Mountain Addiction is a privately owned mountaineering business providing mountain training, guiding and challenges. We need to collect, use and disclose information in order to provide our range of business services, which includes taking and managing bookings. We are committed to the protection of personal information, and maintaining organisational and technical procedures to safeguard the privacy and confidentiality of all information provided to us.
By providing personal information to us (either directly or consenting another person to do so on your behalf), you agree that this Policy will apply to how we handle your personal information and you consent to us collecting, using and disclosing your personal information as detailed in this Policy. If you do not agree with any part of this Policy, you must not provide your personal information to us. If you do not provide us with your personal information, or if you revoke the consent that you have given under this Policy, this may affect our ability to provide our services to you.
2. How do we collect personal information?
We will actively collect personal information from you where it is fair, reasonable and practical to do in order to provide you with our products and services. Generally, we will collect this information when we deal with you in person, by email, telephone, letter, when you use our website, and when you connect with us on social media.
a. How we collect your information via forms on our website.
Mountain Addiction operates the website at www.mountain-addiction.co.uk through a template website called www.squarespace.com. We operate our e-mailing list through www.mailchimp.com. Our website provides site visitors with information about our services. We have a number of forms embedded into the website which users can choose to fill in which collect information, including personally identifiable information, including but not limited to full name, address, email, and in some cases information which is considered to be personal or sensitive. Examples of these forms are the following:
i. Newsletter sign ups.
If you are interested in receiving electronic updates, alerts and news about our products and services, you must provide us with an email address and opt in.
ii. Contact us.
If interested in specific services, we may also ask for optional information, such as how you found us, to help us provide you with relevant updates. We will use information you provide in a Contact Us form to generate a potential client profile for internal use and, if you provide consent, send you relevant marketing material.
iii. Booking Information.
If you would like to book an event with us you must provide us with contact information as part of the online payment process. To participate in any event you must also complete a Participation Form to allow us to provide our services to you in line with our Terms and Conditions. In completing this form you will be asked for personal and sensitive information to enable us make an assessment and medical screening on your fitness for the event.
iv. Feedback Information.
This site provides an email address that permits you to send us your own comments, and any other information you choose to include. If you have made a booking with us, we may request comments and feedback information relevant to you via a feedback form or email to improve our products and services, and serve you better as an individual in the future.
b. How we collect your information from third parties.
We may work with a number of partners who advertise our products and services, and in some circumstances, we may collect personal information to assist with your booking. This includes bookings made by another person on your behalf, this could be a friend or family member travelling in your group, or an employer. When you make a booking on behalf of another person, you agree you have obtained their consent for Mountain Addiction to collect, use and disclose information in accordance with this Policy. By providing personal information to us directly or indirectly through third parties to make booking arrangements of your behalf, you are consenting to the collection, use and disclosure of information in accordance with this Policy. If you believe your information has been provided to us without your consent, please refer to the Contact Information/Complaints sections below.
3. What information do we collect?
The type of personal information we collect about you is the essential information we need to arrange, manage and deliver the services we are contracted to provide you with upon booking. To deliver our services safely we require personal information which may be considered to be sensitive by UK data protections laws, in order to manage the risk of operating in remote areas and assist us in the event of an emergency; medical or otherwise.
a. Personal Information.
Generally, the type of personal information we collect about you is the information needed to facilitate your booking. For example, we may collect details such as your name, address, telephone number, email address, passport details, emergency contact and other details relevant to your activity. When you make contact with us for other purposes, we may also collect personal information about you in relation to those purposes, such as responding to feedback.
b. Sensitive Information.
In some circumstances, we may ask you for personal information that is considered sensitive under UK data protection law. Sensitive data may include your nationality, fitness routine, dietary or physical and mental health. For example, when you complete a Participation Form, you will provide a health declaration on current medications, allergies and past medical, surgical and psychiatric history in accordance with our Terms and Conditions. This essential information will allow us to complete a detailed medical risk assessment and prepare for any medical condition that may require additional medical support or resources and/or affect someone’s ability to complete an activity safely.
4. How do we use and disclose your personal information?
From the point of contact inquiry right through to your travel booking and departure, our primary purpose is to collect the information necessary to provide you with advice on our company, our products and our services and/or assist you with a booking. However, this purpose could differ in certain circumstances (ie, the collection of personal information for your participation in consumer research, a competition or customer feedback).
By continuing to use our services and/or by providing us with personal information (or allowing another person to do so on your behalf), you consent to us using and disclosing your personal information for the purpose for which it was collected, and, where permitted by your local data protection laws, for any related secondary purpose which we believe you would reasonably expect. The purposes for which we collect personal information, and those secondary purposes which we consider to be directly related, may include:
Creating and maintaining our relationship with you by creating a client profile, to document your booking history with us, as well as interests and preferences, in order to supply you with relevant information, advice and support related to our products and services;
a. Involving you in market research to gauge customer satisfaction and feedback;
b. Make transport and accommodation bookings;
c. Complete medical screenings to make a detailed risk assessment of your fitness to participate in the booked activity;
d. Create annotated nominal role documents to be passed on to the appointed activity instructor/leader to prepare for any associated risks prior to the activity commencing;
e. Research and analysis (eg. mapping trends and preferences to develop and improve our products and services)
f. Internal accounting and administration;
g. Regulatory reporting and compliance;
h. Identification of fraud or error;
i. Other purposes as authorised or required by law (ie, health and safety, to prevent threat to life, to enforce our legal rights).
We may occasionally use your personal information to send you targeted marketing and promotional activities to promote products and service we believe may be of interest you. UK data protection law may require you to opt-in to receive this information. These marketing activities could include, but are not limited to:
i. Electronic marketing (including, e-newsletters, email, SMS, MMS and iM)
ii. Direct marketing (leaflets, brochures and letters)
iii. Telephone calls
If you wish to no longer receive an marketing/promotional material from us by electronic marketing you can request to not receive this information at any time, by following the unsubscribe prompts. To opt-out of market research and other forms of communication, please refer the contact section below.
Mountain Addiction will never sell or share your personal information or data to other companies for marketing purposes. If you participate in partnership marketing activities with Mountain Addiction and another company, you will be provided with the choice of receiving news from all companies involved.
Mountain Addiction reserve the right to use any photographs and images taken during an activity by its employees, or forwarded by any persons during the activity or connected to the activity, in its brochure, on its website, in its social network marketing activities or for use in any other relevant promotional material.
5. Who will have access to your information?
Mountain Addiction is committed to the purpose limitation, integrity and confidentiality of your personal information. Your information will be used only by authorised persons where it is relevant to do so and limited to the necessary information required for that particular purpose alone. For example, your personal identification information will be shared to obtain permits for your destination from regulatory bodies, but as medical declaration is not essential information it would not be shared in this instance.
The persons who will where necessary have access to your information may include but are not limited to:
a. Mountain Addiction Employees.
Internal staff fulfil the role of Data Controllers. Data Controllers exercise organisational measures to manage purpose limitation, authorising the use of personal information for specified, explicit and legitimate purposes as described in this Policy.
b. Medical Advisors.
In the circumstances where an individual’s medical declaration, submitted via our Particpation Form, requires further assessment from a qualified medical professional, Mountain Addiction employees will pass on the declaration to our Medical Advisor. The Medical Advisor will use this information plus any other relevant information we hold, to assess physical and mental health, provide medical risk mitigation advice, suggest medical equipment or supplies and advise our risk management procedure. This may include further email and phone discussions.
c. Contracted Instructors, Leaders, Guides or Consultants.
d. Government organisations such as National Parks.
In the circumstances where your travel arrangements include travel to a restricted area or region, we will be required to share necessary personal information with those particular government organisations to obtain the individual permits needed to access the region/area.
6. How do we store your information?
Information submitted to Mountain Addiction verbally, by email or other electronic communication or through form submissions on our website will be stored in a number of digital locations. Access to these are limited to approved Mountain Addiction staff, protected by encryption and monitored routinely for attempted breaches or incursions. Digital copies of information and communications are held by Mountain Addiction for a period of 10 years from the last update to ensure access and compliance in the event of any legal proceedings. Where paper copies of pertinent data are required, these copies are entrusted to approved Mountain Addiction personnel and destroyed when no longer of use. Where Mountain Addiction’s website is used to make payments, this information is not stored by Mountain Addiction and cannot be accessed by Mountain Addiction staff.
7. Security of Information
Mountain Addiction takes the protection of your personal and sensitive information very seriously and actively monitor their information systems for signs of misuse. Information held by Mountain Addiction will only be accessed by approved, relevant members of staff and third parties as described above, and where possible, data which is shared will first be anonymised or removed from context. Mountain Addiction undertakes to inform all customers of any potential data breaches, or suspected unauthorised access to this data, in a timely manner. Mountain Addiction operate a secure website certified through Squarespace.com and all information submitted through website forms is encrypted.
8. Access, amendment and removal of personal information
If you suspect any information on you is being held without your consent or was provided to Mountain Addiction by a third party, please contact Mountain Addiction. At any time, you may request access to your personal information as held by Mountain Addiction, subject to any legal restrictions or proof of identity, and you may also request amendments insofar as these do not restrict the ability of Mountain Addiction to complete our contract with you. Where amendments and/or removal of personal information is requested, you will accept that this may impede Mountain Addiction’s ability to deliver the contracted service and may result in a termination of that contract. If you require any reasonable adjustments to be made to either this policy, or to the accessed format of your data as held by Mountain Addiction, the company will endeavour to provide this, for example in large text, in a format which can easily be translated etc.
10. IP Addresses
This site uses Internet protocol (IP) addresses. IP addresses are unique identifiers automatically assigned to each computer when logging onto the Internet. IP addresses allow us to collect much of the same information we collect through cookies, including browser type, what pages you visit, and how long you stay on the site. In general, IP addresses allow us to identify problems with our servers, prepare aggregate demographic information and other information regarding this use of this site, and improve the functions of this site.
11. Contact Information
Mountain Addiction are at 3 Harcourt Road, Bristol, BS6 7RQ. Please contact us by email at email@example.com or by telephone on the office number 0117 431 0107 or mobile number 07713056021. The office opening hours are variable due to our travel requirements to deliver our services so we are not always in attendance at this location. Calls to us can be made UK GMT Monday – Friday 09:00 – 17:30. The Data Controller is Lachlan Bucknall who is contactable on the same details.
12. Changes to this Policy
From time to time we will update this policy. If we make any changes to this Policy, they will be published on on our website at: www.mountain-addiction.co.uk/privacy-policy You must take responsibility, and we encourage you to, check this Policy for any updates.
Last updated 21 May 2018.