1. Introduction
Quinix Burst Steam Railways ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website quinix-burst.com or use our services.
We are the data controller for the purposes of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
2. Contact Information
Data Controller: Quinix Burst Steam Railways
Address: Heritage Station, Platform Road, Harrogate, North Yorkshire HG1 2QR
Phone: +44 1492 847362
Email: [email protected]
3. Information We Collect
3.1 Personal Information
We may collect the following types of personal information:
- Name and contact details (email address, postal address, phone number)
- Booking and payment information
- Special requirements or accessibility needs
- Marketing preferences
- Correspondence and feedback
3.2 Technical Information
When you visit our website, we may automatically collect:
- IP address and location data
- Browser type and version
- Device information
- Pages visited and time spent on our website
- Referring website addresses
4. How We Use Your Information
We use your personal information for the following purposes:
- Service Provision: To process bookings, provide steam railway services, and communicate about your journey
- Customer Support: To respond to enquiries, resolve issues, and provide assistance
- Safety and Security: To ensure passenger safety and railway security
- Marketing Communications: To send newsletters and promotional materials (with your consent)
- Legal Compliance: To comply with legal obligations and protect our rights
- Website Improvement: To analyse website usage and improve our services
5. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary for booking and service delivery
- Legitimate Interests: For business operations, safety, and customer service improvement
- Consent: For marketing communications and non-essential cookies
- Legal Obligation: For compliance with health and safety regulations
6. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience. We use:
- Necessary Cookies: Essential for website functionality
- Performance Cookies: To understand how visitors use our website
- Marketing Cookies: To provide relevant advertisements
You can manage your cookie preferences using our cookie management tool or your browser settings. For more information, please see our Cookie Policy.
7. Data Sharing and Disclosure
We may share your personal information with:
- Service Providers: Payment processors, booking systems, and website analytics
- Professional Advisors: Legal, accounting, and insurance providers
- Regulatory Bodies: When required by law or for safety investigations
- Emergency Services: In case of medical emergencies or safety incidents
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
8. Data Retention
We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy:
- Booking Records: 7 years for financial and insurance purposes
- Marketing Data: Until you unsubscribe or withdraw consent
- Website Analytics: 26 months
- General Enquiries: 2 years after last contact
9. Your Rights
Under UK data protection law, you have the following rights:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate personal data
- Erasure: Request deletion of your personal data
- Portability: Request transfer of your data in a structured format
- Restriction: Request limitation of processing
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Where processing is based on consent
To exercise these rights, please contact us using the details provided above.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data:
- SSL encryption for data transmission
- Secure payment processing
- Access controls and authentication
- Regular security assessments
- Staff training on data protection
11. International Data Transfers
We primarily process your data within the UK. If we transfer data outside the UK/EEA, we ensure adequate protection through:
- Adequacy decisions by the UK government
- Appropriate safeguards such as standard contractual clauses
- Certification schemes
12. Children's Privacy
Our services are family-friendly, but we do not knowingly collect personal information from children under 13 without parental consent. For bookings involving children, we require adult consent and supervision.
13. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:
- Posting the updated policy on our website
- Email notification (for significant changes)
- Notice during your next visit
15. Complaints
If you have concerns about how we handle your personal data, please contact us first. If you remain unsatisfied, you can lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane
Wilmslow, Cheshire SK9 5AF
Phone: 0303 123 1113
Website: ico.org.uk
16. Marketing Communications
We may send you marketing communications about our services, special offers, and railway events if you have:
- Given explicit consent
- Purchased services from us (soft opt-in for similar services)
You can opt out of marketing communications at any time by:
- Clicking the unsubscribe link in our emails
- Contacting us directly
- Updating your preferences on our website
17. Special Category Data
We may collect special category personal data (such as health information) when:
- You inform us of accessibility requirements
- Medical emergencies occur during your visit
- You participate in our educational programmes
We process this data with your explicit consent or when necessary for health and safety purposes.