Legal
Privacy Policy
Last updated: 7 September 2026 · Applies to sacredtrailstravel.com
1. Who we are
This website is operated by Sacred Trails Travel (company name/number to be confirmed on incorporation at Companies House), a UK-based specialist in walking pilgrimage and cultural heritage travel, based on the Fylde Coast, Lancashire, United Kingdom. For any question about this policy or your personal data, contact us at sacredtrailstravel@protonmail.com.
2. What information we collect
| When | What we collect |
|---|---|
| You submit an enquiry or "Plan Your Journey" form | Name, email address, and any details you choose to share about your trip (dates, route, group size, health or mobility notes if you provide them). |
| You subscribe to our newsletter | Email address only. |
| You browse the site | If you consent to analytics cookies: pages visited, approximate location (country/region level), device type, and how you arrived at the site. |
| You book a journey with us | Full name, contact details, passport details where required for bookings abroad, dietary or medical information relevant to your trip, and payment details (processed by our payment provider — we do not store full card numbers). |
3. Why we collect it, and our lawful basis
- To respond to enquiries and plan your journey — necessary to take steps at your request before entering a contract (UK GDPR Art. 6(1)(b)).
- To deliver a booked trip — necessary for performance of a contract with you (Art. 6(1)(b)).
- To send our newsletter — based on your consent (Art. 6(1)(a)), given when you subscribe. You can withdraw this at any time.
- To understand how the site is used — based on your consent via the cookie banner (Art. 6(1)(a)). Analytics scripts do not run until you accept them.
- To meet legal obligations — for example, retaining booking and payment records for accounting and tax purposes (Art. 6(1)(c)).
4. Cookies
We use a small number of strictly necessary cookies to run the site (for example, to remember your cookie preference), and — only with your consent — Google Analytics cookies to understand which routes and pages visitors find useful. You can accept, reject, or change your choice at any time using the "Cookie Preferences" link in the footer. See the banner and preferences panel for the current list of cookies in use.
5. Who we share it with
- Local suppliers and guides named in your itinerary (accommodation providers, transfer operators, local guides) — only the details they need to deliver your trip.
- Service providers who help us run the business: our email newsletter provider, our website host, and (if you consent) Google Analytics. These providers only process data on our instructions.
- Our host travel agency [to be named once appointed], where a booking requires financial protection arrangements.
- Regulators or authorities where we are legally required to share information.
We do not sell your personal data to anyone.
6. International transfers
Where your journey takes place outside the UK (for example, Spain, Italy, or Japan), we may need to share relevant booking details with suppliers in that country so they can host or guide you. We only share what is necessary for your trip, and we take reasonable steps to ensure it is handled securely.
7. How long we keep it
- Enquiries that don't turn into a booking: up to 24 months, so we can follow up on future travel plans, unless you ask us to delete it sooner.
- Newsletter subscribers: until you unsubscribe.
- Booking and payment records: 6 years, as required by UK tax law.
- Analytics data: retained by Google Analytics per its standard retention settings (currently up to 14 months).
8. Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you, and get a copy of it.
- Ask us to correct inaccurate data.
- Ask us to delete your data, where we're not required to keep it (e.g. for tax records).
- Object to or restrict certain processing, including withdrawing consent for marketing or analytics at any time.
- Ask for your data in a portable format.
- Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you're unhappy with how we've handled your data.
To exercise any of these rights, email sacredtrailstravel@protonmail.com.
9. Keeping your data safe
We use reputable, reputable providers for email, hosting, and payment processing, and we limit access to personal data to what's needed to plan and deliver your journey. No online service is 100% secure, but we take reasonable steps to protect your information from loss, misuse, or unauthorised access.
10. Changes to this policy
We may update this policy as our business or the law changes. The "last updated" date at the top shows when it was last revised. For significant changes, we'll make this clear on the site.