Climb Devon - Privacy Policy

climbdevon.com

Last Updated: November 5, 2025

We are registered with the ICO under the Data Protection Register, our registration number is: A8730153.

1. Introduction

Climb Devon (”we,” ”us,” or ”our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website climbdevon.com (the ”Site”), book one of our courses or services (the ”Services”), or otherwise interact with us.

We are the data controller for the purposes of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR). Our contact person for data protection is James Everett Conrad, who can be reached at info@climbdevon.com.

2. What Data We Collect

We may collect and process the following data about you:

2.1. Personal Identification Data: Your name, email address, and phone number, which youprovide to us when you fill out a contact form, book a course, or sign up for our mailing list.

2.2. Sensitive Health Data (Special Category Data): As part of our booking and consent form, we will ask you to declare any medical conditions, illnesses, injuries, or allergies that may affect your ability to safely participate in our activities. We collect this data solely for health and safety purposes.

2.3. Payment Data: Our website payments are processed by Squarespace Payments (powered by Stripe). We do not collect, see, or store your full credit/debit card details. This information is provided directly to our third-party payment processor.

2.4. Technical & Usage Data: Information about how you use our Site, including your IP address, browser type, and operating system, collected via cookies and analytics services (e.g., Squarespace Analytics).

3. How We Use Your Data

We use your data in the following ways, based on a lawful basis:

• To Provide our Services (Contractual Necessity): We use your name, email, and phone number to manage your booking, send you confirmation emails, and contact you with essential information about your course.

• For Your Safety (Vital Interests): We use your sensitive health data to ensure our instructor is aware of any condition that may affect your safety and well-being during an activity. This data is treated with the utmost confidentiality.

• For Marketing (Consent): If you have explicitly ”opted-in” to our mailing list (e.g., via our website pop-up), we will use your email address to send you occasional newsletters with blog posts, tips, and course offers. You can unsubscribe at any time by clicking the ”unsubscribe” link in any email.

• To Improve our Site (Legitimate Interest): We use anonymous technical and usage data to analyse how visitors use our Site, which helps us improve its functionality and user experience.

4. Data Storage and Security

We take your data security seriously.

• Your data is stored on secure, password-protected systems.

• Our Site is hosted by Squarespace, which provides robust security measures for the data it processes.

• We will never sell your personal data to any third party.

5. Data Retention

We will only keep your data for as long as is necessary for the purpose for which it was collected.

• Booking & Payment Records: We are required by UK law to keep these records for a minimum of 6 years for tax and accounting purposes.

• Medical/Consent Forms: These are held securely and are destroyed/deleted within a reasonable period after your course has been completed.

• Marketing List: We will keep your email address on our marketing list for as long as you remain subscribed. If you unsubscribe, you will be removed immediately.

6. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

• The right to access: You can request a copy of the personal data we hold about you.

• The right to rectification: You can request that we correct any data you believe is inaccurate.

• The right to erasure: You can ask us to delete your personal data, under certain conditions.

• The right to restrict processing: You can ask us to limit how we use your data.

• The right to object to processing: You can object to us processing your data (e.g., for marketing).

• The right to data portability: You can request that we transfer your data to another organisation, or to you, under certain conditions.

To exercise any of these rights, please contact us at info@climbdevon.com.

7. Cookies

Our Site uses cookies to distinguish you from other users and to help our Site function. This helps us provide you with a good experience and improve our Site. For detailed information, please refer to our Cookie Policy (which may be part of your Squarespace site’s cookie banner).

8. Links to Other Websites

Our Site, particularly our blog, may contain links to other websites. This policy applies only to our Site. If you click a link to another website, you should read their privacy policy.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page, with the ”Last Updated” date at the top.

10. How to Contact Us

If you have any questions about this policy or your data, please do not hesitate to contact us.

• Email: info@climbdevon.com

• Data Controller: James Everett Conrad