Privacy Policy

Who we are

Our website address is: https://www.oldtowntravels

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

When you complete the contact form on our website, we will ask you for a number of pieces of personal information, such as your name, email address and other contact details. This is obviously required for us to respond to your request.

We do not store the submissions on the server and rely on the third party plugin – Contact Form 7, to email responses to you. Contact Form 7 privacy policy can be found here.

If you do not use or submit an online form on the website, no data will be collected in that regard.

Email list

When you sign up to our email list it is necessary for us to collect minimum personal data from you, such as your name and email address. This is required for us to send you the Newsletter that you signed up for.

We use a third party marketing platform – MailChimp to manage our subscriptions. Thier privacy policy can be found here.

Cookies

These are small text files placed in the memory of your browser or device when you visit a website. Cookies allow a website to recognize a particular device or browser. There are several types of cookies:

Session cookies expire at the end of your browser session and allow us to link your actions during that particular browser session.
Persistent cookies are stored on your device in between browser sessions, allowing us to remember your preferences or actions across multiple sites.
First-party cookies are set by the site you are visiting.
Third-party cookies are set by a third party site separate from the site you are visiting.

There are a number of ways that you can influence how cookies are used on your particular device. Most commercial browsers (such as Chrome, Safari, Edge, Internet Explorer, Firefox etc) allow you to set preferences for whether to allow or block website cookies.

They will also provide tools that allow you to remove any cookies that have already been set. Using the ‘Help’ functionality of your browser, or an internet search will help you to understand how to use these features for your particular browser.

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

We use Google Analytics to understand better what people look at on our website.

When people visit our site, information about their visit (such as which pages they look at, how long they spend on the site and so on) is sent in an anonymous form to Google Analytics which is controlled by Google. Google’s privacy policy can be found here.

The data contains information about anyone who uses our website from your computer, and there is no way to identify individuals from the data.

We do not collect data for remarketing or advertising purposes

As analytics information is not personal data, we do not specifically ask for your prior consent.

Who we share your data with

We operate on a strict ‘need to know’ basis for all data that we work with, and that is particularly true for any personal data. The only people/organisations that are granted access to personal data are:

The website administrator;
Our web hosting technology supplier (Cloudways) who provides the physical server infrastructures that our website operates on. Their privacy policy can be found here.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.

When you sign up for a newsletter, your personal data will be retained for as long as you wish to stay subscribed.

The data we collect in Google Analytics does not expire. We use it in reports to improve the user experience on our website.

What rights you have over your data

If you have subscribed to our newsletter, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.

You have a number of rights regarding the personal data that we hold:

You have the right to obtain from us confirmation about whether any such data is being held;
You have the right to require that we provide you with whatever data we are holding/processing about you, including the right for that data to be transferred to another data controller;
Even if you have consented to Us processing your personal data, you have the right to withdraw that permission at any time;
You have the right to require us to rectify any incomplete or incorrect information held about you;
You have the right to require us to erase the data held about you (the ‘right to be forgotten’);

Where we send your data

Visitor comments may be checked through an automated spam detection service.

Additional information

How we protect your data

We take the security of all personal data very seriously, and that data is protected in a number of ways:

Access control: access to personal data is strictly limited in line with our policy detailed in the ‘who we share data with section’ on this page. Access is controlled by the website administrator, and a strong password policy is enforced.
Dedicated security software: We operate dedicated security scanning and access control software on our website. This software is responsible for limiting login attempts to our site, blocking potentially malicious attempts to access our services, and regularly performing full file system scans.
Data encryption: This website is also secured with SSL encryption, which means that all traffic to and from our servers is encrypted. This applies to our own administrative access to the website as well as that of users of our services.
Selection of third party service providers: we use a very limited number of third-party service providers, but some are essential for the provision of physical hosting environments and cloud services. One of the core factors in the selection of such providers is their ability to provide secure systems and processes.