Privacy Outline

This Privacy Outline explains how Harbourmile Bristol Tours (“we”, “our”, “us”) handles personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller is Harbourmile Bristol Tours, located at 7 Baldwin Street, Bristol BS1 1NA, England. For any privacy-related questions, contact [email protected].

2. Data We Collect

Basic contact details provided through our contact form (name, email, phone).
Message content related to your enquiry, tour request, or feedback.
Technical information like browser type, device type, and general analytics (non-identifiable).

3. Purpose of Processing

We use your information to respond to messages, process tour requests, and maintain communication about route updates if you specifically request it. Data is not used for marketing or transferred to unrelated third parties.

4. Legal Basis

Our processing relies on Article 6(1)(b) — necessary for performance of a service, and Article 6(1)(f) — legitimate interest in maintaining contact records and operational safety.

5. Data Storage

Data is stored securely on UK-based servers with limited access. We retain correspondence for up to 12 months, after which it may be deleted or anonymised unless legally required otherwise.

6. Cookies and Analytics

We use minimal cookies solely to maintain basic session and form functionality. Full details are available in the Cookie Options page.

7. Your Rights

Right to access your data
Right to rectification or erasure
Right to restrict or object to processing
Right to data portability

To exercise these rights, email us at [email protected]. Identification may be required to confirm authenticity.

8. Third-Party Access

We do not sell or rent personal data. Limited access may be granted to service providers (such as email hosting) who operate under strict confidentiality agreements within the UK or EEA.

9. Children’s Data

Our service is directed at adults planning or managing tours. We do not knowingly collect data from anyone under 16 years old.

10. International Transfers

We do not transfer personal data outside the United Kingdom or EEA.

11. Data Security

We maintain encrypted connections (HTTPS), regular patching, and internal access controls to minimise risk of unauthorised use or disclosure.

12. Updates

This outline may change as privacy law evolves. The revision date appears at the bottom of the page.

Last updated: October 2025

For all privacy matters: [email protected] or call 441 117 736 492.