Privacy Policy

PRIVACY POLICY
Last updated: 19 November 2025

Celtic Highland Tours (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:
Michael Kerr
celthightours@gmail.com
07480 655515

2. What Personal Data We Collect

When you contact us or make a booking through our website, we collect the following information:

* Name
* Email address
* Telephone number
* Details relevant to your enquiry or booking
* Any other information you voluntarily provide through our forms

We do not collect any special category data unless you choose to provide it (e.g., accessibility needs).

3. How We Use Your Personal Data (Lawful Basis)

We process your personal data under the following lawful bases:
Legitimate Interests (Article 6(1)(f))

To respond to enquiries, discuss tour details, and provide the services you request.
Contract (Article 6(1)(b))

To process your booking, confirm arrangements, and deliver your tour.

We do not use your data for marketing unless you explicitly opt in.

4. Payment Processing

Deposits are processed through a secure third-party payment provider.
This provider acts as an independent data controller for payment data.
We do not store or have access to your full payment details.

5. How We Share Your Data

We do not sell, share, or pass your personal information to any third parties, except:

* Our payment processor (for deposit handling)
* If required by law or legal obligation

We will never share your data for marketing or unrelated purposes.

6. Data Retention

We retain your personal data only for as long as necessary to:

* Respond to enquiries
* Complete your booking and deliver your tour
* Comply with legal, tax, or accounting obligations

After this, your data will be securely deleted.

7. Your Rights Under the UK GDPR

You have the following rights regarding your personal data:

* Right to access – request a copy of the data we hold
* Right to rectification – correct inaccurate or incomplete data
* Right to erasure – request deletion of your data (where legally permitted)
* Right to restrict processing – request limits on how your data is used
* Right to object – object to processing based on legitimate interests
* Right to data portability – request your data in a reusable format

To exercise any of these rights, contact us at:
celthightours@gmail.com

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): www.ico.org.uk

8. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration.

9. International Transfers

We do not transfer your personal data outside the UK or EEA.
If this ever changes, we will ensure appropriate safeguards are in place.

10. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on our website.