Privacy Policy

Introduction

Whisper Escape Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website whisper-escape.com or use our services.

We are registered in England and Wales and operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

We may collect information about you in a variety of ways:

• Personal Data: When you make a booking enquiry or contact us, we collect your name, email address, and any other information you choose to provide.
• Booking Information: Details about your programme preferences, dates, dietary requirements, and accessibility needs.
• Usage Data: Information about how you access and use our website, including your IP address, browser type, pages visited, and time spent on pages.
• Cookies: We use cookies and similar tracking technologies. See our Cookies Policy for details.

How We Use Your Information

We use the information we collect to:

• Process and manage your bookings and enquiries
• Communicate with you about your reservations and our services
• Send you marketing communications (only with your consent)
• Improve our website and services
• Comply with legal obligations
• Protect our rights and prevent fraud

Legal Basis for Processing

We process your personal data based on:

• Contract: Processing necessary to fulfil bookings and provide our services
• Consent: Where you have given explicit consent for marketing communications
• Legitimate Interests: For website analytics and service improvement, where such interests are not overridden by your rights
• Legal Obligation: Where we must comply with applicable laws

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Booking records: 7 years (for tax and legal compliance)
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months
• Enquiry correspondence: 3 years

Data Sharing

We do not sell your personal information. We may share your data with:

• Service providers who assist with our operations (payment processors, email services)
• Partner sites and accommodation providers for booking fulfilment
• Professional advisers (lawyers, accountants) where necessary
• Authorities when required by law

All third parties are required to respect the security of your data and treat it in accordance with the law.

International Transfers

We primarily store and process data within the United Kingdom and European Economic Area. If data is transferred outside these regions, we ensure appropriate safeguards are in place.

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict processing of your data
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact us at [email protected].

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

For questions about this Privacy Policy or our data practices:

Whisper Escape Ltd
The Old Granary, Castle Street
Ludlow, Shropshire SY8 1PQ
Email: [email protected]

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk