
Tales of Alba

Privacy Policy
(UK-GDPR- SCOTLAND)
2.1 Introduction
This Privacy Policy explains how Tales of Alba collects, uses and protects personal data in accordance with UK GDPR and the Data Protection Act 2018.
2.2 Data Controller
Tales of Alba
Address: Dirección: 4/1 Portland Gardens, Edinburgh, EH6 6NY, United Kingdom
Email: talesofalbatours@gmail.com
2.3 Data We Collect
We may collect:
-
Identification data (name, surname)
-
Contact details (email, phone)
-
Booking information
-
Payment confirmation data (never full card details)
-
Website usage data (cookies, analytics)
-
Customer communications
2.4 Images and Recordings
During our tours, we may take photographs or video recordings that may include identifiable participants.
These images may be used for:
-
Operational purposes
-
Internal documentation
-
Promotional or marketing purposes only with explicit consent
Consent can be withdrawn at any time by contacting talesofalbatours@gmail.com
Participants may request the deletion of any image in which they appear.
2.5 How We Use Personal Data
We process data for:
-
Managing bookings
-
Providing customer support
-
Sending confirmations and updates
-
Improving our services
-
Legal compliance
-
Marketing (only with consent)
2.6 Legal Basis
We rely on:
-
Contract performance
-
Legitimate interest
-
Legal obligation
-
Consent (for marketing, cookies and promotional images)
2.7 Data Sharing
We may share data with:
-
Payment processors
-
Booking platforms
-
IT and hosting providers
-
Legal authorities (if required)
We never sell personal data.
2.8 Data Retention
Data is retained only as long as necessary for legal, operational or contractual purposes.
2.9 Your Rights (UK GDPR)
You may request:
-
Access
-
Rectification
-
Erasure
-
Restriction
-
Portability
-
Objection
-
Withdrawal of consent
Requests can be sent to talesofalbatours@gmail.com
2.10 International Transfers
If data is transferred outside the UK, we ensure adequate safeguards (e.g., UK IDTA, adequacy decisions).
2.11 Security
We implement technical and organisational measures to protect personal data.
3. COOKIE POLICY (UNITED KINGDOM)
3.1 What Are Cookies
Cookies are small text files stored on your device to improve website functionality, performance and user experience.
3.2 Types of Cookies We Use
Essential Cookies
Required for the website to function properly (security, navigation, session management).
Analytics Cookies
Help us understand how visitors use the website (e.g., Google Analytics).
Functionality Cookies
Remember user preferences such as language or region.
Marketing Cookies
Used to deliver personalised advertising. These are only activated with explicit consent.
3.3 Third‑Party Cookies
We may use cookies from:
-
Google Analytics
-
Booking platforms
-
Social media integrations (Facebook, Instagram, TikTok, etc.)
3.4 Cookie Consent
On your first visit, you will be asked to accept or reject non‑essential cookies.
You may change your preferences at any time.
3.5 Managing Cookies
You can disable cookies in your browser settings.
Disabling essential cookies may affect website functionality.