This Privacy Policy explains how Open Routes handles personal data in connection with its website, booking requests, and guided culinary and market tours. It applies to information collected through springhelmetpassport.top and related communications.
We may process contact details, booking and payment information, dietary preferences, group size, requested dates, meeting-point details, communication records, and limited technical data such as device or browser information. Where needed for a tour request, we may also process information you provide about language preference or route suitability.
We collect data when you submit a website request, communicate by email or phone, complete a booking, provide dietary information, make payment, or check in at the meeting point. We may also receive limited data from payment processors and service providers that support the website or booking process.
Cookies may include strictly necessary cookies for site functionality, preference cookies to remember basic settings, and analytics cookies that help us understand how the site is used. We do not rely on cookies to collect sensitive tour details unless they are needed for a specific booking workflow.
You may manage cookies through your browser controls and, where available, device settings. If cookies are disabled, some site functions may not work as intended, including request forms or preference retention.
We use personal data to respond to inquiries, manage booking requests, confirm dates and group details, review dietary information, arrange meeting-point logistics, process payments, communicate about the tour, maintain records, improve website performance, and meet legal or accounting obligations. We may also use data to handle disputes, enforce our terms, and protect the security of our systems and users.
We may share personal data with payment processors, website hosting and technical support providers, communication tools, and other service providers that help us manage bookings and site operations. Where a tour requires coordination with a venue or local partner, we may share limited booking details needed to confirm availability or deliver the requested experience.
We may disclose personal data to public authorities, regulators, courts, or other parties when required to comply with legal obligations, enforce agreements, protect rights, or respond to lawful requests. We may also share information where necessary to prevent fraud, security incidents, or misuse of the website.
Subject to legal limits, you may ask to access, correct, delete, or restrict certain personal data, and you may object to some processing. Where processing is based on consent, you may withdraw it for future processing. We may need to verify your identity before acting on a request.
To make a privacy request, use the contact details in this policy and describe the data or activity concerned. We may ask for enough information to confirm your identity and locate the relevant records before responding.
Booking, payment, and communication records are retained for the period needed to manage the service, resolve disputes, meet accounting duties, and satisfy legal requirements. When data is no longer needed, we delete it or anonymize it where practicable.
The updated version will apply from the date it is posted unless a different effective date is stated. If a change materially affects how we handle personal data, we will take reasonable steps to draw attention to it through the website or other appropriate communication.
