1. Who We Are

This website is operated by Peak Adventures (“we”, “us”, “our”). We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy or how we handle your data, you can contact us at:
Email: info@peakadventures.co.uk

2. What Personal Data We Collect

We may collect and process the following types of personal data:

a) Information you provide directly

• Name
• Email address
• Phone number
• Booking details
• Emergency contact information
• Dietary or medical information (only where relevant to course safety)
• Messages sent via contact forms or email

b) Booking and payment data

When you make a booking, payments are processed securely by a third-party booking provider. We do not store full payment card details on our website servers.

c) Website usage data

• IP address
• Browser type and device information
• Pages visited and actions taken on our website

This data helps us understand how visitors use our site and improve performance.

3. How We Use Your Data

We use your personal data to:

• Process bookings and manage course participation
• Communicate important information about your course
• Respond to enquiries
• Support safety during activities (including emergency contact use if needed)
• Meet legal and insurance obligations
• Improve our website and services
• Send marketing emails only where you have consented

We only collect data that is necessary and relevant.

4. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract – to fulfil a booking or provide a service
• Legal obligation – for health, safety, and insurance requirements
• Legitimate interests – to run and improve our business and services
• Consent – for marketing communications

You can withdraw consent at any time.

5. Sharing Your Data

We do not sell your personal data.

We may share data only where necessary with:

• Booking and ticketing providers (to manage reservations and communications)
• Email and communication services
• Analytics providers (e.g. website traffic measurement)
• Professional advisers (e.g. insurers, accountants)
• Legal authorities where required by law

All third parties are required to handle your data securely and lawfully.

6. Cookies and Tracking

Our website may use cookies and similar technologies to:

• Ensure basic site functionality
• Analyse traffic and usage
• Support marketing and advertising (where enabled)

You can control or disable cookies through your browser settings. If you use a cookie banner or cookie policy page, please refer to that for detailed cookie information.

7. Data Retention

We retain personal data only for as long as necessary, for example:

• Booking records: as required for legal, accounting, and insurance purposes
• Marketing data: until you unsubscribe or withdraw consent
• Enquiry data: typically up to 12 months

Data is securely deleted when no longer required.

8. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (where applicable)
• Restrict or object to processing
• Request data portability (where applicable)
• Withdraw consent at any time (where we rely on consent)

To exercise these rights, contact us at hello@peakadventures.co.

9. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse, disclosure, or alteration. However, no online system is completely secure, and you provide data at your own risk.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party sites.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this page.