Privacy Policy
Effective date: 1 August 2026
This Privacy Policy explains how Quartz Cultural Tours (also referred to as we, us or our) collects, uses, shares and protects personal information when you visit our website quartzes.pro, make an enquiry, place a booking or join one of our guided tours in Bristol. We respect your privacy and comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and, where applicable, the EU GDPR and the California Consumer Privacy Act (CCPA).
Who we are and how to contact us
Quartz Cultural Tours is a tour operator based in Bristol, United Kingdom. Our address is 14 King Street, Bristol, BS1 4EF, United Kingdom. You can contact us at [email protected] or +44 117 123 4567 regarding this policy or your data rights. For the purposes of data protection law, we are the controller of the personal data we process.
What information we collect
We collect the following categories of information
Identification and contact details such as your name, email address, telephone number and postal address when you enquire or book.
Booking information including tour selection, date, group size, accessibility needs, language preferences and payment reference numbers.
Payment details processed through our secure payment provider. We do not store full card numbers or security codes on our systems.
Communications such as emails, messages and feedback you provide before or after a tour.
Website and device data such as IP address, browser type, pages viewed, and referring site, collected via cookies or similar technologies. See our Cookie Policy for details.
Photography and testimonials with your consent, for example if you agree to have a photo taken on a tour for marketing use.
How we use your information and legal bases
We use your personal data for the following purposes, under the legal bases set out below
To provide tours and manage bookings, including confirmations, updates and customer support. Legal basis: performance of a contract or steps prior to entering a contract.
To process payments and prevent fraud. Legal basis: performance of a contract and legitimate interests.
To respond to enquiries and provide tailored recommendations (for example, accessibility routes or meeting points). Legal basis: legitimate interests in running our business and serving customers.
To send service messages about your booking (time changes, weather adjustments, meeting locations). Legal basis: performance of a contract.
To send optional marketing communications such as newsletters or new tour announcements. Legal basis: consent (you can withdraw at any time) or legitimate interests where soft opt-in applies under UK law.
To improve our website, services and routes using analytics and feedback. Legal basis: legitimate interests and, for non-essential cookies, consent.
To meet legal and regulatory obligations, including accounting and tax. Legal basis: legal obligation.
Sharing your information
We share personal data only when necessary
With payment processors to handle secure transactions.
With email and booking software providers to deliver confirmations and manage schedules.
With guides and staff who need details to deliver your tour professionally (e.g., your name, group size, accessibility notes).
With analytics and website service providers, using aggregated or pseudonymised data wherever possible.
With authorities or professional advisers where required by law, to protect our rights, or to investigate suspected fraud.
We do not sell personal information. Under the CCPA, we do not share personal information for cross-context behavioural advertising.
International transfers
Our primary systems are hosted in the UK or the EEA. If we transfer personal data outside the UK or EEA, we will use appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or rely on an adequacy decision. You may request a copy of the relevant safeguards using the contact details above.
Data retention
We keep personal data only as long as needed. Typical retention periods are
Booking records and related communications: up to seven years to meet tax and accounting requirements.
Customer support emails: up to three years after last contact.
Marketing preferences: until you unsubscribe or withdraw consent.
Website analytics: according to our Cookie Policy and provider settings, usually 14 to 26 months.
Accident reports or incident logs: as required by health and safety law.
Your rights
Under the UK GDPR and, where applicable, the EU GDPR, you have rights over your personal data, including
The right to access a copy of your data.
The right to rectify inaccurate or incomplete data.
The right to erase data in certain circumstances.
The right to restrict or object to processing, particularly where we rely on legitimate interests.
The right to data portability for information you provided to us.
Rights in relation to automated decision making and profiling (we do not carry out automated decisions with legal effects).
To exercise your rights, contact [email protected]. We may ask for proof of identity and will respond within one month. If you are dissatisfied, you can complain to the UK Information Commissioner's Office.
Marketing communications
We will send marketing emails only with your consent or where UK soft opt-in rules apply. You can unsubscribe using the link in any email or by contacting us. Opting out will not affect essential service messages about your booking.
Children's privacy
Our services are suitable for families, but we do not knowingly collect personal data from children without consent from a parent or guardian. If you believe a child has provided us with personal information without appropriate consent, please contact us and we will delete it.
Security
We use technical and organisational measures to protect personal data, including encryption in transit, access controls, secure passwords, regular updates and staff training. No system is entirely risk-free; we maintain incident response procedures and will notify you and regulators of significant breaches when required by law.
Third-party links
Our website may link to third-party sites such as museums, attractions and transport providers in Bristol. These sites have their own privacy policies, and we are not responsible for their content or practices.
Changes to this policy
We may update this Privacy Policy to reflect legal, technical or business developments. The latest version will always be available on this page with an updated effective date. If changes are material, we will provide additional notice, for example by email to customers with upcoming bookings.
Contact and data complaints
If you have questions about this policy or your personal data, contact [email protected] or write to Quartz Cultural Tours, 14 King Street, Bristol, BS1 4EF. You have the right to lodge a complaint with the UK Information Commissioner's Office. We would appreciate the chance to resolve your concerns directly in the first instance.
This policy is intended to provide clear information but does not constitute legal advice.
Contact
Questions about this policy can be sent to [email protected] or by post to Quartz Cultural Tours, 14 King Street, Bristol, BS1 4EF, United Kingdom.