GROUND UP GUIDING PRIVACY POLICY
Ambleside Climbing Wall and Ambleside Adventure are the trading names of Ground Up Guiding Ltd (Registered Company no 15804743), hereinafter referred to as “we”, or “us”. We are committed to protecting your privacy and, at all times, aim to respect and protect any personal information you share with us, or that we receive from others.
​​​
This Privacy Policy sets out our data processing practices and your rights and options regarding the ways in which your personal information is used and collected through our website - www.amblesideadventure.co.uk. Please read it carefully and ask a member of staff if you do not understand any sections.
​​​
The provision of your personal information to us is voluntary, however, without providing us with your information your use of our services may be impaired.
​​​
Contents:
1. How We Collect Personal Information
2. What Personal Information We Collect, Store and Process
3. How We Use Your Personal Information
4. Lawful Bases
5. Communications for Marketing
6. Under 18s Personal Information
7. How Long Do We Store Your Personal Information For?
8. What Personal Information Do We Share?
9. Security & Storage of Your Personal Information
10. International Data Transfers
11. Exercising Your Rights
12. Changes to This Privacy Policy
13. Links & Third Parties
14. How to Contact Us
​​​
1. How We Collect Personal Information
a) When you give it to us directly, such as personal information that you submit while booking.
b) When we obtain it indirectly, such as from a third party.
c) When it is available publicly, such as from social media services.
d) When you visit our website, where we collect information via cookies such as;
i.Technical information including the IP address used to connect your device to the internet, browser type and version, time zone setting, browser plug-in types and versions and operating systems and platforms.
ii. Information about your visit to the websites, including the uniform resource locator (URL) clickstream to, through, and from the website (including date and time), services you viewed or searched for, page response times, download errors, length of visits to certain pages, referral sources, page interaction information (such as scrolling and clicks) and methods used to browse away from the page.
​​​​
2. What Personal Information We Collect, Store and Process
a) Your name and contact details including postal address, telephone number, email address, emergency contact details, and where applicable, social media identity.
b) Your date of birth, gender, and relevant medical history and health.
i. The EU General Data Protection Regulation (“GDPR”) recognises certain categories of personal information as sensitive and therefore requires more protection, for example, information about your medical history and health. In certain situations, we may collect and/or use these special categories of data. We will only process these special categories of data if there is a valid reason for doing so and where the GDPR allows us to do so.
c) Your financial information, such as bank details and/or credit/debit card details.
d) Technical information about your computer/mobile device and your visits to and use of this website, including, for example, your IP address and geographical location.
e) Personal descriptions and images/photographs.
f) Details of your qualifications/experience.
g) Any other personal information which we obtain as per paragraph 1.
​​​​
3. How We Use Your Personal Information
a) To register you as a member.
b) To allow you to make a booking.
c) To otherwise provide you with services, products, or information you have requested.
d) To assist you with certification schemes, such as NICAS.
e) To answer your questions/requests and communicate with you in general.
f) To manage relationships with our partners and service providers.
g) To analyse and improve our work, services, activities, products, or information (including our website), or for our internal records.
h) To keep our facilities safe and secure.
i) To audit and/or administer our accounts.
j) To satisfy legal obligations that are binding on us, e.g. in relation to regulatory, government and/or law enforcement bodies with whom we may work and other contractual obligations pertaining to the provision of our services (e.g. insurance).
k) For the prevention of fraud or misuse of services.
l) For the establishment, defence and/or enforcement of legal claims.
​​​
4. Lawful Bases
GDPR requires us to rely on one or more lawful bases to use your personal information. We consider the grounds listed below to be relevant:
a) Where you have provided your consent for us to use your personal information in a certain way.
b) Where necessary so that we can comply with a legal obligation to which we are subject.
c) Where necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering a contract.
d) Where it is in your/someone else’s vital interests (for example, in case of a medical emergency).
e) Where there is a legitimate interest in us doing so (as long as that processing is fair, balanced, and does not unduly impact your rights as an individual).
i. When we process your personal information to achieve such legitimate interests, we consider and balance any potential impact on you (both positive and negative), and on your rights under data protection laws. We will not use your personal information for activities where our interests are overridden by the impact on you, for example where use would be excessively intrusive (unless, for instance, we are otherwise required or permitted to by law).
​​​
5. Communications for Marketing
We may use your contact details to provide you with information about our work, events, services and/or activities which we consider may be of interest to you. We will not do so without your prior consent (unless allowed to do so via applicable law).
If you have provided us with your consent previously but do not wish to be contacted by us for marketing purposes, please let us know by contacting us via the details in paragraph 14.
​​​
6. Under 18’s Personal Information
When we process children’s personal information, we will not do so without their consent or, where required, the consent of a parent/guardian. We will always have appropriate safeguards in place to ensure children’s personal information is handled with due care.
​​​
7. How Long Do We Store Your Personal Information For?
The length of time we keep your data depends on what it is and whether we have an ongoing legitimate interest to retain it (for example, to provide you with a service you’ve requested or to comply with applicable legal, tax, or accounting requirements).
If your personal information is no longer required, we are no longer lawfully entitled to process it or you validly exercise your right of erasure (please see Section 11 below), we will remove it from our records at the relevant time.
If you request to receive no further contact from us, we may keep some basic information about you on our suppression list in order to comply with your request and avoid sending you unwanted materials in the future.
​​​
8. What Personal Information Do We Share?
We do not share, sell, or rent your personal information to third parties for marketing purposes.
However, we may disclose your personal information to selected third parties to achieve the purposes set out in this Privacy Policy.
These parties may include (but are not limited to):
a) The Association of British Climbing Walls
b) The National Indoor Climbing Award Scheme
c) Local government agencies
d) Funding bodies such as Sport England and NGB (the British Mountaineering Council)
e) Awarding bodies such as Mountain Training
f) Healthcare professionals
g) Providers of kit and equipment
h) Suppliers and sub-contractors for the performance of any contract we enter into with them, such as website hosts or cloud storage providers
i) Professional service providers such as accountants and lawyers
j) Regulatory authorities, such as tax authorities
In particular, we reserve the right to disclose your personal information to third parties. In the event that we sell or buy any business or assets, in which case we will disclose your personal information to the (prospective) seller or buyer of such business or assets.
​​​
9. Security & Storage of Your Personal Information
Ground Up Guiding Ltd is committed to keeping your personal information safe and secure, and we have appropriate and proportionate security policies and organisational and technical measures in place to help protect your information.
Your personal information is only accessible by appropriately trained staff, volunteers, and contractors, and is stored in secure locations which have features to prevent unauthorised access.
​​​
10. International Data Transfers
Transfers of personal data within the European Economic Area (“EEA”) are subject to the same level of data protection law as under the GDPR, and as a UK-based organisation many of our agencies and/or suppliers are based in the EEA. However, there may be occasions when we use agencies and/or suppliers to process personal information on our behalf that are based outside the EEA resulting in the personal information we collect from you being stored in a location outside the EEA.
Please note that some countries outside of the EEA have a lower standard of protection for personal information, including lower security requirements and fewer rights for individuals. Where your personal information is transferred, stored and/or otherwise processed outside the EEA in a country that does not offer an equivalent standard of protection to the EEA, we will take all reasonable steps necessary to ensure that the recipient implements appropriate safeguards (such as by entering into standard contractual clauses which have been approved by the European Commission) designed to protect your personal information and to ensure that your personal information is treated securely and in accordance with this Privacy Policy. If you have any questions about the transfer of your personal information, please contact us. While no transmission of your personal information over the internet can be guaranteed to be 100% secure – once we have received your personal information, we will use strict procedures and security features to try and prevent unauthorised access.
​​​
11. Exercising Your Rights
You have the right to withdraw consent for Ground Up Guiding Ltd's use of your personal data at any time.
You also have the following rights:
a) Right of access – You can request confirmation of what personal information we hold on you and to request a copy of that personal information. Provided we are satisfied that you are entitled to see the personal information requested and we have successfully confirmed your identity, we will provide you with your personal information subject to any exemptions that apply.
b) Right of erasure – You can request for your personal information to be deleted from our records as far as we are required to do so.
c) Right of rectification – If you believe our records of your personal information are inaccurate, you have the right to ask for those records to be updated. You can also ask us to check the personal information we hold about you if you are unsure whether it is accurate/up to date.
d) Right to restrict processing – You have the right to ask for the processing of your personal information to be restricted if there is disagreement about its accuracy or legitimate usage.
e) Right to object – You have the right to object to processing where we are
i. Processing your personal information on the basis of legitimate interests
ii. Using your personal information for direct marketing
iii. Using your information for statistical purposes.
f) Right to data portability – To the extent required by GDPR, where we are processing your personal information (that you have provided to us) you may ask us to provide the personal information to you – or another service provider – in a machine-readable format.
g) Rights related to automated decision-making – You have the right not to be subject to a decision based solely on the automated processing of your personal information which produces legal or similarly significant effects on you, unless such a decision
i. Is necessary to enter into/perform a contract between you and us/another organisation
ii. Is authorised by EU or Member State law to which the Centre is subject (as long as that law offers you sufficient protection)
iii. Is based on your explicit consent
Please note that some of these rights only apply in limited circumstances.
We encourage you to raise any concerns or complaints you have about the way we use your personal information by contacting us via the details in paragraph You are further entitled to make a complaint to the Information Commissioner’s Office – www.ico.org.uk. For further information on how to exercise this right, contact us using the details below.
​​
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by contacting you directly where reasonably possible for us to do so and by placing an update policy on our website.
This policy was last updated on 12th November 2024.
​​
13. Links & Third Parties
We link our website directly to other sites. This Privacy Policy does not cover external websites and we are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit via links on our website.
​​​
14. How to Contact Us
Let us know if you have any questions or concerns about this Privacy Policy or about the way in which Ground Up Guiding processes and stores your personal information by contacting us.
Email: info@amblesideadventure.co.uk
Phone: +44 (0) 1539 439 803
Address: 101 Lake Road, Ambleside, Cumbria LA22 0DB