WHAT THIS POLICY COVERS
This policy covers the personal information we may hold about you, however we obtain it. We collect information at different points during our relationship with you, for example, when you browse our website, sign up to receive marketing, make a booking for one of our activities or sign a disclaimer at the site where you participate in an activity. This privacy notice does not cover the links within this site to other websites and we encourage you to read the privacy statements on other websites you visit.
PERSONAL INFORMATION WE COLLECT
When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”
We collect Device Information using the following technologies:
– “Cookies” are data files that are placed on your device or computer and often include a unique anonymous identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.
– “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
– “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.
Additionally, when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number. We refer to this information as “Order Information.”
HOW DO WE USE YOUR PERSONAL INFORMATION?
We use the Order Information that we generally collect to fulfill any orders placed through the Site (including booking an experience, processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations). Additionally, we use this Order Information to:
– Communicate with you;
– Screen our orders and bookings for potential risk or fraud; and
– When in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).
REASONS WHY AND HOW WE USE YOUR PERSONAL DATA
WHEN YOU USE OUR ONLINE CHANNELS
– Browse our website
– Engage with our social media channels
– Buy a seasons pass or gift voucher
WHEN YOU RESPOND TO OR ASK FOR MARKETING
– Enter one of our competitions
– Sign up to receive direct marketing or our newsletter
WHEN YOU VISIT A TIMBERTOP ADVENTURES SITE
– Make a booking
– Agree to having your photo used
– Sign a waiver
– Are involved in an incident
– Receive medical attention
– Give an online review
WHEN YOU CONTACT TIMBERTOP ADVENTURES FOR OTHER REASONS
– Apply for a job
– Contact our office by phone
– Apply for charity gift vouchers
SHARING YOUR PERSONAL INFORMATION
We share your Personal Information with third parties to help us use your Personal Information, as described above. For example, we use Checkfront to power our online bookings–you can read more about how Checkfront uses your Personal Information here: https://www.checkfront.com/privacy. We also use Google Analytics to help us understand how our customers use the Site–you can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful requests for information we receive, or to protect our rights otherwise.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by:
FACEBOOK – https://www.facebook.com/settings/?tab=ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: http://optout.aboutads.info/.
DO NOT TRACK
Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.
AGREE TO HAVE YOUR PHOTO TAKEN AND USED
As part of signing our waiver you would have given your consent to having photos or video taken during your visit to TimberTop Adventures. We may use these images across our full range of marketing and media channels and applications which promote and publicize TimberTop Adventures. This may include digital and print content and materials such as our website, blog, social media, posters, advertisements, email content, brochures and other publicity materials. We reserve the right to use images without compensation or royalties.
When you book a TimberTop Adventures experience with us, you will be asked to read and sign a Waiver for each activity, providing your name, age and signature. A parent or guardian must sign for each child under 19 years of age. We ask for this information to ensure you have read and understood the risks of taking part in the activity, as they can all be dangerous if instructions and safety measures are not followed. The forms are used in the event of any claim and helps improve safety standards by tracking any accidents, should they occur.
We retain and store the information that you digitally signed for up to 7 years after your visit. A PDF version of these forms is also stored in a secure online storage facility as a form of backup.
We do not share this information unless you have an accident while at the TimberTop Adventures site or in case of an issue that needs to be investigated in which case we may need to share the form with, for example, parents of a child you were supervising, our solicitors or insurers, or other agencies as may be required by law.
HOW LONG DO WE KEEP YOUR INFORMATION?
We only hold your personal information for as long as is necessary for the reason you provided it to us, as per the processing scenarios indicated in the sections above. In some cases, there are statutory obligations or industry best practice reasons that dictate the length of time for which we will hold your information. For example, if you make a complaint or feel you may have a legal claim against us, then we will hold your information for the duration of any statutory limitation period associated with such incidents.
We are committed to ensuring that your information is safe and secure while under our control to protect against loss, unauthorized disclosure or access. We have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect. All information you provide to us is stored on secure servers or those of our service providers and any payment transactions will be encrypted using SSL technology.
REPORTING A SECURITY INCIDENT
If at any point you suspect or become aware of a security incident (for example you receive suspicious communication from someone purporting to be a TimberTop Adventures employee or affiliate), please forward the communication to us or report it by email to firstname.lastname@example.org or in writing to TimberTop Adventures Inc., PO Box 24007 Lancaster, Saint John, NB, E2M 5R8.
If you have been the victim of a fraudulent transaction, please always contact the police and/or your bank in the first instance to ensure your own finances are secure.
If you are a European resident, Under the GDPR which came into force in May 2018, you have rights as an individual which you can exercise in relation to the information we hold about you. You can read more about these rights here – https://ico.org.EEA/for-the-public/is-my-information-being-handled-correctly .
TimberTop Adventures tries to be as open as it can be in terms of giving people access to their personal information. Individuals can find out if we hold any personal information by making a ‘subject access request’ under the GDPR. If we do hold information about you, we will:
– give you a description of it;
– tell you why we are holding it;
– tell you who it could be disclosed to; and
– let you have a copy of the information in an intelligible form.
You have the right to access personal information we hold about you and to ask that your personal information is corrected, updated, or deleted. If you would like to exercise this right, please contact us at email@example.com At the same time we will always try to do our best to deal with your request informally in the first instance, for example by providing you with the specific information you need over the telephone.
Additionally, if you are a European resident we note that we are processing your information to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.
REMOVING YOUR CONSENT FOR USE OF YOUR IMAGES
You can withdraw the consent you gave for us using your image at any time. For children whose parents/legal guardian gave permission on their behalf, when they turn 19, they have legal rights over this data and will have the right to revoke the consent themselves. To withdraw your consent email firstname.lastname@example.org; or write to us at: TimberTop Adventures Inc., PO Box 24007 Lancaster, Saint John, NB, E2M 5R8.
We will stop using your images as soon as reasonably possible but note that images used for web-based promotions may remain indefinitely.
REMOVING YOUR CONSENT FOR DIRECT MARKETING
If you have given us your consent to receive marketing messages from us, you can change your mind and remove your consent (opt-out) at any time. Here are the ways you can contact TimberTop Adventures Inc. to do this: click the ‘unsubscribe’ option at the end of any marketing email; email us at email@example.com; or write to us at: TimberTop Adventures Inc., PO Box 24007 Lancaster, Saint John, NB, E2M 5R8. It may take up to two weeks for your details to be removed from our marketing list.
Please note that if you have an upcoming TimberTop Adventures booking we will send you service-related emails, even if you have unsubscribed from marketing communications as this is important information you will require for your activity.
HOW TO CONTACT US
TimberTop Adventures tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate, or if you do not think that we have processed your data in accordance with this notice. We would also welcome any suggestions for improving our procedures.
If you need to contact us in relation to data protection including exercising your rights regarding your personal information including any of the reasons above, you can contact us:
– By telephone on 1-506-657-6060
– By email at firstname.lastname@example.org
– By mail: TimberTop Adventures Inc., PO Box 24007 Lancaster, Saint John, NB, E2M 5R8