Privacy Policy
This Privacy Policy explains how Rainbow Horizon Guides, operating the website rainbowes.pro and delivering guided tours and city walks in Glasgow, collects, uses, shares and protects your personal information. We respect your privacy and comply with UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations and, where relevant, the California Consumer Privacy Act. By booking a tour or using our site, you acknowledge this notice.
Who we are and how to contact us
Rainbow Horizon Guides is the data controller for personal data described here. Our contact details are: Rainbow Horizon Guides, 151 Bath Street, Glasgow G2 4SQ, United Kingdom. Email: [email protected]. If you have any questions or wish to exercise your rights, please contact us by email in the first instance.
Personal data we collect
We collect data you provide directly and data generated by your use of our services. This may include: identity details such as name and pronouns; contact details such as email address and phone number; booking information including tour selection, dates, party size and preferences; accessibility information you choose to share so we can plan a suitable route; communications you send us by email or form; marketing preferences; and limited payment metadata such as transaction time and amount. Card details are processed by our secure payment providers and are not stored by us.
When you visit our website we may collect device and usage data, such as IP address, browser type, approximate location, pages viewed and referring sites. We use cookies and similar technologies to run the site, remember your preferences and understand how visitors use our pages. Please see our Cookie Policy for further details.
How we obtain personal data
We collect data: when you book a tour on our site; when you contact us by email, phone or social channels; when you join our mailing list; when you complete a feedback form after a tour; and automatically via cookies and analytics when you browse our site. In some cases we may receive data from trusted partners that help process bookings and payments.
Why we use your data and legal bases
We use your data for the following purposes and under these lawful bases: to provide and manage your booking, including sending confirmations, meeting-point details and important updates, under the basis of contract performance; to respond to enquiries and provide customer support under legitimate interests; to tailor tours to your interests and accessibility needs under contract performance and, where applicable, with your explicit consent for special category information; to take payment and prevent fraud under contract performance and legitimate interests; to send service messages about safety, schedule changes or severe weather under vital interests and legitimate interests; to improve our routes, service and site through analytics under legitimate interests; and to send optional marketing communications with your consent, which you may withdraw at any time.
Sharing your data
We do not sell your personal information. We may share limited data with: professional guides assigned to your tour so they can deliver the service; payment processors to complete transactions; booking and customer management tools that store your reservation details; email and communication providers to send confirmations and updates; insurers and professional advisers for risk and compliance; and public authorities where required by law or to protect rights, safety or property.
International transfers
Our core operations are in the United Kingdom. Some service providers may store or process data in other countries. Where personal data is transferred internationally, we use appropriate safeguards such as recognised adequacy decisions, standard contractual clauses or equivalent contractual and organisational controls to protect your information.
Data retention
We keep personal data only for as long as necessary for the purposes set out in this notice. Booking and transaction records are generally kept for up to six years to meet tax and accounting requirements. Routine enquiries and correspondence are kept for up to two years. Marketing preferences are kept until you unsubscribe or request deletion. Where data is no longer needed, we delete or anonymise it securely.
Security
We use technical and organisational measures designed to protect personal data, including secure hosting, access controls, encryption in transit, staff training and role-based permissions. No method can be guaranteed 100 percent secure, but we aim to reduce risk proportionately and review our measures periodically.
Your rights under UK and EU law
Subject to conditions and exemptions, you may have the right to: access your personal data; correct inaccuracies; request deletion; restrict or object to processing; obtain a copy of your data in a portable format; and withdraw consent where processing is based on consent. To exercise these rights, contact [email protected]. We will respond within one month, or inform you if more time is needed for complex requests. You also have the right to lodge a complaint with the Information Commissioner’s Office, though we would welcome the chance to resolve concerns directly.
California privacy notice
If you are resident in California, you may have the right to request to know the categories and specific pieces of personal information we have collected about you, the sources and purposes of collection and any disclosures for a business purpose; to request deletion of personal information, subject to legal exceptions; to correct inaccurate information; to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in California law. We will not discriminate against you for exercising your rights. You or your authorised agent may submit a request by emailing [email protected] and we will verify your identity before actioning the request.
Children’s data
Our services are family friendly, but we do not knowingly collect personal data from children without the involvement of a parent or guardian. If you believe a child has provided us personal data without appropriate consent, please contact us and we will take appropriate steps to remove the information.
Cookies and similar technologies
We use cookies to run essential site features, remember choices and analyse traffic. Non-essential cookies are used only with your consent. For details of cookie categories, retention and how to manage preferences, please read our Cookie Policy.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in law or our services. The latest version will always be published on rainbowes.pro with an updated effective date. If changes are material we will provide a clear notice on the site or contact you by email when appropriate.
Contact
For privacy questions or requests, email [email protected] or write to Rainbow Horizon Guides, 151 Bath Street, Glasgow G2 4SQ, United Kingdom.
Effective date: 1 August 2026.
Contact
Questions about this policy can be sent to [email protected] or by post to 151 Bath Street, Glasgow G2 4SQ, United Kingdom.