Privacy Policy
Effective date: 1 August 2026
Quartz Discoveries ("we", "us", "our") is a walking tour company based in Liverpool and operating under the domain quartzes.life. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit our website, make a booking, or join one of our guided walks.
Data Controller and Contact
The data controller is Quartz Discoveries, 28 Water Street, Liverpool L2 8TD, United Kingdom. You can contact us at [email protected] or +44 151 123 4567 regarding any privacy questions.
What Information We Collect
Identity data: first name, last name, booking reference, and where relevant, age bracket (for pricing) and accessibility needs you choose to share.
Contact data: email address, telephone number and city/country of residence if provided.
Transaction data: details of the tours you book, dates, prices and payment status (we do not store full card numbers; payments are handled by secure third‑party processors).
Technical data: IP address, browser type, device identifiers, time zone, and cookies used to remember preferences and improve site performance.
Marketing and communications data: your preferences about receiving updates and feedback requests.
How We Collect Data
Direct interactions: when you fill out our booking form, contact us by email/phone, or provide details to your guide on the day.
Automated technologies: cookies, server logs and analytics software that generate pseudonymous usage statistics.
Third parties: payment processors, booking platforms, and analytics providers may supply limited information necessary to complete your reservation and improve our services.
Lawful Bases for Processing
We process personal data under the following UK GDPR lawful bases
Contract: to confirm and deliver your tour booking and communicate essential updates.
Legitimate interests: to improve our website and services, prevent fraud, ensure safety on tours, and request optional feedback.
Consent: for non‑essential cookies, marketing emails and storing any special category data you voluntarily provide (e.g., mobility information). You may withdraw consent at any time.
Legal obligation: to maintain accounting records and comply with tax and regulatory requirements.
How We Use Your Information
We use your data to: administer bookings; send confirmations, reminders and service messages; tailor routes or accommodations you request; process payments securely via our providers; respond to enquiries; gather anonymised feedback; and maintain the safety and quality of our experiences. We may also send you occasional news or offers if you have opted in. You can unsubscribe at any time.
Sharing and Disclosure
We do not sell your personal information. We share data only with trusted processors who help us operate our business, including payment gateways, booking platforms, email service providers and analytics tools. These parties are contractually bound to process data solely on our instructions and to maintain appropriate security. If a tour involves pre‑booked entry to a partner venue, we may share your name and group size to manage access. We may also disclose information if required by law or to protect our rights, safety or property.
International Transfers
Some of our service providers may process data outside the UK/EEA. Where this occurs, we implement appropriate safeguards such as UK Addendum/IDTA-approved Standard Contractual Clauses and risk assessments to protect your information.
Data Retention
We keep booking records for up to seven years to meet legal and accounting requirements. Enquiry emails are generally kept for 24 months. Analytics data is retained in line with our providers’ default or configurable periods (typically 14–26 months). We keep consent records until you withdraw or for as long as necessary to demonstrate compliance. We will not keep personal data longer than necessary.
Security
We use industry-standard technical and organisational measures, including encryption in transit (HTTPS), access controls, role-based permissions and regular reviews of our vendors. No method of transmission or storage is completely secure, but we work to protect your data to a level appropriate to the risk.
Your Rights
Under UK data protection law, you have the right to request access to your personal data, rectification of inaccuracies, erasure (the "right to be forgotten"), restriction or objection to processing, and data portability. Where processing is based on consent, you have the right to withdraw consent at any time. To exercise these rights, contact [email protected]. We may request verification of identity before acting on a request.
Children
Our services are family-friendly, but our website and booking system are intended for adults. We do not knowingly collect personal data from children without the consent of a parent or guardian. If you believe a child has provided us with personal data without consent, please contact us so we can delete it.
Third-Party Links
Our website may contain links to partner sites, such as recommended restaurants or attractions. We are not responsible for the privacy practices of these external sites and encourage you to read their privacy policies.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised effective date. We encourage you to review it periodically.
Contact
Questions about this policy can be sent to [email protected] or by post to 28 Water Street, Liverpool L2 8TD, United Kingdom.