Privacy Policy

Who we are and scope

Soft Stone Path (“we”, “us”, “our”) is the data controller for personal data processed via this website and when you enquire about or purchase our travel services. This policy explains what we collect, why, how long we keep it, who we share it with, and your choices.

Data we collect

• Identity and contact details: name, email, phone, address, passport details where required for bookings.
• Trip information: preferences, dates, guest details, dietary or accessibility notes you choose to provide.
• Transaction details: payments and refunds processed through secure providers; we do not store full card data.
• Communications: emails, messages, and feedback.
• Technical data: IP address, device/browser info, pages viewed, and cookies. See Cookies below.
• Marketing preferences and consents.

Where data comes from

Primarily from you (forms, email, phone). We may receive limited data from travel companions you nominate, our service partners (e.g., hotels, guides) to fulfil your booking, and analytics providers for aggregated insights.

Purposes and legal bases

• Provide quotes, make and manage bookings, deliver support (contract performance).
• Verify identity, protect against fraud, ensure trip safety (legitimate interests; legal obligation).
• Respond to enquiries and improve our site/services (legitimate interests).
• Send marketing communications where you opt in; you can unsubscribe anytime (consent).
• Analytics to improve site performance and content (consent where required; otherwise legitimate interests).

Cookies and analytics

We use essential cookies to run the site and optional analytics cookies to understand usage. Our cookie banner lets you accept, customize, or decline analytics cookies at any time. You can also adjust your browser settings to block cookies. We use Google Analytics (GA4) and a Facebook/Meta pixel as described below.

Sharing your data

We share only what’s necessary with trusted providers:

• Trip delivery: hotels, guides, transport, activity operators (for names, dates, special requirements).
• Payments: secure processors to take deposits/balances and issue refunds.
• Technology and analytics: website hosting, email service, Google Analytics, Meta (pixel) for aggregated performance and advertising measurement where consented.
• Legal/regulatory: to comply with law or enforce our terms.

International transfers

Some partners operate outside the UK/EEA. When we transfer data internationally, we use appropriate safeguards such as adequacy regulations, Standard Contractual Clauses, and partner due diligence.

Retention

• Enquiry records: up to 24 months.
• Booking records: typically 6 years for tax/accounting and in line with limitation periods.
• Marketing data: until you unsubscribe or your consent is withdrawn.
• Analytics data: per provider defaults and our configuration.

Your rights

If you are in the UK/EEA, you have rights to access, rectify, erase, restrict, object, and data portability, plus the right to withdraw consent at any time (without affecting prior processing). To exercise rights, email [email protected]. You can also lodge a complaint with the UK ICO.

California residents (and certain US states) may have rights to know, access, delete, correct, and opt out of certain sharing/sale. We do not sell personal information in the conventional sense. Contact us to exercise your rights; we will not discriminate for exercising them.

Security

We apply administrative, technical, and physical safeguards, including access controls, encryption in transit, and staff training. No method is 100% secure; we continuously improve our controls.

Children

Our site is not directed to children under 13. We process child data only as needed to deliver family bookings and with the consent/authorization of a parent or guardian.

Marketing choices

You can unsubscribe via links in emails or by contacting us. Cookie preferences for analytics and the Meta pixel can be changed via the banner on this site.

Third-party services we use

• Google Analytics (GA4) — site performance insights. See Google’s policies for details.
• Meta (Facebook) Pixel — ad performance/measurement where consented.
• Email and hosting providers for communications and site operation.

Contact

Soft Stone Path, 7 Neil Heights, Harrisonberg, CF48 2SR, UK • +44 3197 203059 • [email protected]

Changes to this policy

We may update this notice from time to time. Material changes will be highlighted here. Last updated: .

Contact our team