GDPR Compliance

Last updated: May 2026

Our commitment

Bold Prairie is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018.

Legal basis for processing

We process your personal data under the following legal bases:

• Contractual necessity: To fulfill tour bookings and communicate about services you've requested
• Legitimate interests: To respond to enquiries and maintain business records
• Consent: For any marketing communications, obtained separately with clear opt-in

Data controller

Bold Prairie is the data controller for personal information collected through this website and booking processes.

Contact: [email protected]

Your GDPR rights

Right to access

You can request a copy of the personal data we hold about you at any time.

Right to rectification

If your personal data is inaccurate or incomplete, you can request correction.

Right to erasure

You can request deletion of your personal data, subject to legal retention requirements.

Right to restrict processing

You can request that we limit how we use your data in certain circumstances.

Right to data portability

You can request your data in a structured, commonly used format for transfer elsewhere.

Right to object

You can object to processing based on legitimate interests or for direct marketing.

Rights related to automated decision making

We do not use automated decision-making or profiling.

How to exercise your rights

To exercise any of these rights, email us at [email protected] with:

• Your name and contact details
• Details of your request
• Any relevant reference numbers (booking confirmations, etc.)

We will respond within one month of receiving your request.

Data sharing

We do not sell, rent, or share your personal data with third parties except:

• When required by law
• To protect our legal rights
• With your explicit consent

International transfers

Your data is processed and stored within the United Kingdom and European Economic Area. We do not transfer personal data outside these regions.

Data breaches

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities within 72 hours as required by GDPR.

Complaints

If you believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

Updates to this notice

We may update this GDPR information periodically. Changes will be posted on this page with an updated revision date.