Privacy Policy
How we collect, use, and protect your information when you visit our website or contact us.
Overview
This Privacy Policy explains how Big Severn Adventure (“we”, “us”, “our”) processes personal data when you visit www.bigsevernadventure.co.uk or contact us by WhatsApp, email, or booking/enquiry form. We respect your privacy and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Last updated: November 2025.
1) Who we are
Big Severn Adventure is a small, independent adventure travel provider based in Shropshire, UK. For data protection purposes, BSA 360 LTD (trading as Big Severn Adventure) is the data controller.
Contact: info@bigsevernadventure.co.uk. If you are unhappy with our handling of your data, you can raise a concern with the Information Commissioner’s Office (ICO).
2) Data we collect
A) Information you provide directly
- Name, email address, and phone number when you contact us or submit a form.
- Trip preferences (dates, duration, group size, accommodation type).
- Messages sent via WhatsApp, email, or our booking/enquiry form.
- Payment details are handled securely by our payment partner — we do not store card data.
B) Information collected automatically
- Device type, browser, IP address, and pages visited (via analytics tools).
- Clicks on WhatsApp links, PDF downloads, and booking interactions (where consented).
- Cookie identifiers and consent preferences.
C) Cookies and consent
We use cookies to remember preferences (essential), measure site performance (analytics), and—only if you allow— personalise advertising (marketing). You control which categories are active via our cookie banner and can update or withdraw consent at any time.
3) How we use your data
- Respond to messages and booking enquiries.
- Manage and confirm trip bookings; send pre-trip and post-trip information.
- Improve website performance and security.
- Run marketing campaigns (including remarketing where consented).
- Comply with legal obligations and prevent fraud.
Legal bases
- Contract — to provide trips or respond to enquiries.
- Legitimate interests — to improve services and protect our business.
- Consent — for marketing emails, tracking, and cookies.
4) Marketing & communication preferences
We may contact you by email or WhatsApp about trips, offers, or news. You can opt out at any time by clicking “unsubscribe” in emails or replying STOP on WhatsApp. We do not sell or rent your information.
5) Who we share data with
We share data only where necessary with trusted providers who help us operate the website and deliver services:
- Booking & payments — to handle reservations and process payments securely.
- Analytics & advertising — to monitor performance and attribute marketing where consented.
- Email & communications — to send newsletters and trip updates.
- Professional advisers & regulators — e.g., accountants, insurers, or authorities where required by law.
All partners process data under UK-GDPR-compliant terms (Article 28).
6) International transfers
Some providers may store data outside the UK. Where this occurs, we rely on UK adequacy regulations and/or Standard Contractual Clauses (SCCs) to ensure an equivalent level of protection.
7) How we keep data secure
- HTTPS encryption across the website.
- Access control for staff accounts and secure off-site backups.
- Encrypted communication via established providers (e.g., Gmail / WhatsApp Business).
If a data breach occurs, we will notify the ICO and affected users where legally required.
8) Data retention
We retain enquiry and booking records for up to 5 years, or longer if required for legal or accounting purposes. You can request earlier deletion — see your rights below.
9) Your rights
Under UK GDPR you can:
- Access a copy of your data.
- Rectify inaccurate information.
- Request erasure (“right to be forgotten”).
- Restrict processing.
- Receive data in a portable format.
- Object to marketing or legitimate-interest processing.
To exercise your rights, email info@bigsevernadventure.co.uk. If unsatisfied, you can complain to the ICO.
10) Links to other websites
Our site may link to external pages (e.g., accommodation partners or social media). Their content and privacy practices are outside our control. Please review those policies before sharing personal data.
11) Changes to this policy
We may update this policy to reflect new services or regulations. The latest version will always appear at /privacy-policy/.
12) Cookies — quick overview
| Category | Purpose |
|---|---|
| Essential | Core site functions (navigation, security, consent storage). |
| Analytics | Understand how the site is used and improve performance. |
| Marketing | Measure advertising effectiveness and personalise future marketing (optional). |
| Functional | Support extras like remembering preferences or tracking WhatsApp link clicks. |
You can change your cookie preferences or withdraw consent at any time via our banner or your browser settings.
13) Contact
For privacy or data-related questions: info@bigsevernadventure.co.uk