Privacy and the GPDR

We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.
Data controller
The data controller responsible for this website is Heraldic Tours & Travel, who can be contacted at PO Box 240, Cliffe, Selby, YO8 1DP. Our Data Protection Officer is Adrian Hawkins, who can be contacted at PO Box 240, Cliffe, Selby, YO8 1DP.
Lawful basis for processing
For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.
Individual rights
The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us. In some cases you can also exercise your rights through automated systems, as described at the relevant points in this privacy policy.
Security
The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. Additional technical measures are described at the relevant points in this privacy policy.
Disclosures
In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.
Cookies
Booking and Brochure Requests
When you submit a brochure request or booking request through the forms on our site we collect your name, address, e-mail, and other details for the purposes of fulfilling the request and confirming a booking. Details are kept in our office purely for the purposes of keeping you informed of our tours and for correspondence regarding any bookings.
Lawful basis for processing: Performance of a contract
Personally Identifiable Information
Heraldic Tours & Travel will collect and use your personal details, including telephone numbers, address and e-mail. You will provide this information via our website, over the telephone, face to face or by email.
Your personally identifiable information will be held for as long as you are a customer of the company or during the period of time for which we have your consent to provide services and related information. We may also hold data relating to data subjects in order to comply with legal regulations.
If you wish to have your information removed from our database either permanently or temporarily, please advise us by email or telephone. Your information will be removed as soon as is practically possible.
Lawful basis for processing: Performance of a contract
*Clarify any particular query
*Resolve any problems with services that we may supply to you
*Supply details of any product or service that we believe may meet your needs
Google Analytics
We use Google Analytics to track visitor interaction with our site in order to produce statistical reports. Google collects details of the pages you view and the time you viewed them, the features of your browser, and your IP address. We have enabled IP anonymisation so that Google will not store your complete IP address. For more information on how Google handles the data it collects, see Google’s privacy policy.
To opt out of Google Analytics tracking on our site, please disable cookies on your browser and/or to opt out of Google Analytics tracking on all sites, use the Google Analytics Opt-out Browser Add-on.
Lawful basis for processing: Pursuance of our legitimate interests