitor communications, and in doing so we may obtain your personal information through this process. We will undertake monitoring in the following circumstances:

Calls and Emails may be monitored or recorded for quality assurance, training, fraud prevention, compliance and delivery of services.

3. Use of your information for marketing purposes

We have described above that one of the general purposes for which your data shall be processed is for our marketing purposes.

We wish to make you aware that you have the right to object or to opt-out of any direct marketing by:

Unsubscribing using the link contained on all emails and contacting us directly on the email david@adventuresinscotland.uk

4. Fraud prevention

We will undertake fraud checks via use of your personal information. This will involve sharing and working with Fraud Prevention Agencies. We do so to protect our own commercial interests (which is encompassed within our own legitimate interests as a business).

In general, your information will be used for fraud prevention purposes:

Our payment processor 'Stripe' when making a purchase or transaction via our website.

Fraud prevention agencies can hold your personal information for different periods of time, the maximum period being six years.

Lawful basis for processing of your personal information

We have described above the purposes for which we may process your personal information. These purposes will at all times be justified by UK data protection law.

1. General lawful bases

The lawful basis upon which we are able to process your personal data are:

(1) where we have your consent to use your data for a specific purpose;

(2) where it is necessary to enter into a legal contract with you or to perform obligations under a legal contract with you;

(3) where it is necessary to enable us to comply with a legal obligation;

(4) where it is necessary to ensure our own legitimate interests or the legitimate interests of a third party (provided that your own interests and rights do not override those interests). Wherever we rely upon this basis, details of the legitimate interests concerned shall be provided to you;

(5) where we need to protect your own vital interests (or the vital interests of another person); and/or

(6) where it is needed in the public interest (or where we are acting in our official functions), provided that the task or function has a clear basis in law.

In general, in order to meet the purposes we have described above, we will process your personal information where we have your express consent on each occasion that the data is processed.

2. Lawful bases specifically applicable to marketing

We will only ever use your personal information to send you marketing directly where we have your explicit consent (which will be obtained in a format separately to this policy).

Sharing of your personal information

On any occasion where any of your personal information is shared with any third party, we shall only permit them to process such information for our required purposes, under our specific instruction, and not for their own purposes. We are required to enter into a formal legal agreement to enable such sharing to take place.

We may ask for your consent to share your information with third parties for marketing purposes. Any such third parties will be specifically identified by name at the time your consent is obtained.

We will not share your personal information with any third parties for marketing purposes without your explicit consent to this.

In order to meet the other purposes listed above, we may also share your information with additional third parties. These third parties will be:

Our website provider 'Squarespace' and secure payments processor ‘Stripe’..

Necessity of information

Where information is requested from you and you do not provide this:

It may prevent you from using certain features of the website and/or receiving goods and services.

We will inform you at the point of collecting information from you, whether you are required to provide the information to us.

How long your personal information will be kept

Your personal information will only be kept for the period of time which is necessary for us to fulfil the above purposes.

We envisage that your personal information shall be retained by us as follows:

For no longer than is necessary to complete a transaction or service, or to communicate with you by newsletter.

After the period described above, your information shall be properly deleted or anonymised.

Keeping your information secure

We will ensure the proper safety and security of your personal information and have measures in place to do so. We will also use technological and organisation measures to keep your information secure. These measures are as follows:

User account access is controlled by a unique username and password; All data is stored on secure servers; Payment details are encrypted using SSL.

We have proper procedures in place to deal with any data security breach, which shall be reported and dealt with in accordance with data protection laws and regulations. You shall also be notified of any suspected data breach concerning your personal information.

Use of your information outside of the United Kingdom

We have described above the purposes and lawful bases for which we process your personal information. In order to meet those needs, we may transfer your personal information outside of the United Kingdom.

Your personal information may be transferred to:

United States (where our website provider Squarespace operates).

The recipient country or countries listed above have been deemed by the United Kingdom to have adequate protection in place so that the security of your personal information can be maintained.

Children

Our website is not intended for children (anybody under the age of 18). We do not intend to collect data from children.

Your rights

Under the UK General Data Protection Regulation you have a number of important rights free of charge. In summary, those include rights to:

(1) fair processing of information and transparency over how we use your use personal information;

(2) access to your personal information and to certain other supplementary information that this Privacy Statement is already designed to address;

(3) require us to correct any mistakes in your information which we hold;

(4) require the erasure of personal information concerning you in certain situations;

(5) receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit this information to a third party in certain situations;

(6) object at any time to processing of personal information concerning you for direct marketing;

(7) object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;

(8) object in certain other situations to our continued processing of your personal information, or ask us to suspend the processing procedure in order for you confirm its assurance or our reasoning for processing it;

(9) object to processing our your personal information where we are doing so in reliance upon a legitimate interest of our own or of a third party and where you wish to raise to an objection to this particular ground;

(10) otherwise restrict our processing of your personal information in certain circumstances;

(11) claim compensation for damages caused by our breach of any data protection laws; and/or

(12) in any circumstance where we rely upon your consent for processing personal information, you may withdraw this consent at any time.

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner's Office (ICO) on your rights under the General Data Protection Regulations.

If you would like to exercise any of these rights please contact our Data Protection Officer: DAVID WHEATER. in the following manner:

Via the website contact form at www.adventuresinscotland.uk or via email requests to david@adventuresinscotland.uk.

Your Requirements

If you would like this policy in another format (for example: audio, large print, braille) please contact us using the details below.

Complaints procedure

We hope that we can resolve any query or concern you raise about our use of your information.

The UK General Data Protection Regulation also gives you right to lodge a complaint with the supervisory authority. The supervisory authority in the United Kingdom is the Information Commissioner.

Changes to the privacy policy

This privacy policy was published on 8th January 2024 and last updated on 8th January 2024.

We may change this privacy policy from time to time and will notify you of any changes by:

By email if you have opted in to receive emails. By a notice on the website header or footer. By a notice in the blog section of the website.

Contacting us

 Our Data Protection Officer is DAVID WHEATER - david@adventuresinscotland.uk

Any requests or questions regarding the use of your personal information should be made to the above named person using the following method:

Via the website contact form at www.adventuresinscotland.uk or via email requests to david@adventuresinscotland.uk.

Sources of further Information

This policy provides key information to you regarding the processed of your information. For certain areas of our information processing, we have further comprehensive details contained in other documentation. This information can be located as follows:

Our policy regarding the use of cookies and other similar technologies entitled ADVENTURES IN SCOTLAND COOKIE POLICY can be located at:

On our Privacy Page:

APPENDIX A - Squarespace

We may collect the following information through our website supplier, Squarespace:

Analytics

This website collects personal data to power our site analytics, including:

• Information about your browser, network, and device

• Web pages you visited prior to coming to this website

• Your IP address

This information may also include details about your use of this website, including:

• Clicks

• Internal links

• Pages visited

• Scrolling

• Searches

• Timestamps

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

• These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.

• These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.

Visitor data

For customers

When you buy something on this website, we collect personal information from you to fulfill the order. We may collect information like your:

• Billing and shipping address

• Details relating to your purchase (for example, your shirt size)

• Email address

• Name

• Phone number

We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us.

Our payment processor Stripe will also collect payment information from you. You can read their privacy policy at [payment processor privacy policy URL].

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

For form block submissions

When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us. We also share this information with [] for storage and [with Zapier for data porting].

For member site subscribers

When you subscribe and purchase a membership on this website, we collect personal information from you to enable your member sites access. We may collect information like your:

• Billing and shipping address

• Details relating to your subscription

• Email address

• Name

• Phone number

We share this information with Squarespace, our website hosting provider, so that they can provide exclusive member site hosting services to us.

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

For website visitors

This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:

• Information about your browser, network and device

• Web pages you visited prior to coming to this website

• Web pages you view while on this website

• Your IP address

Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form.

For use of share buttons

This website includes share buttons which enable you to share pages or other content from this site to the following third party services: Facebook, Pinterest, Twitter and YouTube. If you click a share button, these third parties may receive your personal data, including:

• Information about your browser, network and device

• Details about the web page or content you shared or proposed to share

• Your IP address

• For use of blog comments

This website includes commenting functionality on some pages which enables you to post a comment. This website collects personal data when you post a comment, including:

• Your name (which will be displayed as part of your posted comment)

• Your email address (optional, to let you know if someone replies to your comment)

• Your website URL (optional)

This website includes “likes” functionality on some blog posts which enables you to “like” a post. This website collects personal data when you like a post to try to prevent the same person from liking the same post during the same visit, including:

• Information about your browser, network and device

• Details about the web page or content you shared or proposed to share

• Your IP address

• Customer accounts

If you create a customer account on this website, we collect personal information to improve our checkout experience and customer service.

This information may include your:

• Billing and shipping address(es)

• Details about your orders (for example, your shirt size)

• Email address

• Name

• Phone number

We share this information with Squarespace, our website hosting provider, so they can provide website services to us.

Emails

Abandoned cart emails

You’ll receive an automated email within 24 hours after you abandon your shopping cart, if all of the following occur:

• You enter your email address at checkout, or are logged into your customer account.

• You add a product which is in stock to your shopping cart.

• You close your browser or leave this website without completing your purchase.

• You can unsubscribe from these messages at the bottom of the email.

The email will link back to this website, where you can pick up where you left off and complete your purchase.

Marketing emails

We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with Squarespace, our email marketing provider, so they can send these emails on our behalf.

Order and account emails

We may email you with messages about your order or account activity. For example, we may email you to tell you that:

• You’ve created a customer account

• Your customer account password has been reset or updated

• You’ve made a purchase

• Your order has shipped

It’s not possible to unsubscribe from these messages.

We share your contact information with Squarespace, our website hosting provider, so they can send these emails to you on our behalf.

Fonts

This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including:

• Information about your browser, network, or device

• Information about this site and the page you’re viewing on it

• Your IP address

Squarespace Payments

When you make a purchase from us on this website, we use Squarespace Payments as our payment solution. Squarespace Payments is a fully integrated, native payment solution provided to us by our online store service provider Squarespace. Squarespace Payments makes use of the following third party service providers which will also receive your personal information and process it in accordance with their privacy policies:

Stripe - payment processing services. You can read Stripe’s privacy policy at https://stripe.com/privacy.

Sift - fraud monitoring and detection services. You can read Sift’s privacy policy at https://sift.com/service-privacy.