Privacy Policy

1. Who We Are

Dumont Mountaineering is a guided mountaineering and mountain instruction service operating in Scotland. We are the data controller responsible for your personal data collected through this website and during the booking process.

For any data protection enquiries, please contact us directly via the Contact Us page.

2. What Data We Collect

2.1 Information You Provide Directly

When you make an enquiry or booking, we may collect the following personal data:

• Full name
• Email address
• Phone number
• Emergency contact details
• Medical information and physical fitness details relevant to your safety
• Experience level and mountaineering background
• Payment information (processed securely — we do not store card details)

2.2 Information Collected Automatically

When you visit this website, basic technical data may be collected automatically, including:

• IP address and browser type
• Pages visited and time spent on the site
• Referring website or search term

This information is used solely to understand how our website is used and to improve your experience. It is not linked to any personally identifiable information.

3. How We Use Your Data

We use your personal data only for the purposes for which it was collected. These include:

• Processing and managing your booking
• Communicating with you about your experience before, during, and after
• Ensuring your safety during activities by sharing relevant medical information with your instructor
• Contacting your emergency contact in the event of an incident
• Sending administrative information such as booking confirmations and invoices
• Complying with legal obligations

We will only contact you with marketing or promotional information if you have explicitly opted in to receive it. You may withdraw this consent at any time.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

• Contract — processing is necessary to fulfil your booking and deliver the services you have requested.
• Legitimate Interests — to improve our services, manage our business, and communicate with clients.
• Legal Obligation — where we are required to process data to comply with the law.
• Consent — for any marketing communications or optional data uses, where you have given explicit consent.
• Vital Interests — in an emergency, we may share relevant medical data with emergency services to protect your life or the lives of others.

5. Who We Share Your Data With

Dumont Mountaineering does not sell, rent, or trade your personal data. We may share data with the following third parties only where necessary:

• Emergency Services & Mountain Rescue — in the event of an incident in the mountains, relevant personal and medical data may be shared with Police Scotland, Scottish Ambulance Service, or Mountain Rescue teams.
• Payment Processors — your payment details are handled by a secure third-party payment provider. We do not store or have access to your full card details.
• Legal Authorities — where we are required to disclose information by law or court order.

All third parties with whom we share data are required to handle it in accordance with applicable data protection law.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes for which it was collected:

• Booking and client records are retained for a minimum of 6 years for legal and insurance purposes.
• Medical and safety information is deleted promptly following the conclusion of your experience, unless retention is required for an ongoing incident or legal matter.
• Marketing consent records are retained until you withdraw consent.

After the applicable retention period, your data is securely deleted or anonymised.

7. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of Access — you may request a copy of the personal data we hold about you.
• Right to Rectification — you may request correction of any inaccurate or incomplete data.
• Right to Erasure — you may request deletion of your data where there is no legitimate reason for us to continue processing it.
• Right to Restriction — you may request that we restrict processing of your data in certain circumstances.
• Right to Portability — you may request transfer of your data to another organisation in a commonly used format.
• Right to Object — you may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us directly. We will respond to all requests within 30 days.

8. Cookies

This website does not currently use tracking cookies or third-party analytics tools. If this changes in future, this policy will be updated and you will be informed prior to any cookies being set.

9. Data Security

We take the security of your personal data seriously. All data is stored securely and access is restricted to those who need it to deliver your experience. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) in accordance with our legal obligations.

10. Links to Other Websites

This website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites and encourage you to read their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this page, with the date of last update clearly shown. Continued use of our services following any update constitutes acceptance of the revised policy.

12. Complaints

If you believe your data has been mishandled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's independent data protection authority.

ICO website: ico.org.uk  ·  ICO helpline: 0303 123 1113

Alternatively, please contact us directly in the first instance and we will do our best to resolve any concerns promptly.

Dumont Mountaineering  ·  Scotland  ·  Contact Us