top of page

Privacy Policy

Privacy Notice.

The following privacy notice has been created using the template from the Information Commission Organisation (ICO) and is used to explain to all who engage with Inward Adventures what information we collect, how we handle it and how we store it along with how to make a complaint. This privacy notice is published as the privacy notice on the Inward Adventures website and is available to the general public.

 

Contact Details.

The following details can be used to contact the data controller for Inward Adventures.

  • Name of organisation: Inward Adventures.

  • Name of data controller: Daniel Claricoates.

  • Address: 3 Tor View, Princetown, Yelverton, Devon,, PL20 6RN.

  • Phone number: 07840809897.

  • Email: danny@inwardadventures.co.uk

  • Website: www.inwardadventures.co.uk

  • Inward Adventures is registered with the Information Commission Organisation reference ZA784050.

 

What type of information do we have.

Inward Adventures collects the following personal information.

  • Names of customers and staff.

  • Addresses of customers and staff.

  • Dates of birth and ages of customers and staff.

  • Sex of customers and staff.

  • Names of emergency contacts of customers and staff.

  • Relationship of emergency contacts to customers and staff.

  • Phone numbers for customers and staff.

  • Medical information of customers and staff.

  • Signatures of customers and staff.

  • Consent of customers and staff.

  • Assessment including POMS assessment and Core 34.

  • Feedback from customers and staff.

  • Copies of qualifications certificates and / or evidence of competence and evidence of insurance cover for staff.

  • Google, Facebook, Instagram and Wix collect other information for analytics apps. Inward Adventure does not directly collect, handle or store this information but does use analytics apps.

  • Photographs and video of customers and staff participating in courses and / or Adventures

​

How we get the information and why do we have it.

Inward Adventures collects personal information through a number of methods.

  • Customer personal information, consent and medical information through consent and medical forms sent directly to the customer during the booking and confirmation process for an event, course or Adventure. The information provided to us is normally submitted directly to us from the customer.

  • Customer and staff personal information, consent and medical information through our online Covid 19 declaration. The customer completes this online form and information provided to us is normally submitted directly to us from the customer or staff member.

  • Staff registration process documents and contracts. Staff information is normally submitted directly to us from potential staff members.

  • Through the use of analytic apps for Google, Facebook, Instagram and Wix. This is done by the app and websites we use under their own privacy policy. Information we see and use cannot be used to directly identify a person.

Inward Adventures has this information for the following reasons,

  • Compliance with our legal and regulatory governance obligations and good practice.

  • Gathering information as part of administration and investigation by regulatory bodies or in connection with legal proceedings or requests.

  • Ensuring process can be carried out and are adhered to (such as our emergency and outside medical aid procedures).

  • Operational reasons, such as recording transactions, training and development, quality control, and medical or emergency procedures. 

  • Investigating complaints.

  • Ensuring safe working practices, monitoring and managing the welfare of customers and staff.

  • Administration and assessments.

  • Managing selection, employment of staff including security vetting, competence and qualifications, general conduct and disciplinary matters.

  • Learning, developing and improving Inward Adventures.

By submitting the information Inward Adventures requests from you, you are granting permission to process, use and store the information as set out in this document. 

You have the right to withdraw your permission at any time.

For more information on this please see your data protection rights section.

 

What we do with the information we have.

Inward Adventures stores personal information for the compliance of our legal and regulatory requirements for the following durations.

  • Inward Adventures will retain data for no longer than it is necessary. The duration of necessity will vary depending on the requirement to keep it and the permission a customer of staff member has given us. 

    • Customers and staff over the age of 18 years old will be kept for 3 years from the date of completion.

    • Customers under the age of 18 years old will be kept up to their 18th birthday and then 3 years after.

  • Inward Adventures uses personal information, consent and medical information to ensure the welfare and safety of all customers and staff members, is well looked after through out their time with Inward Adventures.

  • Inward Adventures will use and share personal information, consent and medical information with emergency services, such as police or ambulance services, should there be a requirement to do so, in an emergency situation. 

  • Inward Adventures will use photographs and videos to publicise the courses and Adventures it delivers. We may use imagery and video for promotion of Inward Adventures through places such as online social media, websites, events and meetings.

  • Inward Adventures will not attach names of customers or staff to any imagery unless permission has been sought first from those in the imagery.

  • Inward Adventures does not, and will not knowingly share any personal information, consent or medical information with any other 3rd party organisation, company, charity or body.

  • Inward Adventures may use some personal information it stores for analytic purposes to develop how we operate and to develop what we deliver.

 

How we store your information.

  • Inward Adventures will store personal information and data on a dedicated, double password protected and encrypted, hard drive. This is periodically backed up to a separate double password protected and encrypted hard drive. At no point is any data shared to a cloud based storage system.

  • All personal information and data sent via email, that is required for the safety and wellbeing of participants or staff on a course or Adventure will be downloaded directly to the dedicated, double password protected and encrypted hard drive. The emails containing the personal information or data will then be erased from the email system.  

  • Any hard copies of any documents will be scanned electronically and saved on the dedicated, double encrypted hard drive, all hard copies of documents are then destroyed using a cross cut shredder.

  • Inward Adventures will store all personal information, consent and medical information for the durations set out in 7.1. The information will be used as a record of attendance only.

  • All data stored electronically will be reviewed on an annual basis and any personal information or data no longer required will be erased from the electronic storage.

  • Personal information and data will not be downloaded or saved to any other electronic device such as a phone or a tablet. 

  • All data will be stored in a secure place, so that no unauthorised persons can access it.  

  • Data stored on hard drives will be password protected using strong passwords made up of letters, numbers and symbols.

  • All possible measure will be put in to place to ensure that any data Inward Adventures has position of is kept secure and protected.

 

Your data protection rights.

Under data protection law, you have rights including:

  • Your right of access - You have the right to ask us for copies of your personal information. 

  • Your right to rectification - You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. 

  • Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances. 

  • Your right to restriction of processing - You have the right to ask us to restrict the processing of your information in certain circumstances. 

  • Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.

  • Your right to data portability - You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

  • Please contact us using the following contact details if you wish to make a request.

 

How to make a complaint.

  • You can complain directly to us using the following contact details.

  • You can also complain to the ICO if you are unhappy with how we have used your data.

    •  Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

    •  Helpline number: 0303 123 1113

Your Data Protection Rights
bottom of page