Privacy policy

Privacy Policy

Last updated: 06/06/25

At Galway Rafting, we take the privacy of our customers seriously. This privacy policy outlines how we collect, use, and protect your personal information when you make bookings with us.

1. Types of Data Collected

We collect the following personal information when you make a booking:

• Name

• Phone number

• Email address

• Address

• Emergency contact (Next of kin) phone number
  
  

2. Purpose of Data Collection

We collect this information to:

• Facilitate your booking

• Send booking confirmations and updates

• Provide customer support when needed

• Ensure your safety during activities by having an emergency contact
  
  

3. Legal Basis for Processing

We process your personal data under:

• Article 6(1)(b) GDPR – Processing is necessary for the performance of a contract (your booking with Galway Rafting).
  
  

• Article 6(1)(d) GDPR – Emergency contact details are processed under the lawful basis of vital interests, to ensure your safety during activities.
  
  

• Article 6(1)(a) GDPR – If you opt in to receive marketing emails, we process your data based on your explicit consent.
  
  

4. Data Storage and Security

Your personal data is securely stored. We take appropriate measures to protect it from unauthorised access or disclosure. Only authorised personnel at Galway Rafting have access to your information.

5. Data Sharing

We do not share your personal information with third parties. Your data is used solely by Galway Rafting to manage bookings, ensure your safety, and provide support.

6. Marketing Communications

If you opt-in to receive marketing updates from Galway Rafting, we may send you occasional news, updates, or offers. You can unsubscribe at any time via the link in our emails or by contacting GalwayRafting@gmail.com.

7. International Data Transfers

We use third-party services, such as Google Sites and Google Workspace, to store and process some of your data. These services may transfer data outside the EU. Google complies with the EU–U.S. Data Privacy Framework and provides appropriate safeguards to protect your data.

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data

• Request correction of incorrect or outdated information

• Request deletion of your data

• Withdraw consent for marketing at any time
  
  

To exercise your rights, email: GalwayRafting@gmail.com
We will respond within 30 days.

9. Data Retention

We retain your data for up to 2 years after your booking, unless required longer for legal or insurance reasons. After this, your data is securely deleted.

10. Cookies

Our website is hosted on Google Sites, which may use cookies to enhance user experience or for analytics. We do not directly control these cookies. For details, refer to Google’s Privacy Policy.

11. Data Controller

Galway Rafting
Email: GalwayRafting@gmail.com

12. Changes to This Policy

We may update this policy from time to time. Changes will be posted here with the updated effective date.