At Contours Walking Holidays we are committed to treating your personal data with care and confidence,
while making it as easy as possible for you to find and book your perfect walking holiday in the UK
& Ireland. In particular we'd like to let you know that we won't ever sell, trade, rent or exchange
your details to other companies, and we go to great efforts to look after you and your data. In the
understanding of how we collect, use and look after your data.
Who are we?
Contours Walking Holidays LTD (or Contours for short) are a registered company in England, our
registration number is 04661126 and our registered address is Contours Walking Holidays, Unit 11, Via
Gellia Mill, Via Gellia Road, Bonsall, Matlock, DE4 2AJ, United Kingdom.
As required by the UK Data Protection Acts of 1998, we follow strict security procedures in the storage
and disclosure of information which you have given us, to prevent unauthorised access. We are registered
with the Information Commissioner's Office in accordance with the Data Protection Act, our reference is
A8271437, our data protection officer is Karen Simons (firstname.lastname@example.org).
What data do we collect, and how do we use it?
When you book a holiday, along with your holiday requirements, we'll ask for the following information -
full name, postal address (and billing address if different), telephone number, email address, and the
names of the travellers joining you.
Booking details are encrypted in transit via an SSL certificate, and securely stored in our database -
which is only accessible to Contours staff and our external web support team. These details enable us to
process your booking, send you your holiday details, and help us to contact you urgently if there are
When you provide payment details these are not stored by Contours is any way (either on paper or
digitally), but are securely delivered directly to our payment processor (Stripe) who fully encrypt and
secure the data.
Support, marketing & analysis
In addition to this data, we do also collect further data through secure tracking scripts. This allows us
to improve our marketing, the services we offer, and provide support to you when you need it.
The tracking scripts we currently use include Google Analytics, Full Story, Google Adwords, Facebook
Pixel, and AddThis. These scripts provide us data such as standard internet log information and visitor
behaviour patterns. At times we may also make note of your IP address and technical details such as the
browser or operating system version you use.
You have the opportunity to opt into our email marketing list via the form on our website, or when you
choose to opt in when booking. We use the email address provided to send you our monthly newsletter, as
well as occasional offers and updates. We don't sell, trade, rent or exchange your details to other
We use MailChimp a third-party provider to manage and send our email marketing campaigns. MailChimp also
provides us with statistics including numbers of clicks and opens - these help us review and improve our
We keep a record of when and how you consented to joining our email marketing list, as well as a list of
those who have asked to no longer by contacted.
You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link at the bottom
of an email, or by contacting our data protection officer Karen Simons (email@example.com).
Other forms of marketing
We don't make any cold calls or send any marketing by post. If this should change we will gather your
Who can see my data?
The data you provide is only ever visible to Contours staff and our external web support team. We never
sell your data.
To fulfill our service we will share limited data with the accommodations and service providers that are
used during the course of your holiday.
How can I access my data?
You're entitled to access or remove the personal information that we hold about you.
You can access a limited amount of data by logging into our Members Area. Should you wish to access or
remove your data please email your request to our data protection officer Karen Simons
What if data is breached?
We go to great lengths to ensure your data is extremely secure and handled with the utmost care. However,
should a data breach occur, we will contact you by email within 72 hours to notify you that this has
happened. We will follow up shortly after with a more complete explanation of the breach, how it
happened, what data was breached, the steps taken to remedy the breach and what you need to do next.
About this policy
This policy was last updated 25th May 2018. We reserve the right to update this policy without