Dr Doolittle Ltd GDPR Policy
Effective Date: 14/1/25
1. Introduction
Dr Doolittle Ltd. is committed to protecting the privacy and security of personal data. This policy outlines how we collect, use, store, and protect personal data in compliance with the General Data Protection Regulation (GDPR) and applicable UK data protection laws.
2. Scope
This policy applies to all personal data processed by Dr Doolittle Ltd., including data from customers, employees, business partners and website visitors.
3. Data Controller
Dr Doolittle Ltd. is the data controller for the personal data we process. For inquiries, please contact us:
Address: 7 Twyford Close, Widnes, Cheshire
Email: adventures@drdoolittle.co.uk
Phone: 07407-674-563
4. Personal Data We Collect
We may collect the following types of personal data:
Customer Data: Name, contact information, passport details, payment details, travel preferences, and medical information (where necessary for tailored trips).
Employee Data: Name, contact details, payroll information, and qualifications.
Business Partner Data: Contact information and contract details.
Website Data: IP addresses, cookies, and browsing behavior.
5. How We Use Personal Data
We use personal data for the following purposes:
To provide and manage our travel services.
To process bookings, payments, and refunds.
To ensure the safety and wellbeing of our customers during trips.
To communicate important information about our services.
To comply with legal and regulatory obligations.
6. Legal Basis for Processing
We process personal data based on the following legal grounds:
Contractual Obligation: To fulfil our contractual commitments to customers and partners.
Consent: For marketing communications and processing special category data, such as medical information.
Legal Compliance: To meet our legal obligations.
Legitimate Interests: To improve our services and ensure customer satisfaction.
7. Data Sharing
We may share personal data with:
Business partners involved in providing our travel services.
Service providers, such as payment processors and IT support.
Regulatory authorities, where required by law.
8. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy or as required by law. Afterwards, we securely delete or anonymize the data.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.
10. Data Subject Rights
Under GDPR, individuals have the following rights:
Access: To request a copy of their personal data.
Rectification: To correct inaccurate or incomplete data.
Erasure: To request deletion of their data, where applicable.
Restriction: To restrict the processing of their data.
Portability: To request the transfer of their data to another organization.
Objection: To object to processing based on legitimate interests or for direct marketing.
Requests can be made by contacting us at the details provided in Section 3.
11. Cookies and Tracking
Our website uses cookies to enhance user experience and analyse website traffic. Users can manage cookie preferences through their browser settings. For more details, see our [Cookie Policy].
12. Third-Party Websites
Our website may contain links to external sites. We are not responsible for the privacy practices of these websites. We encourage users to review their privacy policies.
13. Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via our website or other appropriate channels.
14. Complaints
If you have concerns about our data processing practices, you can contact us at the details in Section 3. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk
Phone: 0303 123 1113
15. Contact Us
For any questions or concerns about this policy or our data practices, please contact us:
Email: adventures@drdoolittle.co.uk
Phone: 07407-674-563
Address: 7 Twyford Close, Widnes, Cheshire WA8 9RN