Privacy Policy
Last Updated: 3rd October 2026
1. Introduction
Shropshire Adventures Ltd ("we", "us", "our") operates Shropshire Adventures, an outdoor activity centre in Stottesdon, Shropshire. We're committed to protecting the personal data of everyone who interacts with us. That includes group organisers, activity participants, schools, parents, carers, accommodation guests and website visitors.
This policy explains what personal data we collect, why we collect it, how we use it, how long we keep it and what your rights are under UK data protection law.
Our registered details:
Shropshire Adventures Ltd
Company number: 15412263
Ginny Hole, Green Lane, Stottesdon, DY14 8US
Data protection contact: Steve Eddies-Davies
Email: info@shropshireadventures.co.uk
Phone: 01746 562608
We are in the process of registering with the Information Commissioner's Office (ICO), as required under UK GDPR. Until registration is confirmed, please direct any data protection enquiries to Steve Eddies-Davies using the details above.
2. The Data We Collect
We collect and process the following categories of personal data.
Enquiry and contact data
- Name, email address and phone number
- Details provided through our contact form, by email or by telephone
- Organisation or school name and job title, where relevant
Booking data
- The group organiser's name and contact details
- Group size, dates, activities and accommodation booked
- Catering choices and dietary requirements
- Payment and invoicing details [confirm how payments are taken]
Participant data
- Participants' names, ages and emergency contact details, collected through our consent forms
- Any medical conditions, medication or additional needs relevant to taking part safely
Photographic and video data
- Images and videos taken during activities, where consent has been given
Website data
- Usage data collected through Google Analytics, including pages visited, time spent on the site and approximate location. This data doesn't identify you personally. See our Cookie Policy for more information.
3. Why We Collect Your Data and Our Lawful Basis
We process personal data on the following lawful bases under UK GDPR.
Contract: We process booking data to arrange and deliver your activities, accommodation and catering, and to manage payment.
Legitimate interests: We process enquiry and contact data to respond to enquiries, plan your day and run our business. This is in the legitimate interests of both Shropshire Adventures and the people making enquiries.
Legal obligation: We keep financial records to meet our tax and accounting obligations. We also record accidents and incidents where the law requires it.
Consent: We collect medical information through our consent forms with the explicit consent of the participant, or of a parent, carer or school for anyone under 18. We also only take and publish photos and videos with consent. Consent can be withdrawn at any time using the contact details in section 1.
Vital interests: In an emergency, we may share health information with emergency services to protect someone's life or physical safety.
4. Special Category Data
Health and medical information is classed as special category data under UK GDPR and is given additional protection. We only collect it so that everyone can take part in activities safely, and so we can respond properly in an emergency.
Access to this data is restricted to staff who need it to run activities safely, including the instructors leading your group.
5. Data Relating to Children and Young People
We welcome school groups, families and children's parties, so we sometimes hold data about people under 18. Where we do:
- That data is provided by a parent, carer, school or group organiser, not collected directly from the child
- We only collect what we need to run activities safely
- Photos and videos of under-18s are only taken and published with consent from a parent, carer or school
6. Who We Share Your Data With
We never sell personal data to third parties. We may share data with the following organisations where it's necessary and proportionate.
Country Treks: If your booking includes horse riding, we share the details needed to arrange it with our sister site, Country Treks.
Emergency services: In an emergency, we may share relevant health and contact information with medical or emergency services.
Insurers: In the event of an accident, incident or claim, we may share relevant information with our insurers.
Service providers: Our website is hosted by Webflow, which also processes the details you submit through our contact forms. We use Google Analytics to collect website usage data, and no information that identifies you personally is shared with Google through this service.
Legal and regulatory bodies: We may share data with the police, social services or other statutory bodies where we're legally required to, for example in response to a safeguarding concern.
We require all third parties who process data on our behalf to do so in line with UK GDPR and to maintain appropriate security measures.
7. Data Storage and Security
Personal data is stored securely on password-protected systems, with access restricted to authorised staff. We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure.
Photographic and video content shared on our website and social media is stored on the servers of those platforms. We only publish content where consent has been given.
8. How Long We Keep Your Data
We keep personal data for the following periods.
Booking and financial records: 6 years, to meet our tax and accounting obligations.
Consent forms and medical information: 12 months after your visit, unless an accident or incident took place. In that case, we keep the relevant records for as long as is legally required.
Enquiries that didn't lead to a booking: 12 months from the date of the enquiry.
Photographic and video data: For as long as we use it in our marketing, unless consent is withdrawn sooner. If consent is withdrawn, images and videos will be removed from our website and social media as soon as reasonably practicable.
Website analytics data: In line with Google Analytics' standard data retention settings.
Once a retention period has ended, personal data is securely deleted or anonymised so it can no longer be linked to an individual.
9. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data.
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete personal data we hold about you.
Right to erasure: You can ask us to delete your personal data in certain circumstances, for example where it's no longer needed for the purpose it was collected for.
Right to restrict processing: You can ask us to restrict how we process your personal data in certain circumstances.
Right to object: You can object to us processing your personal data where we rely on legitimate interests as our lawful basis.
Right to withdraw consent: Where we process your data on the basis of consent, you can withdraw that consent at any time. This doesn't affect the lawfulness of any processing carried out before you withdrew it.
Right to complain: If you're unhappy with how we've handled your personal data, you can complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.
To exercise any of these rights, contact Steve Eddies-Davies using the details in section 1. We'll respond to all requests within one calendar month.
10. Third Party Websites
Our website may link to third party websites, including Country Treks, Shropshire Adventures Academy and our social media platforms. This privacy policy only applies to our website and services. We're not responsible for the privacy practices of third party websites, and we encourage you to read their privacy policies before providing any personal data.
11. Changes to This Policy
We review and update this privacy policy periodically to reflect changes in our practices or in the law. The date at the top of this policy shows when it was last updated.
If we make significant changes to how we handle your personal data, we'll take reasonable steps to let you know, for example by posting a notice on our website.
12. Contact Us
If you have any questions about this privacy policy or how we handle your personal data, please contact:
Steve Eddies-Davies
Shropshire Adventures Ltd
Ginny Hole, Green Lane, Stottesdon, DY14 8US
info@shropshireadventures.co.uk
01746 562608
Ready to Plan Your experience?
The easiest way to organise your day is to send us an email. Tell us what your group is looking for, and we will check date availability, build a custom itinerary, and handle all the details for you. Zero stress, no complicated forms.
