Last updated: 6 August 2026
Lake District Adventuring (“we”, “us”, “our”) is committed to protecting your personal information. This policy explains what we collect, why we collect it, and what your rights are. We are the data controller for the information described below.
Lake District Adventuring
Unit 15, Redhill Business Park, Redhills, Penrith, CA11 0DT
Email: info@lakedistrictadventuring.co.uk
Phone: 07502 604166
1. Information we collect
When you make a booking. Your name, email address, phone number and billing address; the names and dates of birth of everyone in your party; the activity, date and time booked; and any notes or requests you send us.
Health and medical information. Before taking part, everyone in your group completes a medical and disclaimer form. This may include details of medical conditions, medication, injuries, allergies and swimming ability, and emergency contact details. Health information is treated as “special category” data under UK GDPR and is handled with additional care — see section 3.
Payment information. Payments are processed by Stripe. We do not see or store your full card details. We receive confirmation of payment, the amount, and the last four digits of the card.
When you contact us. Anything you send us by email, phone, WhatsApp or our website contact form, and our replies.
When you use our website. Pages visited, approximate location, device and browser information, and how you arrived at our site. This is collected through cookies and similar technologies, and only where you have given consent.
Photographs. We often take photographs during activities and share them with you afterwards. If you would prefer not to be photographed, or would prefer we do not use an image publicly, tell your instructor on the day or email us — we will always respect that.
2. Why we use it, and our lawful basis
To provide the activity you have booked — including contacting you before the day, confirming meeting points, and running the session safely. Lawful basis: performance of a contract.
To keep you and our staff safe — reviewing medical forms, assessing suitability, managing incidents, and meeting our health and safety obligations. Lawful basis: legal obligation, and explicit consent for health information.
To take payment and keep proper accounts. Lawful basis: performance of a contract, and legal obligation.
To deal with insurance matters, incidents or claims. Lawful basis: legal obligation, and our legitimate interests in defending legal claims.
To improve what we do — understanding which activities are popular, how people find us, and how our website performs. Lawful basis: legitimate interests, and consent where cookies are involved.
To tell you about our activities — occasional emails about trips, availability and offers, where you have booked with us before or asked to hear from us. Every message includes an unsubscribe link. Lawful basis: consent, or legitimate interests where you are an existing customer.
3. Health and medical information
We only collect health information because we need it to run adventurous activities safely. We ask for it, and use it, on the basis of your explicit consent, and because it is necessary to protect your vital interests and those of others in the group.
It is seen only by the instructor delivering your activity and by whoever administers your booking. It is not used for marketing, never sold, and never shared beyond what is described below.
If you would rather discuss a medical matter privately rather than write it on a form, call Jack on 07502 604166 before your session.
4. Who we share information with
We do not sell your personal information to anyone. We share it only where necessary:
- Checkfront — our booking system, which stores your booking and forms.
- Stripe — our payment processor.
- Freelance instructors — the qualified instructor delivering your activity receives the participant details and medical information needed to run the session safely.
- Booking partners — if you booked through Viator, GetYourGuide or a similar platform, that platform holds its own record of your booking and has its own privacy policy.
- Google — website analytics and advertising measurement, only where you have consented to cookies.
- Emergency services and medical professionals — if there is an incident and it is necessary to protect someone’s health or safety.
- Our insurers and professional advisers — where required to handle a claim or meet a legal obligation.
Some of these providers are based outside the UK. Where information is transferred internationally, it is protected by appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
5. How long we keep it
- Booking and payment records — 6 years after the end of the relevant financial year, to meet HMRC requirements.
- Medical and disclaimer forms — 3 years after the activity. Where the participant was under 18, until 3 years after their 18th birthday, in line with the time limits for personal injury claims.
- Incident and accident records — a minimum of 3 years, and longer where our insurers require it.
- Marketing contact details — until you unsubscribe or ask us to remove you.
- Website analytics — up to 26 months.
6. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the information we hold about you
- have inaccurate information corrected
- ask us to delete your information, where we are not required to keep it
- ask us to restrict how we use it
- object to us using it for our legitimate interests or for marketing
- receive your information in a portable format
- withdraw consent at any time, including for cookies and marketing
To exercise any of these, email info@lakedistrictadventuring.co.uk. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would rather you came to us first so we can put it right.
7. Children
Many of our activities are open to under-18s. Bookings for children must be made by a parent or guardian, who provides the medical information and consent on their behalf. Children must be accompanied by an adult unless otherwise agreed.
8. Cookies
Our website uses cookies for essential functions, and — with your consent — for analytics and advertising measurement. You can change your choice at any time using the cookie preferences link on our site. Full detail is in our Cookie Policy.
9. Security
We use reputable providers with appropriate security measures, access is limited to those who need it, and payment data is handled entirely by Stripe. No system is perfectly secure, but we take the protection of your information seriously — particularly medical information.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
If anything here is unclear, or you would like to know more about how we handle your information, just ask — email info@lakedistrictadventuring.co.uk or call 07502 604166.
