Privacy policy

Privacy Policy
Last updated: June 2026

Who We Are

Hopscotch Travel Limited ("Hopscotch Travel", "we", "us", or "our") is a luxury private guided tour operator based in Scotland. We are the data controller responsible for the personal data we hold about you.

Registered address:
Hopscotch Travel Limited, First Floor, 227 West George Street, Glasgow, G2 2ND, Scotland, United Kingdom
Email: info@hopscotchtravel.co.uk
Website: www.hopscotchtravel.co.uk

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Personal Data We Collect

We collect and process the following categories of personal data.

Information you provide directly: your name, email address, telephone number, postal address, tour enquiry details (including preferred dates, group size, and any special requirements), and any feedback or correspondence you send us. Payment details are processed securely via Stripe — we do not store your card details.

Information collected automatically when you use our website: your IP address, browser type, pages visited, time spent on our site, and cookie data (see the Cookies section below).

We may also receive information about you from third-party booking platforms such as Viator or GetYourGuide where you have made a booking that relates to our services.

How and Why We Use Your Data

We only use your personal data where we have a valid lawful basis for doing so.

We process your data to handle tour enquiries and bookings, and to send you booking confirmations, itineraries, and pre-tour information — this is necessary to fulfil our contract with you. We process payments to complete your booking, which is also required by our legal obligations under financial regulations.

We use your data to respond to customer service enquiries, which is in our legitimate interests as a business. We analyse website usage to improve our site and services, again on the basis of legitimate interests.

We will only send you marketing communications — such as newsletters or special offers — where you have given us your explicit consent. You can withdraw this consent at any time.

Where we are required to do so by law, we may also process your data to comply with legal or regulatory obligations, or to manage complaints and disputes.

We will never use your personal data for any purpose that is incompatible with those described here without notifying you first.

How Long We Keep Your Data

We keep your data only for as long as necessary. Our standard retention periods are:

Booking records and financial transactions — 7 years, to comply with HMRC requirements
Customer enquiries and correspondence — 3 years from last contact
Marketing contact lists — until you unsubscribe or withdraw your consent
Website analytics data — up to 26 months
Complaints or dispute records — 6 years from resolution

When your data is no longer required, it is securely deleted or anonymised.

Who We Share Your Data With

We do not sell your personal data. We may share it with trusted third parties only where necessary to deliver our services:

Stripe, for secure payment processing (PCI-DSS compliant)
Website and booking platforms, including Webflow and third-party OTAs such as Viator or GetYourGuide where applicable
Email and CRM tools used to manage communications and bookings
Accommodation and activity providers, where we have arranged third-party services as part of a multi-day tour
Professional advisers such as accountants or legal advisers, where required
Regulatory or law enforcement bodies, where we are legally required to disclose information

Where third parties process data on our behalf, we ensure appropriate data processing agreements are in place and that your data is handled securely and in accordance with applicable law.

International Data Transfers

Some of our third-party service providers — including Stripe and certain platform providers — are based outside the United Kingdom or may process your data in countries outside the UK.

Where we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or transfers to countries covered by UK adequacy regulations.

Stripe's data practices are governed by their Privacy Policy at stripe.com/privacy, and we have a Data Processing Agreement in place with them.

Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

The right to access — you can request a copy of the data we hold about you.
The right to rectification — you can ask us to correct inaccurate or incomplete data.
The right to erasure — you can ask us to delete your data where it is no longer needed.
The right to restrict processing — you can ask us to pause processing your data in certain circumstances.
The right to data portability — where processing is based on consent or contract, you can ask us to provide your data in a portable format.
The right to object — you can object to processing based on legitimate interests or for direct marketing.
The right to withdraw consent — where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@hopscotchtravel.co.uk. We will respond within one month and may need to verify your identity before acting on your request.

How We Protect Your Data

We take appropriate technical and organisational measures to protect your data, including SSL/TLS encryption for data transmitted via our website, secure access-controlled storage for booking and customer records, PCI-DSS compliant payment processing through Stripe, and regular review of our security practices.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner's Office within 72 hours and, where required, inform you directly.

Cookies

Our website uses cookies — small text files placed on your device — to help us understand how visitors use our site and to improve your experience.

We use strictly necessary cookies, which are required for the website to function and cannot be disabled. We also use analytics cookies, which help us understand how visitors interact with our site, and marketing cookies, which help us measure the effectiveness of our advertising. Analytics and marketing cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings or via our cookie consent tool when you first visit our site.

Marketing Communications

We will only send you marketing communications where you have given us your explicit consent, or where we have an existing customer relationship and are promoting similar services, as permitted under the Privacy and Electronic Communications Regulations (PECR).

You can unsubscribe at any time by clicking the unsubscribe link in any of our emails, or by contacting us at info@hopscotchtravel.co.uk.

Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us at info@hopscotchtravel.co.uk and we will delete it promptly.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email.

Contact Us and How to Complain

If you have any questions about this policy, how we handle your data, or wish to exercise your rights, please contact us:

Email: info@hopscotchtravel.co.uk
Address: Hopscotch Travel Limited, First Floor, 227 West George Street, Glasgow, G2 2ND

If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

Website: www.ico.org.uk
Helpline: 0303 123 1113

‍