Meadowreel Shufflet Ltd ("Meadowreelshufflet", "we", "our", or "us"), registered under company registration number NI689412 at 14 Linenhall Square, Armagh, BT61 7NX, Northern Ireland, is committed to safeguarding your personal data and upholding your fundamental privacy rights. This policy sets out the basis on which any personal data we collect from you, or that you provide to us through meadowreelshufflet.com, will be processed, stored, and protected in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and applicable international privacy frameworks including the California Consumer Privacy Act (CCPA).
1. Data We Collect and Methods of Collection
We process personal data only where we have a lawful basis under Article 6 of the UK GDPR. The categories of information collected include:
- Directly Provided Information: When you complete our contact or route inquiry form, we collect your full name, email address, country of residence, and any specific text or itinerary preferences you enter into the message field.
- Automated Technical Identifiers: When you access our static web resources, our server infrastructure records standard technical request logs. This includes your truncated Internet Protocol (IP) address, operating system, browser user agent string, referring web addresses, and request timestamps.
- Cookie and Local Storage State: We store your consent decisions using browser local storage keys (such as your cookie preference choice) to avoid repeatedly displaying banner notifications.
2. Purposes and Lawful Bases for Processing
We process personal data solely for defined, transparent business purposes:
- Responding to Trail Inquiries: Processing is carried out on the basis of our legitimate interest (Article 6(1)(f) UK GDPR) in answering communications initiated by you, or for taking steps prior to entering into a guide advisory relationship.
- Infrastructure Integrity and Security: Server log monitoring is conducted to detect malicious traffic, prevent Denial of Service events, and maintain server reliability under our legitimate interest in secure operations.
- Compliance with Legal Obligations: Retaining necessary transaction and communication records to satisfy statutory accounting, corporate, or dispute resolution requirements under UK law (Article 6(1)(c) UK GDPR).
3. Third-Party Processors and Service Providers
Meadowreelshufflet does not sell, rent, or lease your personal information to third parties. We engage carefully vetted service providers who process data strictly under contractual data processing agreements:
- Hosting and Content Delivery: Secure static hosting infrastructure located within the United Kingdom and European Economic Area (EEA), ensuring data remains under strong adequacy protections.
- Email Routing Infrastructure: Secure SMTP routing services employed strictly for delivering communications submitted via our contact forms.
4. International Data Transfers
Where server requests or maintenance routines necessitate processing outside the United Kingdom or EEA, we ensure appropriate safeguards are implemented in accordance with Chapter V of the UK GDPR. This includes the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or transfers to jurisdictions recognised by the UK Information Commissioner's Office (ICO) as providing adequate protection.
5. Data Retention Schedules
We hold personal information only for as long as necessary to fulfil the purposes for which it was originally collected:
- Contact and Inquiry Records: Stored for 24 months from the date of final communication to facilitate follow-up inquiries, after which records are permanently deleted or fully anonymised.
- Web Server Log Files: Automatically purged on a rolling 90-day cycle, unless required for an ongoing cybersecurity investigation.
- Cookie Consent Choices: Stored in your client browser for 12 months, after which your consent preferences are re-requested.
6. Your Statutory Rights (GDPR & CCPA)
Depending on your jurisdiction, you possess specific statutory rights regarding your personal information:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may demand correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where no overriding legal basis for processing persists.
- Right to Restriction and Objection: You may restrict processing or object to processing based on legitimate interests.
- Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format.
- Non-Discrimination: We never discriminate against any user who exercises their privacy rights under CCPA or GDPR.
7. Data Protection Officer and Contact Channels
To exercise any of your statutory rights or submit questions regarding this Privacy Policy, please contact our designated privacy team:
Data Protection Lead: Meadowreel Shufflet Ltd
Registered Address: 14 Linenhall Square, Armagh, BT61 7NX, Northern Ireland
Email: [email protected]
If you are unsatisfied with our response, you have the statutory right to lodge a formal complaint with the UK supervisory authority: The Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF (https://ico.org.uk).