Privacy Policy
Hazlewood Adventures – Hazlewood Castle Activities
Effective Date: 22.02.26
Last Updated: 22.02.26
Hazlewood Adventures (“we”, “us”, “our”) delivers outdoor activities and corporate events at Hazlewood Castle, Yorkshire. We are committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, store and protect your personal information when you:
- Visit our website: https://www.hazlewood-adventures.co.uk
- Make a booking for activities at Hazlewood Adventures
- Contact us by phone, email or enquiry form
- Participate in our activities or events
- Engage with our marketing communications
If you have any questions about this policy or your personal data, please contact:
📧 martinwicks@ashdalehotels.com
1. Who We Are
Hazlewood Castle is the Data Controller responsible for your personal data.
Registered Company Name: Northern Touch Limited
Registered Address: Hazlewood Castle Paradise Lane, Hazlewood, Tadcaster, Leeds, England, LS24 9NJ
Company Number: 03385974
ICO Registration Number: ZA662229
2. The Personal Data We Collect
We collect only the data necessary to deliver safe, lawful and high-quality activity experiences at Hazlewood Castle.
Information You Provide Directly
- Full name
- Email address
- Telephone number
- Billing address
- Booking details
- Emergency contact information
- Health declarations relevant to activity safety
We do not knowingly collect special category (sensitive) data unless required for safety reasons and provided voluntarily (e.g., medical conditions relevant to participation).
Payment Information
Payments are processed securely via Rezdy (our booking platform). We do not store full card details on our systems.
Rezdy Privacy Policy: https://rezdy.com/privacy-policy/
Information Collected Automatically
When you visit our website, we may collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent
- Referral source
- Cookie identifiers
This data helps us maintain website security and improve user experience.
3. How We Use Your Data
We process personal data under lawful bases set out in UK GDPR Article 6.
We use your information to:
- Deliver and manage bookings at Hazlewood Castle
- Provide safety briefings and ensure participant welfare
- Process payments and issue confirmations
- Communicate about your booking
- Respond to enquiries
- Comply with legal and insurance obligations
- Improve our services
- Send marketing communications (with consent)
4. Legal Bases for Processing
We rely on the following lawful bases:
Contractual Necessity
To fulfil bookings and deliver services.
Legal Obligation
To comply with health and safety, insurance and financial regulations.
Legitimate Interests
To improve services, prevent fraud, and operate efficiently, provided your rights do not override those interests.
Consent
For marketing communications and certain cookies. You may withdraw consent at any time.
5. Sharing Your Information
We only share personal data where necessary.
Categories of recipients may include:
- Booking platform providers (e.g., Rezdy)
- Payment processors
- IT and hosting providers
- Marketing platforms (with consent)
- Professional advisors (legal/accounting)
- Insurers where required
We ensure all third parties have appropriate data processing agreements in place.
We do not sell personal data.
6. Data Retention
We retain personal data only as long as necessary:
- Booking and financial records: up to 7 years (legal requirement)
- Safety waivers and incident records: in line with insurance/legal obligations
- Marketing data: until you withdraw consent
When no longer required, data is securely deleted or anonymised.
7. Data Security
We implement appropriate technical and organisational security measures, including:
- Secure servers and encrypted connections
- Restricted staff access
- Password-protected systems
- Secure third-party processors
However, no system is completely immune to cyber risk. We encourage users to access our website via secure networks.
8. Cookies & Tracking
We use cookies in accordance with the Privacy and Electronic Communications Regulations (PECR).
We use:
- Essential cookies (required for site functionality)
- Analytics cookies (with consent)
- Marketing cookies (with consent)
You can manage cookie preferences via our Cookie Policy:
https://hazlewood-adventures.co.uk/cookie-policy
9. Your Data Protection Rights
If you are located in the UK, EEA or Switzerland, you have the right to:
- Access your personal data
- Request correction
- Request erasure
- Restrict processing
- Object to processing
- Data portability
- Withdraw consent
- Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO Website: https://ico.org.uk
To exercise your rights:
Email: martinwicks@ashdalehotels.com
We will respond within one calendar month.
10. Children’s Data
Our activities at Hazlewood Castle may involve participants under 18. Where bookings are made for minors, data must be provided by a parent or legal guardian.
We do not knowingly collect personal data directly from children without appropriate consent.
11. International Transfers
Where third-party providers process data outside the UK, we ensure appropriate safeguards are in place, such as:
- UK International Data Transfer Agreements (IDTA)
- Adequacy decisions
- Standard Contractual Clauses
12. Automated Decision-Making
We do not use automated decision making or profiling that produces legal or similarly significant effects.
13. Updates to This Policy
We may update this Privacy Policy to reflect legal or operational changes. The latest version will always be available on our website and marked with the updated revision date.
14. Contact Us
If you have questions about this Privacy Policy or how your data is handled at Hazlewood Castle, contact:
Data Protection Officer
Northern Touch Ltd
📧 martinwicks@ashdalehotels.com