Privacy Policy

1. Introduction

Arena Tactics ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website arena-tactics.com or use our Scottish historical tourism services.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, postal address)
• Payment information (credit card details, billing address)
• Tour preferences and special requirements
• Emergency contact information
• Dietary restrictions and accessibility needs
• Marketing communication preferences

2.2 Automatic Information

When you visit our website, we may automatically collect certain information, including:

• IP address and location data
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookie and device identifiers

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and managing our tourism services
• Processing bookings and payments
• Communicating with you about your tours and bookings
• Sending marketing communications (with your consent)
• Improving our website and services
• Ensuring safety and security during tours
• Complying with legal obligations
• Preventing fraud and unauthorized activities

4. Legal Basis for Processing (UK GDPR)

Under UK GDPR, we process your personal data on the following legal bases:

• Contract: Processing necessary for the performance of our tourism services
• Consent: Where you have given clear consent for marketing communications
• Legitimate Interests: For improving our services and website functionality
• Legal Obligation: To comply with applicable laws and regulations
• Vital Interests: To protect your safety during tours

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, including:

• Payment processors
• Transportation providers
• Accommodation providers
• Insurance companies
• IT and website service providers

5.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal processes.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Secure socket layer (SSL) technology
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please refer to our Cookie Policy.

8. Your Rights (UK GDPR)

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Rights related to Automated Decision Making: Not to be subject to automated decisions

To exercise any of these rights, please contact us using the details provided in Section 11.

9. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typical retention periods include:

• Booking and payment information: 7 years (for tax and accounting purposes)
• Marketing communications: Until you unsubscribe or withdraw consent
• Website analytics data: 24 months
• Customer service records: 3 years

10. International Transfers

Your information may be transferred to and processed in countries other than the United Kingdom. When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government
• Standard contractual clauses
• Binding corporate rules
• Certification schemes

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

12. Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters:

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated Privacy Policy on our website and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated Privacy Policy.

14. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.