Tours that touchWho controls your information
Tangible Tours is responsible for personal information collected through this website, guest accounts, reservations, rider forms, waivers, reviews and direct correspondence. Questions or rights requests can be sent to tangibletourswilts@gmail.com.
Information we collect
We may collect your name, contact details, date of birth, booking and payment status, tour and e-bike preferences, emergency contacts, dietary needs, riding experience, signed waivers, communications and account activity. Staff records may also include operational notes needed to run a safe departure.
Health and safety information
The rider safety form may contain health, medication, allergy, injury, mobility and assistance information. We use this only to assess reasonable adjustments or guide follow-up, manage an emergency, and protect riders, staff and other trail users. Access is restricted to authorised team members.
Identity information
We ask for the type of identity document and only its final four characters so the guide can match a rider to a booking. We do not request or retain a full passport, driving-licence or identity-card number, or an identity-document scan.
Why we use information
We use information to respond to enquiries, administer reservations, provide tours, select suitable equipment, meet dietary and accessibility needs, complete safety checks, handle incidents and complaints, maintain business records, prevent misuse and comply with legal duties.
Our lawful bases
Depending on the purpose, processing is necessary to perform or prepare a booking contract, meet a legal duty, protect vital interests in an emergency, or pursue legitimate interests in operating safe and effective tours. For special-category health information, we request explicit consent and may also act to protect vital interests or establish, exercise or defend legal claims.
Who receives information
We share only what is reasonably necessary with authorised guides, accommodation or meal providers, transport providers, professional advisers, insurers, emergency services and trusted technology providers. We do not sell personal information. Emergency contacts are used only for tour safety or an emergency.
Storage and security
Account, booking, waiver, questionnaire and company records are stored in access-controlled systems. Team access is role-restricted. No online service is risk-free, but we use reasonable safeguards and ask guests not to send full identity documents or unnecessary medical records.
Retention
We keep booking, financial, waiver and incident records for the period reasonably needed for tax, insurance, legal and safety purposes. Health and emergency information should be reviewed after the tour and deleted or minimised when no longer needed, subject to an active incident, claim or legal retention requirement. Unsuccessful enquiries should not be kept indefinitely.
Your rights
UK data-protection law may give you rights to access, correct, erase or restrict information, object to certain uses, receive portable information, and withdraw consent. Some rights are limited where records must be kept for legal, safety or contractual reasons. You may complain to the UK Information Commissioner’s Office if a concern is not resolved. The quickest route is our data request form at /data-requests, where you can ask to see, correct, export or delete your information; signed-in guests can also download their own records instantly from the guest portal.
Photos and reviews
Tour photographs and testimonials are optional. Your rider form lets you choose yes, no or ask me for photography. We will seek appropriate permission before using an identifiable image or attributed review in promotion.
Updates and breaches
We may update this notice when services or legal duties change. If a personal-data breach is likely to create a risk, we will investigate, limit harm and notify affected people and the regulator where required.