Make it stand out.
Privacy Policy
Adventure Climbing Company is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This privacy policy sets out how Adventure Climbing Company uses and stores all information given when contacted through any media form, e.g. website, email, social media. Adventure Climbing Company reserve the right to update this policy when required. Any changes can be viewed on the company website. This policy is effective from 01 March 2025.
What We Collect
Data may be collected by Adventure Climbing Company from you as a data processor directly from you by telephone, email, written correspondence or other electronic media.
When you book or contact us, we may collect:
Name and contact details
Date of birth
Emergency contact details
Relevant medical or dietary information (for safety purposes)
Payment details
Adventure Climbing Company will only use this information for legitimate business activity with you, and we will not contact you for marketing purposes without your prior consent. We will only collect information necessary to deliver safe and professional outdoor activities.
Website Visitors
This website is hosted by Squarespace. Squarespace collects personal information when you visit this website, including:
Information about your browser, network and device
Web pages you visited prior to coming to this website
Web pages you view while on this website
Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. You can read more about how Squarespace uses your data (site usage information of end users) for its own purposes in their Privacy Policy.
Analytics
This website collects personal information to power our site analytics, including:
Information about your browser, network, and device
Web pages you visited prior to coming to this website
Your IP address
This information may also include details about your use of this website, including:
Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps
We provide this information to Squarespace, our website analytics provider, to learn about site traffic and activity.
Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit the cookies Squarespace uses.
The necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
The analytics and performance cookies are used on this website, as described above, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
Webforms
When you submit information to this website via webform, we collect the data requested in the webform in order to track and respond to your submissions. We provide this information to Squarespace, our website hosting provider, so that they can provide website services to us and help us manage our relationship with you. We also provide this information with our email provider for storage. You can read more about how uses your data (storage information) for its own purposes in their Privacy Policy.
When you submit information directly to Adventure Climbing Company via our Consent Form, we collect the data requested in the form in order to determine your suitability for participating in our Workshops and Courses. We provide this information with Google Forms, for storage. Purpose of processing: Delivery and provision our Services. The legal basis for processing: Your consent according to Art. 6 (1) a GDPR. Data is transmitted: 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. This may also mean a transfer of personal data to a country outside the European Union. The data is transferred to the USA on the basis of Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, since the data recipient has committed to comply with the data processing principles of the Data Privacy Framework (DPF). You can read more about how Google uses your data (storage information) for its own purposes in their Privacy Policy.
How We Use Your Information
We use your data to:·
Process and manage bookings
Ensure your safety during activities
Arrange accommodation or transport (where applicable)
Meet legal and insurance obligations
Respond to enquiries
Contact emergency contacts if required
Lawful Basis
We process your data under:
Contractual necessity (to provide your activity)
Legal obligations (health & safety, tax)
Legitimate interests (business operations)
Consent (participation, marketing and photography)
Vital interests (emergency situations)
Health information is processed only where necessary for safety and with appropriate safeguards.
Data Sharing (outside of Web or Consent Forms)
We may also share your data with:
Accommodation or transport providers (only necessary details to fulfil booking)
Instructional team on the day (only necessary details such as name, emergency contact & medical information)
Insurance providers
Emergency services
IT and payment service providers
We do not sell your personal data.
Data Protection
Adventure Climbing Company are committed to keeping your data secure. We have internal safeguards in place to protect against unauthorised access, unlawful processing and accidental loss of your company and personal data. Data access within Adventure Climbing Company is limited to personnel who are involved in our business and our service providers as detailed above.
By continuing to use the services of Adventure Climbing Company on or after 1 March 2025, by default you will be agreeing to Adventure Climbing Company retaining your contact details on our database for the purpose of services/trading.
Data Retention
Adventure Climbing Company data should only be kept for as long as there is an administrative need to keep it to enable Adventure Climbing Company to carry out its business or support functions, or for as long as it is required to demonstrate compliance for audit purposes or to meet legislative requirements. Legislative requirements include, but are not limited to, compliance with the Data Protection Act 2018 and the UK GDPR.
To comply with the administrative and legislative requirements described above, a retention period for the data based on one of the options listed below is applied.
The retention period is defined as the specified time following the last entry, financial year, event closure or the date the data is superseded, depending on the type of data and or its context.
The defined retention periods applied within Adventure Climbing Company are:
3 years – destroy: includes types of records that are generally of low or short-term value such as those relating to general administration, local management or business support, including consent forms.
6 years – review or destroy: includes types of records that generally need to be retained by law or for audit or compliance purposes but aren’t considered to be of historical value. Examples include those relating to finance, commercial activities and information management.
10+ years – review or destroy: includes types of records that generally hold long-term value to the organisation or are required to be retained by law for longer periods. Examples include consent forms in relation to a minor who has not yet turned 21 years old.
Your Rights
You have the right to:
Access your data
Request correction or deletion
Object to processing
Withdraw consent at any time
To exercise your rights, contact: richard@adventureclimbingcompany.co.uk
You may also complain to the UK Information Commissioner’s Office (ICO).