PRIVACY NOTICE
We are a small fan-run minibus operator. We ask for your details when you book a seat, leave a comment or a review, or enter the prize draw, and we use them for that and nothing else. We do not sell them, and we do not add you to a mailing list.
Who we are
Up The Albion Travel is the data controller for the information described on this page.
- Email: bookings@upthealbiontravel.com
- Phone: 01273 569078
- Post: Up The Albion Travel, [POSTAL ADDRESS], Brighton
What we collect, and why
| When | What | Why | Our lawful basis |
|---|---|---|---|
| You send a booking enquiry | Name, email, phone, which game, number of seats, pick-up area, and anything you write in the message box | To answer you, work out the route, and run the trip | Taking steps at your request before entering a contract, and performing that contract |
| You leave a comment on the blog | The name you type and the comment itself | To publish it once it has been read, and to keep the blog civil | Our legitimate interest in running a moderated blog |
| You leave a review of a trip | Your star rating, the name you choose to show, which trip, and what you write, plus the same one-way code described below so one person cannot post a pile of reviews. If you used the link from our email, we also record which booking it came from, so the review can be shown as from a passenger on that trip | To publish it once it has been read, on this website and on our Facebook Page, so other fans can see what the trips are really like | Our legitimate interest in publishing honest reviews of our service |
| You like a blog post | A one-way code worked out from your IP address and browser. We do not store the IP address itself and we cannot turn the code back into one | So the same person cannot like the same post twice | Our legitimate interest in an honest like count |
| You enter the prize draw on this website | Name and email, plus the same one-way code described above so that one person cannot post fifty entries. We only accept an entry once you have confirmed you are 18 or over and read the terms | To enter you in the draw and to contact you if you win | Our legitimate interest in promoting the business by running a free prize draw |
| You enter the prize draw by commenting on our Facebook post | Your Facebook display name, your Facebook user id, and the id of your comment. We do not copy what you wrote. | To enter you in the draw and to contact you through Facebook if you win | Our legitimate interest in promoting the business by running a free prize draw |
The prize draw is a marketing activity, and we treat it as one. We use draw entries to run that draw and to reach the winner. We do not use them to send you anything else, and there is no mailing list to be added to. You can object to us using your details this way at any time, and we will remove your entry — see Your rights.
Entering by commenting on Facebook
If you comment on our Facebook Page post, Facebook shows that comment to whoever can see the post. That part is between you and Meta, and their privacy policy covers it. What this notice covers is the copy we take: your display name, your user id and the comment id, so that we can put you in the draw and tell you if you win. We take it once, after the draw closes, and we do not copy the words of your comment into our database.
Facebook does not always give us a name and id for a commenter. If it does not, we cannot enter that comment in the draw, and the admin page shows us how many were skipped for that reason so we can say so honestly.
Cookies
This site sets no cookies unless you say yes. The first time you visit you are asked whether we may use Google Analytics, which counts visits and needs cookies to do it. Nothing is requested from Google and no cookie is written until you press Accept.
If you say no, nothing is set and nothing is sent. The site behaves identically either way: booking, the blog, the like button and the prize draw all work without it. Your answer is kept in your browser's own storage rather than in a cookie, because recording a refusal inside the thing being refused would be absurd.
You can change your mind whenever you like with Cookie Settings, at the foot of every page. Declining after having accepted also deletes the Google Analytics cookies already in your browser, so withdrawing is not merely a promise to stop counting you from here on.
The one cookie outside that choice belongs to the admin login, and only the site owner ever receives it. The "same person" code behind the like button exists precisely so that a cookie is not needed for it.
Who else sees your details
- Netlify hosts this website and the database your details are stored in.
- Formspree forwards booking enquiries to our email inbox, so a booking is never lost if the database is having a bad day.
- Meta (Facebook), if you choose to enter the draw by commenting on our Page post, and when we post a published review, with the name you chose to show, on our Facebook Page. Meta is a separate controller for what happens on Facebook itself.
- Google or Facebook reviews, only if you choose to post your review there as well. We give you a link and nothing more: what you post on those sites is sent by you, not by us, and their own privacy policies cover it.
- Google Analytics, but only if you accepted cookies. It tells us how many people came, which pages they read and roughly where in the world they were. If you declined, or have not answered, nothing reaches Google Analytics at all.
- Google Fonts serves the two typefaces this site uses. Your browser requests them from Google, which means Google sees your IP address as part of that request. Nothing about you is sent with it.
We do not sell your details to anyone, and we do not pass them to other companies for their own marketing. Some of these providers process data outside the UK; where they do, they are covered by the UK's approved safeguards for international transfers.
How long we keep it
- Booking enquiries and bookings: 12 months after the fixture they relate to, then deleted. Anything we have to keep for tax or accounting is kept separately for as long as the law requires.
- Prize draw entries: deleted within 3 months of the draw being made.
- The winner's name and contact details: 12 months, because we may have to show that the prize was actually awarded.
- Blog comments: for as long as the post is on the site. A comment we have rejected is kept out of sight; ask and we will delete it outright.
- Like codes: for as long as the post is on the site. They are deleted with it.
- Reviews: for as long as they are on the site. A review we have hidden is kept out of sight; ask and we will delete yours outright. A review posted to our Facebook Page stays there until we delete that post, which we will do if you ask.
Your rights
Under UK data protection law you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- stop using it, or restrict what we do with it;
- hand it over in a portable form.
Where we rely on our legitimate interests — the blog, reviews, the like button and the prize draw — you can object, and we will stop unless we have a compelling reason not to. For the prize draw, objecting means your entry comes out and you cannot win it, which is worth knowing before you ask.
Email bookings@upthealbiontravel.com and we will deal with it within one month. There is no charge.
Complaints
If you think we have got this wrong, tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Children
The prize draw is for entrants aged 18 or over. We do not knowingly collect details from children through it. If a child has sent us a booking enquiry, a parent or guardian can ask us to delete it and we will.
Changes to this notice
If we change what we do with your details, we will change this page and update the date at the top of it.