Privacy Policy

1. Data Collection & Sources

We collect personal data only when voluntarily provided by you or automatically collected through your interaction with our static web servers. The categories of information we may collect include:

• Direct Communications: Name, email address, telephone contact (if supplied), and the contents of any correspondence sent via our contact forms or direct email inquiries.
• Technical & Log Data: Internet Protocol (IP) addresses, browser type and version, referral URLs, operating system configurations, date and timestamp indicators, and basic navigation pathways through our site.
• Cookie & Consent Records: Choices made via our cookie consent banner regarding functional or analytic tracking settings stored in your local browser storage.

2. Legal Basis for Processing

Under UK GDPR, we process personal information on the following lawful grounds:

• Legitimate Interests: To maintain website security, prevent malicious attacks or spam, troubleshoot technical issues, and improve our field guide materials.
• Consent: Where you have submitted an inquiry form requesting information on coastal itineraries or explicitly accepted non-essential cookie technologies.
• Legal Obligations: Compliance with applicable accounting, business record retention, and regulatory compliance standards in the United Kingdom.

3. Cookies and Local Storage

Our website uses small text files known as cookies and browser local storage mechanisms. We classify cookies into essential session-management files necessary for technical operations and optional analytic cookies that help us understand aggregate traffic. Please refer to our detailed Cookie Policy for complete technical breakdowns and opt-out instructions.

4. Third-Party Data Processors

We do not sell, trade, or rent personal data to marketing brokers. We may engage vetted third-party service providers to support our operations, including secure cloud hosting providers, domain DNS hosts, and email routing facilities. All processors are contractually bound to process data strictly under our instructions and in accordance with UK GDPR standard contractual clauses.

5. Data Retention & Security Measures

Inquiry data submitted through our contact form is retained only as long as necessary to answer your queries and maintain ongoing business records, typically not exceeding twenty-four (24) months from your last interaction. Server security logs are automatically rotated and deleted after 90 days. We employ technical and organizational safeguards, including SSL/TLS encrypted transport, secure server architectures, and restricted access protocols to protect your personal details against unauthorized access or alteration.

6. Your Statutory Rights (GDPR & International)

Subject to statutory exemptions, you have rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where retention is no longer necessary.
• Right to Restrict Processing: Request suspension of processing under specific legal disputes.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests.

7. Data Protection Officer (DPO) & Contact Information

To exercise your privacy rights, file a data access request, or ask questions concerning this policy, please contact our designated Data Protection Officer:

Data Protection Officer
Buddiesquirkvalt Heritage Guides Ltd
The Old Boathouse Quay, Craster, Alnwick, Northumberland, NE66 3TR, United Kingdom
Email: [email protected]

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.