Privacy Policy

1. Data Controller Information

Discover Yorkshire Tours & Guides Ltd (Company Registration Number: CRN 14982731, registered office: 12 Stonegate, York, YO1 8AS, United Kingdom) is the Data Controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

We may collect and process the following categories of personal information when you interact with discover-yorkshire.com:

• Identity and Contact Data: Name, email address, telephone number, and postal address submitted via contact forms or order queries.
• Technical and Usage Data: IP address, browser type, operating system, pages visited, time spent on site, and referrer headers.
• Transactional Data: Purchase history regarding digital travel guides, course registrations, or concierge services.

3. Legal Basis for Processing

We process your personal information under the following legal bases:

• Contractual Necessity: To fulfill travel guide digital downloads, concierge bookings, or masterclass enrollments requested by you.
• Legitimate Interests: To improve our website performance, respond to user inquiries, prevent fraud, and maintain network security.
• Consent: Where you have explicitly opted into receiving our digital travel newsletter or marketing communications.

4. Data Retention & Security

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including statutory accounting and tax obligations under UK law (typically 6 years). We implement strict technical and organizational safeguards, including SSL encryption and restricted administrative access.

5. Your Rights Under UK Data Protection Law

Under the UK GDPR, you have the following rights regarding your personal information:

• Right to access your personal data (Subject Access Request).
• Right to rectification of inaccurate or incomplete records.
• Right to erasure ('Right to be forgotten').
• Right to restrict or object to data processing.
• Right to data portability.

To exercise any of these rights, please contact our Data Protection Officer at [email protected].

6. Third-Party Services & External Links

Our website may contain links to external historical or park authority websites. We are not responsible for the privacy practices of external domains. We encourage you to read the privacy notices of every site you visit.

7. Complaints to the Information Commissioner's Office (ICO)

If you believe our data processing violates UK data protection law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.