Privacy Policy for Oxford Heritage Tours Ltd.
Oxford Heritage Tours Ltd. ("we," "us," or "our") is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, and disclose your personal data when you visit our site or use our services, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Data Controller
Oxford Heritage Tours Ltd., located at 22 St. Michael's Street, Oxford, Oxfordshire, OX1 2EB, United Kingdom, is the data controller responsible for the processing of your personal data.
Information We Collect
We collect personal data in the following ways:
- Information You Provide Directly: This includes information you provide when you book a tour, make an inquiry, subscribe to our newsletter, or contact us through our site or by phone. This information may include your name, email address, phone number, postal address, payment information, and any other information you choose to share with us.
- Information Collected Automatically: When you visit our site, we may automatically collect certain information about your device and browsing activity, such as your IP address, browser type, operating system, referring URLs, pages visited, and the dates/times of your visits. We may use cookies and similar tracking technologies to collect this information. See our Cookie Policy for more details.
How We Use Your Information
We use your personal data for the following purposes:
- To Provide Our Services: To process your bookings, provide you with the tours you requested, and manage your account.
- To Communicate with You: To respond to your inquiries, provide customer support, send you booking confirmations, and inform you about updates or changes to our services.
- To Improve Our Services: To analyze how you use our site and services, to identify areas for improvement, and to personalize your experience.
- To Market Our Services: With your consent, we may send you newsletters, promotional emails, or information about new tours or special offers. You can opt out of receiving these communications at any time by following the unsubscribe instructions in the email or by contacting us directly.
- To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes.
- For legitimate business purposes: such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our website, services, marketing and your experience.
Legal Basis for Processing
We process your personal data on the following legal bases:
- Consent: We rely on your consent to send you marketing communications and to use certain cookies. You have the right to withdraw your consent at any time.
- Contract: We process your personal data to perform our contractual obligations to you, such as processing your bookings and providing you with the tours you requested.
- Legitimate Interests: We process your personal data for our legitimate business interests, such as improving our services and preventing fraud. We have carefully balanced our legitimate interests against your privacy rights.
- Legal Obligation: We process your personal data to comply with our legal obligations.
Sharing Your Information
We may share your personal data with the following categories of recipients:
- Service Providers: We may share your information with third-party service providers who assist us with payment processing, website hosting, data analytics, email marketing, and other services. These service providers are contractually obligated to protect your information and only use it for the purposes we specify.
- Tour Guides and Staff: Your booking information might be shared with our tour guides and relevant staff members to properly conduct the tours you have booked.
- Legal Authorities: We may disclose your information to legal authorities if required by law or legal process.
International Data Transfers
Your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA). We will take appropriate safeguards to protect your personal data when it is transferred internationally, such as using standard contractual clauses approved by the European Commission.
Data Security
We take reasonable measures to protect your personal data from unauthorized access, use, or disclosure. These measures include technical, administrative, and physical safeguards. However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.
Data Retention
We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Data related to bookings and transactions will be kept to comply with financial regulation.
- Data for marketing will be removed if consent is removed.
- Data that is aggregated and anonymized may be stored for longer periods.
Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You have the right to request access to the personal data we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request that we erase your personal data, under certain circumstances.
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data, under certain circumstances.
- Right to Data Portability: You have the right to request that we provide you with your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: You have the right to object to the processing of your personal data, under certain circumstances.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.
- Right to Complain: You have the right to lodge a complaint with a supervisory authority if you believe that we have violated your rights. The supervisory authority in the UK is the Information Commissioner's Office (ICO).
To exercise any of these rights, please contact us at 22 St. Michael's Street, Oxford, Oxfordshire, OX1 2EB, United Kingdom.
Cookies
Our site uses cookies. Please see our Cookie Policy for more information about how we use cookies and how you can control them.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post any changes on our site. The effective date of the most recent version will be posted. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us at:
Oxford Heritage Tours Ltd.
22 St. Michael's Street,
Oxford, Oxfordshire,
OX1 2EB
United Kingdom