Privacy & Cookie Policy

Experience Scotland’s Wild Ltd (“Scotland’s Wild”, “we”, “us” or “our”) is the data controller for the personal information described in this policy.

• Company number: SC508178
• Registered office: Strathleven House, Vale of Leven Industrial Estate, Dumbarton, Scotland, G82 3PD
• Email: info@scotlandswild.com
• Telephone: +44 131 241 8292

We have not appointed a separate Data Protection Officer. Please use the contact details above for any privacy question or request.

This policy applies when you visit our website, contact us, request a private-tour proposal, book or join a tour, enter a competition, apply to work with us, subscribe to marketing, leave a review or otherwise deal with Scotland’s Wild.

We usually receive information directly from you. We may also receive it from the lead traveller, another person booking on your behalf, a travel agent or online travel agency, a supplier or partner, our website and analytics tools, or publicly available sources where lawful.

Depending on how you interact with us, we may collect:

• Identity and contact details such as your name, title, age or date of birth, postal address, email address and telephone number.
• Enquiry and booking details such as your chosen tour and dates, departure point, traveller numbers and ages, accommodation or activity choices, pickup information and booking reference.
• Trip-safety information such as emergency-contact details and relevant dietary, allergy, medical, mobility or accessibility information that you choose or need to provide.
• Payment and transaction details such as amount, currency, payment status, refund history and limited payment references. Our payment providers process full card details; we do not normally receive or store your complete card number or security code.
• Communications including emails, telephone notes, messages, enquiries, complaints, feedback and reviews.
• Marketing preferences and, where enabled, newsletter delivery, open and click information.
• Website and device information such as IP address, browser and device type, approximate location, pages viewed, referring page, cookie identifiers, and campaign or attribution details such as UTM, partner or tracking parameters.
• Competition, recruitment or business-contact information when you enter, apply or work with us.
• Photographs or video where you have agreed to be recorded or where another lawful basis and clear notice applies.

Fields marked as required are normally needed to answer your request, complete a booking, take payment or deliver the tour safely. If you do not provide them, we may be unable to provide that part of the service.

UK data protection law requires us to have a lawful basis for each use. The basis depends on the purpose and the information involved.

Where we rely on legitimate interests, we consider the benefit to our customers and business against the possible effect on your privacy. You may object to this use in some circumstances.

We do not use your information to make decisions based solely on automated processing that have legal or similarly significant effects on you. Payment and fraud-prevention providers may operate their own automated checks under their privacy notices.

Some information about allergies, health, mobility or accessibility may be classed as special-category personal data. We ask only for information relevant to a safe and suitable tour experience.

Where required, we use this information with your explicit consent. We may also use it where necessary to protect someone’s vital interests in an emergency, or to establish, exercise or defend legal claims. We share only what is reasonably necessary with people who need it—for example, your guide or a relevant supplier.

We share the minimum information reasonably needed for the relevant purpose. Recipients may include:

• Tour delivery partners such as guides, accommodation providers, ferry operators, attractions, activity providers and transport suppliers.
• Booking, website and payment providers including Checkfront, Squarespace and Stripe.
• Customer, marketing and reporting services which may include Mailchimp, Google Analytics, Google Tag Manager, Google BigQuery and TourWriter, depending on the interaction.
• Map, video, messaging and social services such as MapHub, YouTube, WhatsApp and social networks when you use those features.
• Travel agents and online travel agencies such as GetYourGuide, Viator or Tripadvisor when a booking or review involves them.
• Professional advisers and authorities such as accountants, insurers, legal advisers, banks, regulators, courts, police or tax authorities where necessary and lawful.
• A buyer, investor or successor if our business or assets are reorganised, sold or transferred, subject to appropriate confidentiality and legal safeguards.

Some recipients process information only on our instructions under a contract. Others—for example a payment provider, online travel agency or social network—may also act as an independent controller for their own purposes. Their privacy notice explains those uses.

We do not sell or rent your personal data.

Some service providers, systems or support teams may be located outside the United Kingdom, including in the United States or European Economic Area. This can mean your information is transferred internationally.

Where UK law requires a safeguard, we use an approved mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or another lawful protection. You may contact us for more information about the safeguard relevant to your data.

We keep personal information only as long as reasonably needed for the purpose collected, including legal, tax, accounting, insurance, safety and dispute requirements. Our normal starting points are:

We may anonymise information so it can no longer identify you. We may keep and use that anonymous information for statistics and business planning.

We send marketing when you have chosen to receive it or when the limited existing-customer “soft opt-in” applies. Every marketing email provides an unsubscribe option. You can also email us at any time.

Our email provider may record delivery, opens and clicks so we can understand whether messages are useful. Where this relies on consent or optional tracking, your choice applies. Disabling image loading in your email application may also limit open tracking.

If you leave a review through us or another platform, it may be public together with the name or profile information you choose to show. We will ask before using a private message or identifiable guest image as promotional content where consent is required.

Cookies are small files or identifiers stored on your browser or device. Similar technologies include local storage, pixels and tags. They can keep a booking session working, remember a choice, measure website use or support embedded content.

Strictly necessary technologies may operate without opt-in consent because the requested service cannot work properly without them. Where consent is required, we restrict supported non-essential technologies until you choose to accept the relevant category.

This table is a practical category summary. Cookie names and durations can change when Squarespace, Checkfront, Google or another provider updates its service. We periodically review the live website and consent settings so this section remains accurate.

Third-party content and custom tags

Our pages can include a Checkfront booking widget, MapHub map, YouTube video, social link or other third-party content. Those providers may process your IP address, device details and interaction data. We configure available consent controls for non-essential services, but each provider also operates under its own privacy notice.

Google Tag Manager helps control other tags and does not by itself determine why information is used. Any analytics or marketing tag deployed through it must follow your consent choice and this policy.

We use proportionate technical and organisational measures designed to protect personal information from unauthorised access, loss, alteration or disclosure. These include access controls, secure hosted services, encrypted website connections and limiting information to people who need it.

No internet transmission or storage system is completely risk-free. If a personal-data breach creates a legal reporting duty, we will notify the relevant authority and affected people as required.

Depending on the circumstances, UK data protection law may give you the right to:

These rights are not absolute. For example, we may need to keep records to meet a legal obligation or defend a claim. Withdrawing consent does not make earlier lawful processing invalid.

To make a request, email info@scotlandswild.com. We may ask for enough information to confirm your identity. We normally respond within one month; the law may allow up to two additional months for a complex or numerous request, in which case we will explain the extension.

Bookings must be made by an adult authorised to provide the details of everyone in the party. We may need a young traveller’s name, age, relevant safety information and emergency contact to administer the booking and tour.

We do not knowingly ask children to subscribe directly to marketing. If you believe a child has provided information without suitable authority, please contact us.

Our website may link to or display services run by other organisations. Their websites, booking channels and social platforms have their own privacy and cookie notices. We are not responsible for how an independent third party uses information you give directly to it.

We review this policy when our services, suppliers or legal obligations change. The date at the top shows the latest revision. If a change materially affects how we use information, we will provide a more prominent notice or contact affected people where appropriate.

This policy is intended to explain our current practices clearly. It does not limit any rights you have under applicable law.