Privacy Policy

This website is operated by Dorset Explore Ltd, which trades as Jurassic Coast Adventures Dorset (“we”, “us”, “our”). The same company also runs our booking system at dorsetexplore.co.uk. We are the data controller for the personal information described here, which means we are responsible for deciding how it is used.

Company number: 17328917. Registered office: 3 Furzey Close, Poole, England, BH14 0BN.

The data protection contact for Dorset Explore Ltd is peter@dorsetexplore.co.uk. Please use this address for any question about this policy or to exercise the rights set out in section 9.

It covers this website, the booking request and enquiry forms on it, the emails we send in reply, and our live chat when you allow it. It does not cover other websites we link to, which have their own privacy notices.

• Booking requests: your name, email address, telephone number (optional), the tour you would like, your preferred date, the number of guests, and anything you write in the free-text box.
• Enquiries: your name, email address and message, whether sent through the contact form, the cruise enquiry form or by email.
• Correspondence: anything you tell us when you email, telephone or message us, including records of that contact.

Please do not send us information we have not asked for. If you choose to tell us about mobility requirements, dietary needs or that you are travelling with children, we use that only to run your tour safely and comfortably, and you can leave it out.

• Your cookie choice is stored in your own browser, not sent to us. See our Cookie Policy.
• Technical and security logs. Our website platform records routine information such as IP address, browser type and the pages requested when a page loads or a form is submitted. We use this to keep the site available and secure.
• Form abuse protection. When a form is submitted we store a one-way hash of the IP address it came from, with a timestamp, so we can block repeated automated submissions. We do not store the raw address and the hash cannot be turned back into it.
• Google Analytics 4, only if you allow analytics. Pages viewed, approximate location (city level), device and browser type, how you reached the site and which links you use. IP anonymisation is switched on. We do not use it to identify you, and advertising features are switched off.
• Live chat, only if you allow it. The Tawk.to widget loads only with your permission and records what you type plus technical session information.

Each use below rests on a lawful basis under the UK GDPR.

• Answering your enquiry and preparing your booking — steps taken at your request before entering a contract, and performance of that contract (Article 6(1)(b)).
• Checking availability and the final price with our booking system — same basis (Article 6(1)(b)).
• Running the tour safely, including accounting for everyone in the group and returning you on time — performance of the contract, and where someone’s safety is at risk, vital interests (Article 6(1)(d)).
• Keeping records, managing our accounts and defending legal claims — our legitimate interests (Article 6(1)(f)).
• Protecting the forms from spam and automated abuse — our legitimate interests (Article 6(1)(f)).
• Analytics and live chat — your consent (Article 6(1)(a)), which you can withdraw at any time from the Cookie settings link in the footer.
• Meeting legal obligations such as tax, consumer law or a lawful request from an authority — legal obligation (Article 6(1)(c)).

Where we rely on legitimate interests we have weighed them against your rights, and you can object at any time. We do not use your information for automated decision-making or profiling.

We do not sell or rent personal information, and we do not share it for advertising.

• Our booking system on dorsetexplore.co.uk, run by Dorset Explore Ltd receives your request so that availability, the final price and your confirmation can be managed in one place.
• Service providers who run this website for us under written agreements: Base44 (website platform, forms, database and hosting) and Resend (delivering our emails). They act on our instructions only.
• Google (Google Analytics 4) only if you allow analytics.
• Tawk.to only if you allow live chat.
• Authorities, courts or professional advisers where the law requires it or where we need advice.

Our current list of providers should be reviewed before publication to be confirmed: confirm this list is complete and that processor agreements are in place.

Some providers may process information outside the UK. Where they do, we rely on UK adequacy regulations or a legal transfer mechanism such as the UK International Data Transfer Agreement or Addendum, together with appropriate safeguards.

to be confirmed: confirm the transfer mechanism for each provider named above

We keep personal information only for as long as we need it for the purpose it was collected, then delete or anonymise it. We have deliberately not invented periods here; the following need to be agreed and then stated on this page.

• Enquiries that do not lead to a booking to be confirmed: retention period
• Booking requests and tour records to be confirmed: retention period
• Emails and correspondence to be confirmed: retention period
• Security logs and form abuse records to be confirmed: retention period
• Google Analytics data to be confirmed: data retention setting in your GA4 property
• Live chat transcripts to be confirmed: retention setting in Tawk.to

Where we must keep records for tax or legal reasons, we keep them for the period the law requires even if you ask us to delete other information.

Under the UK GDPR you can ask us to:

• confirm what personal information we hold about you and give you a copy (access);
• correct information that is wrong or incomplete (rectification);
• delete information we no longer need (erasure);
• pause what we are doing with it while a question is resolved (restriction);
• stop a use based on our legitimate interests (objection);
• give you information in a portable format (portability);
• withdraw a consent you gave earlier (for analytics or live chat).

Email peter@dorsetexplore.co.uk to use any of these. It is free, and we answer within one month. If we cannot do what you ask, we will explain why and tell you how to challenge it.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We would rather you came to us first so we can put it right.

Information reaches us over encrypted connections and is held in access-controlled systems. The administrative area of this website is restricted to authorised staff. No system is completely secure, so we keep what we hold to a minimum and review access regularly.

This website is not aimed at children. Bookings for anyone under 18 must be made by an adult, and we do not knowingly collect information directly from children.

We do not run a newsletter and we do not add you to a marketing list. We email you only about the enquiry or booking you have made. If we introduce marketing emails, we will ask for your consent separately and every message will include a way to unsubscribe.

If we change how we use personal information we will update this page and the date at the top. Where the change is significant, we will make it clear on the site.

Dorset Explore Ltd, trading as Jurassic Coast Adventures Dorset. Company number 17328917. Registered office: 3 Furzey Close, Poole, England, BH14 0BN. Data protection contact: peter@dorsetexplore.co.uk. How we use cookies is explained in the Cookie Policy.