Privacy Policy
Adventure Training (a trading name of Black Mountain Activities Ltd)
Last updated: [Insert Date]
1. Who We Are
Adventure Training (www.adventure-training.com) is operated by Black Mountain Activities Ltd, a company registered in England and Wales.
Black Mountain Activities Ltd
Registered Office: [Insert Registered Address]
Company Number: [Insert Company Number]
Email: [Insert Contact Email]
Telephone: [Insert Contact Number]
For the purposes of UK data protection law, Black Mountain Activities Ltd is the Data Controller of your personal data.
We are committed to protecting and respecting your privacy in accordance with:
-
The UK General Data Protection Regulation (UK GDPR)
-
The Data Protection Act 2018
-
The Privacy and Electronic Communications Regulations (PECR)
2. The Personal Data We Collect
We may collect and process the following personal data:
Information You Provide to Us
-
Full name
-
Company name
-
Email address
-
Telephone number
-
Billing address
-
Participant names and details
-
Dietary requirements
-
Medical information relevant to activities
-
Emergency contact details
-
Any information submitted via contact forms
Information We Collect Automatically
When you use our website, we may collect:
-
IP address
-
Browser type and version
-
Pages visited
-
Time and date of visit
-
Referring website
-
Device type
Booking and Payment Information
Payments may be processed via a third-party secure payment provider. We do not store full card details on our servers.
3. How We Use Your Personal Data
We use your data to:
-
Respond to enquiries
-
Provide quotes
-
Manage bookings
-
Deliver team building activities
-
Ensure participant safety
-
Process payments
-
Send booking confirmations
-
Comply with legal obligations
-
Improve our website and services
-
Send marketing communications (where consent has been given)
4. Lawful Basis for Processing
Under UK GDPR, we rely on the following lawful bases:
-
Contract – To fulfil bookings and provide services
-
Legal Obligation – To comply with health & safety and accounting laws
-
Legitimate Interests – To operate and improve our business
-
Consent – For marketing communications and certain cookies
-
Vital Interests – Where medical information is required to ensure safety during activities
5. Special Category Data
For safety reasons, we may collect medical information relating to participants. This is classified as special category data.
We process this information only:
-
With explicit consent
-
For health and safety purposes
-
To protect the vital interests of participants
Such data is stored securely and retained only as long as necessary.
6. How We Share Your Data
We may share your information with:
-
Payment processing providers
-
IT and website hosting providers
-
Instructors and facilitators delivering activities
-
Professional advisers (accountants, insurers, legal advisers)
-
Regulatory or legal authorities where required
We do not sell personal data.
7. International Transfers
We primarily store data within the UK.
If any data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
-
UK adequacy regulations
-
Standard contractual clauses
8. Data Retention
We retain personal data only for as long as necessary:
-
Booking records: up to 7 years (for tax and legal purposes)
-
Medical forms: retained only as long as necessary for safety and insurance purposes
-
Marketing data: until consent is withdrawn
9. Your Data Protection Rights
Under UK GDPR, you have the right to:
-
Access your personal data
-
Rectify inaccurate data
-
Erase your data (in certain circumstances)
-
Restrict processing
-
Object to processing
-
Data portability
-
Withdraw consent at any time
-
Lodge a complaint with the Information Commissioner’s Office (ICO)
You can contact the ICO at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://www.ico.org.uk
10. Cookies
Our website uses cookies to:
-
Improve user experience
-
Analyse website traffic
-
Enable essential functionality
You can manage cookie preferences via your browser settings.
Where required by law, we will request your consent before placing non-essential cookies.
11. Marketing Communications
We may send marketing emails if:
-
You have opted in, or
-
You are an existing corporate customer and marketing relates to similar services
You can unsubscribe at any time using the link in our emails or by contacting us.
12. Security
We implement appropriate technical and organisational measures to protect personal data, including:
-
Secure servers
-
SSL encryption
-
Restricted staff access
-
Password protection
-
Staff data protection training
However, no internet transmission is completely secure.
13. Children’s Data
Our services are primarily aimed at corporate clients.
Where activities involve participants under 18, we require parental or guardian consent.
14. Third-Party Links
Our website may contain links to third-party websites.
We are not responsible for their privacy policies or practices.
15. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
