GDPR has been incorporated into UK data protection law as the UK GDPR. This is my GDPR Statement of Operation.

How do I operate?

I operate as a sole trader registered as working from my home address. I provide summer guided hill and mountain walking, navigation sessions and trail running trips. I operate mainly in Scotland but may sometimes work in other areas of the UK. Your activity booking is made with me.

What information do I ask you for?

When booking an activity with me, you will be asked for certain information. This includes (but may not be limited to, and may change from time to time without prior notification) your contact details, contact details for someone of your choosing who can be contacted in the event of an emergency occurring, a medical declaration and details of any previous experience you may have in relation to the activity which you have booked.

Why is this information needed?

Primarily, this information is needed so that the activity can be delivered enjoyably and efficiently, and with an awareness of any factors which might affect your ability to take part.

Your mobile telephone number may be needed to contact you if, for example, you do not arrive at the agreed meeting place at the expected time.

An emergency contact is required in case an emergency situation arises.

Medical information is required for awareness purposes. Disclosure of medical information will not necessarily affect whether or not you can take part in an activity, but it is important that I’m made aware of any relevant current or recent medical conditions so that these can be taken into account when planning your time with me. 

In the event of an emergency occurring, medical information may be shared with Mountain Rescue personnel, other emergency services, and / or medical professionals.

How is your information stored?

Prior to the activity taking place, your information will typically be held in electronic format, stored on and accessed only via my secure business laptop and / or smartphone.

To assist with the delivery of the activity, it is necessary to carry a copy of your information “on the hill”. This is likely to be in electronic format, stored on and accessed only via my secure business smartphone, or a paper copy. In either format, your information remains on my person throughout the activity.

What happens to your information after the activity has taken place?

Your information will be kept securely on my laptop/ smart phone for five years from the end of the financial year in which the activity took place. After this time, if your information is not required for insurance or legal purposes, it will be destroyed.

• Registered with the Information Commissioner’s Office: Reference: C2029171. Expiry date: 09/09/2027.