RECORDS WE HOLD

Gren Tours Ltd has limited records of the personal data of guests and those enquiring about a service. That data is name, e-mail address and telephone number. This is sourced from an initial enquiry form on the Gren Tours Website.

Extra Data WE MAY REQUEST

If an enquiry results in a tour by car, the home address of the guest will be asked for.

As is required by Private Hire Legislation set by Transport for London, further information is required such as guests’ home address(es). Invariably, home address is not the location of the pick up and so the address of where guest(s) stay in the UK will also be recorded.

Where data is kept

Digitally stored information is kept offline, on the Gren Tours computer to which only one person, Glen Portch, has access.

Paper copies of transactions are kept on Gren Tours premises for purposes of accounting.

Retention of data

• Information from enquirers that does not result in work is kept for one year.
• Information from guests that use services of Gren Tours is kept for 5 years.

Handling of Payment data

Payments for services to Gren Tours is handled by Square Payments. No credit card details are known to or kept by Gren Tours Ltd except for: Card type,  last four digits and expiry date of the card used for payment.

 Restricted use of data

• Guests data will not be used for any, particularly marketing, purposes from Gren Tours Ltd. 
• Guests data will not be shared with anybody.

 YOUR RIGHTS 

Guests have these rights:

• The right to be informed – being told what data you hold about them and what you do with it.
• The right of access – being able to request a copy of their data you hold.
• The right to rectification – being able to have inaccurate data corrected.
• The right to erasure – being able to ask you to delete / destroy their data.
• The right to restrict processing – being able to limit the amount or type of data used.
• The right to data portability – requesting to move their data electronically to another business.
• The right to object – being able to request you stop using their data.