2.1 Introduction

 

This Privacy Policy explains how Tales of Alba collects, uses and protects personal data in accordance with UK GDPR and the Data Protection Act 2018.

 

2.2 Data Controller

 

Tales of Alba
Address: Dirección: 4/1 Portland Gardens, Edinburgh, EH6 6NY, United Kingdom
Email: talesofalbatours@gmail.com

 

2.3 Data We Collect

 

We may collect:

• Identification data (name, surname)

• Contact details (email, phone)

• Booking information

• Payment confirmation data (never full card details)

• Website usage data (cookies, analytics)

• Customer communications

 

2.4 Images and Recordings 

 

During our tours, we may take photographs or video recordings that may include identifiable participants.
These images may be used for:

• Operational purposes

• Internal documentation

• Promotional or marketing purposes only with explicit consent

Consent can be withdrawn at any time by contacting talesofalbatours@gmail.com
Participants may request the deletion of any image in which they appear.

 

2.5 How We Use Personal Data

 

We process data for:

• Managing bookings

• Providing customer support

• Sending confirmations and updates

• Improving our services

• Legal compliance

• Marketing (only with consent)

 

2.6 Legal Basis

 

We rely on:

• Contract performance

• Legitimate interest

• Legal obligation

• Consent (for marketing, cookies and promotional images)

 

2.7 Data Sharing

 

We may share data with:

• Payment processors

• Booking platforms

• IT and hosting providers

• Legal authorities (if required)

We never sell personal data.

 

2.8 Data Retention

 

Data is retained only as long as necessary for legal, operational or contractual purposes.

 

2.9 Your Rights (UK GDPR)

 

You may request:

• Access

• Rectification

• Erasure

• Restriction

• Portability

• Objection

• Withdrawal of consent

Requests can be sent to talesofalbatours@gmail.com 

 

2.10 International Transfers

 

If data is transferred outside the UK, we ensure adequate safeguards (e.g., UK IDTA, adequacy decisions).

 

2.11 Security

 

We implement technical and organisational measures to protect personal data.

3. COOKIE  POLICY (UNITED KINGDOM)

3.1 What Are Cookies

 

Cookies are small text files stored on your device to improve website functionality, performance and user experience.

 

3.2 Types of Cookies We Use

Essential Cookies

 

Required for the website to function properly (security, navigation, session management).

Analytics Cookies

 

Help us understand how visitors use the website (e.g., Google Analytics).

Functionality Cookies

 

Remember user preferences such as language or region.

Marketing Cookies

 

Used to deliver personalised advertising. These are only activated with explicit consent.

 

3.3 Third‑Party Cookies

 

We may use cookies from:

• Google Analytics

• Booking platforms

• Social media integrations (Facebook, Instagram, TikTok, etc.)

 

3.4 Cookie Consent

 

On your first visit, you will be asked to accept or reject non‑essential cookies.
You may change your preferences at any time.

 

3.5 Managing Cookies

 

You can disable cookies in your browser settings.
Disabling essential cookies may affect website functionality.