Privacy policy
Last updated: [DATE]. This policy explains what we do with the information you give us through this website.
The short version. We use what you tell us to research your Clan Heritage Report and to reply to you about a possible journey. We do not sell your data. If you tick the marketing box we will also send you occasional heritage travel emails, and you can stop those at any time with one click.
Who we are
This website, scottishclanheritage.com, is operated by Lindsay's Highland Tours, and the data controller is Lindsay's Highland Tours, a company registered in Scotland, company number [COMPANY NUMBER], registered address [REGISTERED ADDRESS], United Kingdom. We are a private tour operator. You can reach us at steven@scottishclanheritage.com or +44 7703 441846.
Because we are a UK company, UK GDPR and the Data Protection Act 2018 apply to how we handle your information, wherever in the world you live. If you are in the United States, Canada, Australia or New Zealand, this policy still describes exactly what happens to your data, and your local privacy rights are not reduced by it.
What we collect
- Information you give us in the form: the clan or family surname you are tracing, what you already know about your family, your approximate travel timeframe and party size, your name, email address, country, and your phone number if you choose to give it.
- Whether you gave marketing consent, and the date and time you submitted the form.
- Technical information: the page you submitted from and the site that referred you, plus standard analytics data such as approximate location, device type and pages viewed, if you accept analytics cookies.
Please do not send us sensitive information such as health details, and do not send us other people's personal details beyond the family history necessary for the research.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Research and send your free Clan Heritage Report | Steps taken at your request before entering into a contract, and our legitimate interest in responding to an enquiry |
| Reply to you, answer questions and quote for a journey | Legitimate interests, and performance of a contract if you go on to book |
| Send marketing emails about heritage journeys | Your consent, given by ticking the box |
| Measure which adverts and pages produce enquiries | Your consent, given through the cookie banner |
| Keep business and accounting records | Legal obligation |
Who else sees it
We use a small number of service providers who process data on our behalf under contract. These typically include our form and email delivery provider, our email and document platform (Microsoft 365), our customer relationship system, our email marketing platform, and our website host. Where you accept advertising and analytics cookies, Meta Platforms and Google also receive measurement data.
We do not sell your personal information, and we do not share it with other tour operators. Where we arrange elements of a journey for you, we pass only what is needed to hotels, guides and suppliers to make that booking work.
Where your data goes
Your information is stored in the United Kingdom, the European Economic Area and the United States, depending on the provider. Where data leaves the UK, we rely on the UK's adequacy regulations or on the International Data Transfer Addendum to the European Commission's standard contractual clauses, together with appropriate security measures.
How long we keep it
- Enquiries that do not become bookings: up to three years from your last contact with us, then deleted.
- Marketing contacts: until you unsubscribe, or after three years of no engagement, whichever comes first.
- Booking and financial records: seven years, as required for UK tax purposes.
Your rights
You can ask us to give you a copy of the information we hold about you, correct it, delete it, restrict how we use it, or send it to another provider. You can object to us using your data for our legitimate interests, and you can withdraw consent for marketing at any time. Withdrawing consent does not affect anything we did lawfully before you withdrew it.
To exercise any of these, email steven@scottishclanheritage.com. We will respond within one month. There is no charge.
Every marketing email has an unsubscribe link at the bottom. One click is enough.
If you live in California or another US state with its own privacy law, you may also have the right to know what we collect, to ask us to delete it, and not to be discriminated against for asking. We honour those requests through the same email address. We do not sell or share personal information for cross-context behavioural advertising as those terms are defined in California law, other than the measurement cookies described in our cookie notice, which you control through the banner.
Cookies
Our cookie notice explains exactly what is set, why, and how to change your mind.
Security
Form submissions are sent over an encrypted connection. Access to enquiry data is limited to the people at Lindsay's Highland Tours who need it, on accounts protected by multi-factor authentication.
Children
This site is intended for adults. We do not knowingly collect information from anyone under 18.
Complaints
If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk, or to your own national data protection authority.
Changes
If we change this policy we will update the date at the top of the page.