top of page

Privacy Policy

Last Updated: 20 November 2025

This Privacy Policy explains how Lakeland School of Mountaineering (“we”, “us” or “our”) collects, uses, stores and shares personal information when you visit or use our website and when you book or attend our courses in the United Kingdom. We are committed to protecting your privacy and handling personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or services you agree to the practices described in this policy.

​

1. Who we are

Controller: Lakeland School of Mountaineering

Contact: - Email: ben@lakelandschoolofmountaineering.co.uk

If you have concerns about how we handle your data you may also contact the UK Information Commissioner’s Office (ICO).

 

2. Personal data we collect

We collect and process the following categories of personal data when necessary for our services:

a. Identity and contact information — name, email address, postal address, phone number.

b. Booking and payment information — course bookings, invoice details, payment card information (note: card details are handled by our third‑party payment processor and are not retained by us except where required for bookkeeping in accordance with law).

c. Emergency and health information — emergency contact details, next of kin, relevant medical or fitness information necessary to safely deliver adventure activities.

d. Communications and marketing preferences — records of your communications with us and whether you have opted‑in to receive marketing.

e. Technical and usage information — IP address, browser and device information, cookies, pages visited and other analytics data collected when you use our website.

f. Photographs and video — images or recordings taken during courses or events (for general marketing purposes).

 

3. Lawful bases for processing

We rely on the following lawful bases under UK GDPR:

  • Contract — to perform our contract with you (e.g. booking and running courses, processing payments).

  • Legal obligation — to comply with legal duties (e.g. tax, health & safety, safeguarding reporting where required by law).

  • Legitimate interests — for our business administration, fraud prevention, maintaining records, and improving services, provided those interests are not overridden by your rights. We document and assess these interests before relying on them.

  • Consent — where we ask for consent (for example marketing emails, or use of photographs for promotional purposes). You can withdraw consent at any time.

 

4. How we use personal data

We use personal data to:

  • Provide, manage and administer courses and bookings.

  • Communicate with you about bookings, safety information, cancellations and course logistics.

  • Process payments and refunds through our payment provider.

  • Comply with legal obligations (eg. health & safety, accident reporting, tax).

  • Send marketing communications where you have opted in; you may opt out at any time.

  • Improve our website, services and customer experience using aggregated analytics.

  • Use photographs and videos for promotional purposes only with your consent.

 

5. Sharing and disclosing data

We do not sell your personal data. We may share information with:

  • Service providers acting as processors (payment processors, booking platforms, website host, email provider, analytics providers). We use contracts to require processors to protect data.

  • Emergency services or medical professionals where necessary for safety or legal reasons.

  • Legal or regulatory authorities when required by law.

If we transfer data outside the UK/EEA we will ensure appropriate safeguards are in place (for example by relying on an adequacy decision, standard contractual clauses, or other ICO‑approved safeguards).

​

6. Cookies and tracking

Our website uses cookies and similar technologies. We explain how and why we use cookies in a separate Cookies Notice on the website and provide a cookie banner that lets you control non‑essential cookies. You can manage cookies through your browser but turning off some cookies may affect the site’s functionality.

 

7. How long we keep personal data

We retain personal data only as long as necessary for the purposes set out in this policy, and in accordance with legal, accounting, or reporting requirements. Typical retention periods include:

  • Booking and payment records: 6 years (for UK tax and accounting purposes).

  • Emergency and health information: retained while you are a client and thereafter for a period consistent with our legal obligations.

  • Marketing preferences: until you withdraw consent.

  • Website analytics: aggregated or pseudonymised and kept for a limited period.

If you want a specific retention period, please contact us and we will explain how it applies.

 

8. Your rights

Under UK data protection law you have the right to:

  • Request access to personal data we hold about you (subject access request).

  • Request correction of inaccurate or incomplete data.

  • Request erasure in certain circumstances (right to be forgotten).

  • Request restriction of processing in certain circumstances.

  • Object to processing based on legitimate interests or direct marketing.

  • Request data portability where applicable.

  • Withdraw consent where processing is based on consent.

To exercise any of these rights contact ben@lakelandschoolofmountaineering.co.uk. We will respond within the timescales required by law.

If you remain dissatisfied you may complain to the Information Commissioner’s Office (ICO).

 

9. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised or unlawful processing and accidental loss, damage or destruction. These measures are reviewed regularly and updated as appropriate.

However, no internet transmission is completely secure — if you believe your data has been compromised please contact us immediately.

 

10. Children

Our courses and website are primarily aimed at adults. If a course participant is under 18 we will collect parental/guardian consent and any necessary emergency/medical details from a responsible adult.

 

11. Changes to this policy

We may update this privacy policy from time to time. We will publish the new policy on our website with an updated “Last Updated” date.

 

12. Contact and supervisory authority

If you have questions, requests or complaints about this policy or how we handle your personal data:

Email: ben@lakelandschoolofmountaineering.co.uk

You also have the right to contact the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk

Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow SK9 5AF

Phone: 0303 123 1113

​

bottom of page