This Privacy Policy explains how The Stratford Ghost Walk ("we", "us", "our") collects, uses and protects your personal data when you visit our website at https://thestratfordghostwalk.co.uk, make a booking, or contact us about our ghost walks in Stratford-upon-Avon.
We are committed to respecting your privacy and handling your information fairly, transparently and in line with applicable data protection law in the UK and, where relevant, the EU.
By using our website or providing your personal data to us, you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the website or provide your personal data, though this may mean you cannot book a tour.
If you have any questions, you can contact us using the details set out in the "Contact & Complaints" section below.
The type of personal data we collect depends on how you interact with us. We may collect and process the following:
- Contact details – such as your name, email address and telephone number when you make an enquiry or booking.
- Booking information – including the date and time of your chosen walk, number of tickets, names of attendees where provided, and any accessibility or special requirements you choose to share.
- Payment-related information – card or bank details are handled by our chosen payment provider or ticketing platform and are not stored in full by us. We may receive limited information such as the last four digits of your card, transaction reference, and payment status.
- Communication records – emails, messages, and other correspondence you send to us, including any feedback or complaints.
- Technical and usage data – such as your IP address, browser type and version, device identifiers, time zone setting, and information about how you use and navigate our website. This may be collected through cookies and similar technologies (see the "Cookies Policy" page).
- Marketing preferences – your choices about whether you would like to receive occasional news or updates from us, where we offer this.
We do not knowingly collect personal data relating to children directly through the website. If you book on behalf of children, you should be the adult responsible for that booking.
We use your personal data only where we have a valid reason and legal basis to do so. In particular, we may use it to:
- Manage bookings and deliver your tour – including confirming your reservation, sending essential service messages, and contacting you if there are changes, cancellations or important information about your ghost walk.
- Respond to your enquiries – when you contact us by email, phone or via a form on our website.
- Run and improve our business and website – such as monitoring website performance, understanding which pages are visited most, and improving how we present information about the walks.
- Maintain records and meet legal obligations – for accounting, tax and other regulatory requirements.
- Send you optional updates or marketing – such as occasional news about The Stratford Ghost Walk or special dates, but only where the law allows and you have not opted out.
We do not sell your personal data to anyone. We only share it with trusted third parties where this is necessary to provide our services or run our business, as explained in the "Sharing Your Data" section.
Under UK and, where applicable, EU data protection law, we must have a lawful basis for each way we process your personal data. Depending on the context, we rely on the following bases:
- Contract – we process your data where it is necessary to enter into or perform a contract with you, for example to take and manage your booking for The Stratford Ghost Walk.
- Legitimate interests – we may process data where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This can include improving our tours and website, keeping records of enquiries, and protecting our business.
- Legal obligation – we may process certain information where we need to comply with a legal or regulatory requirement, such as tax or accounting rules.
- Consent – in some situations, we rely on your consent, for example for certain types of marketing communications or for non-essential cookies and similar technologies. Where we rely on consent, you have the right to withdraw it at any time (see the "Cookie Policy" page).
If we ever need to use your personal data for a new purpose that is not compatible with the original reason we collected it, we will explain this to you and set out the relevant legal basis before we start.
We may share your personal data with carefully selected third parties where this is necessary for the purposes set out in this Privacy Policy, including:
- Payment processors and ticketing platforms – to handle payments securely and issue tickets or booking confirmations.
- Email and communication service providers – to send booking confirmations, essential updates and, where permitted, optional news or offers.
- Website hosting and IT providers – who help us operate, secure and maintain our website and related systems.
- Professional advisers – such as accountants or legal advisers, where needed for our business.
- Authorities and regulators – where we are legally required to share information, for example with law enforcement or tax authorities.
We require all third parties who process personal data on our behalf to respect the security of your data and to treat it in accordance with the law. They may only use your personal data to perform services for us and must not use it for their own purposes.
Some of our service providers or their servers may be located outside the UK or the European Economic Area (EEA). This means that your personal data could be transferred to, stored in or accessed from a country whose data protection laws may be different from those in your home country.
Where we transfer personal data outside the UK or EEA, we take steps to ensure that it is protected in a way that is consistent with applicable law. This may include using standard contractual clauses approved by the UK or EU authorities, or relying on other appropriate safeguards or an adequacy decision where available.
If you would like more information about the specific safeguards we use for international transfers, you can contact us using the details in the "Contact & Find Us" page.
We keep your personal data only for as long as we reasonably need it for the purposes described in this Privacy Policy, and to meet any legal, accounting or reporting requirements.
In general, this means that we may keep:
- Booking and transaction records – for a number of years after your tour, to comply with tax and accounting rules and to help us deal with any queries or disputes.
- Enquiry correspondence – for a shorter period after we have resolved your enquiry or complaint.
- Marketing preferences and contact details – for as long as you remain subscribed or until you ask us to delete this information or withdraw your consent.
When we no longer need your personal data, we will delete it or anonymise it so that it can no longer be linked to you.
Under data protection law, you have a number of rights in relation to your personal data. These may include the right to:
- Access – ask for a copy of the personal data we hold about you.
- Rectification – ask us to correct inaccurate or incomplete information.
- Erasure – ask us to delete your personal data in certain circumstances (sometimes called the "right to be forgotten").
- Restriction – ask us to limit how we use your data in certain situations.
- Objection – object to our use of your data where we are relying on legitimate interests, and to object to direct marketing at any time.
- Data portability – in some cases, ask us to transfer your data to you or another provider in a structured, commonly used, machine-readable format.
- Withdraw consent – where we rely on your consent (for example, for certain marketing or cookies), you can withdraw it at any time.
To exercise any of these rights, or to ask a question about how we handle your data, please contact us using the Contact & Find Us page. We may need to confirm your identity before responding to your request.
Our website may use cookies and similar technologies to help it function properly, to remember your preferences, and to understand how visitors use the site so we can improve it.
These technologies may collect limited technical and usage data, such as your IP address, the pages you visit, and the device and browser you use. Some cookies are essential for the site to work, while others are optional and help us with analytics or performance.
You can withdraw or change your consent at any time using your browser settings or any cookie controls provided on the site. If you disable certain cookies, parts of the website may not function as intended.
For more information about how we use cookies please see the cookie policy page.
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include using secure systems and providers, limiting access to personal data to those who need to know it, using passwords and other access controls, and keeping our software and websites updated.
However, no website or transmission of information over the internet can be completely secure. While we work hard to protect your personal data, we cannot guarantee absolute security. You are also responsible for keeping any passwords or access details safe.
The data controller for The Stratford Ghost Walk is Paul Kybert, operating as The Stratford Ghost Walk.
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your rights, you can contact us at:
Email: thestratfordghostwalk@gmail.com
Alternatively, you can use the form and details on our Contact & Find Us page.
You also have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. You can find out how to contact the ICO at www.ico.org.uk.
If you are located in another country, you may also have the right to complain to your local data protection authority.
We may update this Privacy Policy from time to time, for example to reflect changes in the law, our services, or how we process personal data.
When we make significant changes, we will update the "last updated" date at the bottom of this page and, where appropriate, notify you by a suitable method (such as a notice on our website).
We encourage you to review this page periodically to stay informed about how we protect your information.