Privacy Policy

Last updated: 14 July 2026

Introduction

This Privacy Policy explains how spry-cove collects, uses, stores, and protects your personal information when you use our website and services. We are committed to ensuring your privacy is protected in accordance with UK data protection legislation.

Information We Collect

We collect and process the following types of information:

• Contact Information: Name, email address, and any details you provide when requesting our services
• Service Preferences: Information about your route preferences, interests, fitness level, and travel requirements
• Technical Data: IP address, browser type, device information, and website usage patterns through cookies and analytics
• Communication Records: Correspondence between you and our team, including email exchanges and service inquiries

How We Use Your Information

We use your personal information for the following purposes:

• Delivering the route planning services you have requested
• Communicating with you about your service requests and follow-up support
• Improving our services based on feedback and usage patterns
• Sending you updates about seasonal route collections if you have subscribed
• Complying with legal obligations and resolving disputes

Legal Basis for Processing

We process your personal data under the following legal grounds:

• Contract Performance: Processing necessary to fulfill our service obligations to you
• Legitimate Interests: Improving our services and maintaining customer relationships
• Consent: Where you have explicitly agreed to receive marketing communications
• Legal Obligation: Compliance with applicable laws and regulations

Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your data with:

• Service Providers: Email delivery services, payment processors, and analytics platforms that help us operate our business
• Legal Requirements: Law enforcement or regulatory bodies when required by law
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy. Specifically:

• Service request data: 7 years for accounting and legal purposes
• Email correspondence: 3 years from last communication
• Marketing preferences: Until you withdraw consent
• Technical data: 12 months unless required for security investigations

Your Rights

Under UK data protection law, you have the following rights:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal information in certain circumstances
• Restriction: Request limitation of how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdrawal of Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at [email protected] with your request and proof of identity.

Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure server infrastructure, and access controls. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Cookies and Tracking

Our website uses cookies to enhance your browsing experience and analyze site traffic. You can control cookie preferences through our cookie banner and your browser settings. For detailed information, see our Cookies Policy.

Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices of these third-party websites. We encourage you to review their privacy policies before providing any personal information.

Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.

International Data Transfers

Your information may be processed in countries outside the United Kingdom. When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by regulatory authorities.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be indicated by a revised date at the top of this page. We encourage you to review this policy regularly.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: [email protected]
Address: 42 Wellington Street, Edinburgh, EH7 4GB, United Kingdom

Supervisory Authority

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.