The main goal of the General Data Protection Regulation (GDPR) is to inform the public how there data is being used. It was originally an EU policy, but has since been implemented in the UK Data Protection Act.
Who am I?
My name is Richard Kermode and I own this website. Because I operate as a sole trader working in the Scottish Highlands then use of this website is governed by the laws of Scotland.
What data do I hold and why?
I collect personal information through my booking and contact forms becaue I need this for legal, insurance and safety purposes. I am also using it to contact you regarding your booking. Once submitted the form sends your data straight to my email for processing before I store it on a secure encrypted cloud service. Each form ask specifically for your consent to provide me with this data.
Your personal information is deleted at the end of the year unless you are booked on a trip in the next year. Significantly this excludes any data I am required to keep for administrative, legal, or security purposes.
I have an SSL certificate on this website meaning any information you submit is secure and encrypted. My email and cloud systems are also encrypted and only I can access the files.
Who do I share data with?
The only time I will be sharing your personal data is when working with other guides while catering for a larger group. This is specifically for contacting you about arrangements for the day and incase of emergency.
I use the Akismet anti-spam service to protect my website, blog posts, comments, contact and booking forms from spam. This means when visitors complete forms or leave comments on this site data is collected from the comments form, visitor’s IP address and browser user agent string to help spam detection.
What rights do you have over your data?
The right to access – you have the right to request a copy of your personal data. You also have the right to ask me to correct any information that you believe is inaccurate or incomplete.
The right to erasure – You have the right to request that I erase your personal data. You also have the right to restrict me processing your data or to request that I transfer the data collected to another organisation.
This does not include any data that I am required to keep for administrative, legal, or security purposes.
Changes to Policy