Privacy Policy

Last updated: 25th August 2024

1. Introduction

Royal Heritage UK ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website quilted-twist.com and use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number)
• Newsletter subscription preferences
• Tour booking information
• Communication preferences
• Feedback and correspondence

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and usage patterns:

• IP address and location data
• Browser type and version
• Operating system
• Referring website addresses
• Pages viewed and time spent on our site
• Date and time of visits

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and maintaining our services
• Processing newsletter subscriptions
• Responding to your enquiries and providing customer support
• Sending you marketing communications (with your consent)
• Improving our website and services
• Complying with legal obligations
• Protecting against fraud and unauthorised activities

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Consent: When you have given clear consent for specific processing activities
• Contract: When processing is necessary for performing a contract with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests

5. Sharing Your Information

We do not sell, trade, or otherwise transfer your personal information to third parties, except in the following circumstances:

• With your explicit consent
• To service providers who assist us in operating our website and services
• When required by law or to protect our legal rights
• In connection with a business transfer or merger

6. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Newsletter subscriptions: Until you unsubscribe or we cease operations
• Customer enquiries: 3 years from last contact
• Website analytics: 26 months
• Legal compliance records: As required by applicable law

7. Your Rights

Under UK data protection law, you have several rights regarding your personal information:

• Right of Access: Request a copy of the personal data we hold about you
• Right of Rectification: Request correction of inaccurate personal data
• Right of Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for specific processing activities

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. Please see our Cookie Policy for detailed information about the cookies we use and how to manage your preferences.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Staff training on data protection practices

10. International Data Transfers

Your personal information may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by UK authorities
• Certification schemes and codes of conduct

11. Children's Privacy

Our services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Supervisory Authority

If you believe we have not handled your personal data in accordance with this policy, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Website: ico.org.uk