Legal
Privacy policy
Last updated: 7 October 2026
Demo website. Devon Paddle Co. is a fictional company, and this is a sample policy written for the demo. A real business would need its own, checked against how it actually handles people’s details.
This page explains what we do with the details you give us when you book a trip, send us a message or sign up for our emails, and what you can ask us to do with them. We keep it short and in plain English.
1. Who we are
Devon Paddle Co. runs guided sea kayak trips from Goodrington Sands, Paignton, Devon. We are responsible for the personal details described on this page (the “data controller”, in legal terms).
If you have any questions about your details, email us at hello@devonpaddleco.co.uk or call 07700 900 123.
2. What we collect
- When you ask to book a trip: your name, email address and phone number, the trip, date and time you choose, how many people are coming (and for family trips, how many children), and anything you add in the notes.
- When you send us a message: your name, email address and what you write.
- When you sign up for emails: your email address.
We don’t take card details on this website. When we confirm a booking, we send you a payment link, and the payment is handled by our payment provider.
If you tell us about a health condition so we can keep you safe on the water, we only use it for that trip, and only because you chose to tell us.
3. How we use it, and why
Data protection law (the UK GDPR) says we need a reason, called a “lawful basis”, for each thing we do with your details:
| What we do | Why we’re allowed to |
|---|---|
| Confirm and run your booking, and contact you about it (for example if the weather changes) | To carry out our agreement with you |
| Reply to your messages | Our legitimate interest in answering questions about our trips |
| Send you season dates and last-minute spaces | Your consent, which you can take back at any time |
| Keep booking and payment records | Our legal duty to keep financial records |
We never sell your details, and we don’t use them for advertising.
4. How long we keep it
- Bookings: six years after your trip, because we have to keep financial records for tax.
- Messages: twelve months after we last hear from you.
- Emails: until you unsubscribe. Every email has an unsubscribe link.
- Health notes: deleted once your trip is over.
7. Your rights
You can ask us to:
- send you a copy of the details we hold about you;
- correct anything that’s wrong;
- delete your details, unless we have to keep them by law;
- stop or limit how we use them;
- give your details to you, or to another company, in a common format.
Just email or call us. We’ll reply within one month, and it’s free.
If you’re unhappy with how we’ve handled your details, you can complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint. We’d be grateful if you gave us the chance to put things right first.
8. Changes to this policy
If we change how we use your details, we’ll update this page and the date at the top.