Sessions and Sail – Privacy Notice
1. Who we are
Sessions and Sail is a travel and cultural experience provider based in Scotland. We are the “data controller” for the personal information we collect. We are registered with the Information Commissioner’s Office (ICO).
2. The information we collect
We collect and process the following types of personal data:
- Contact details (name, email address, phone number)
- Booking information
- Participant information (dietary needs, accessibility needs, emergency contacts, cabin‑sharing preferences)
- Passport details where required for specific voyages
- Payment information (processed securely by third‑party providers such as Wetravel and Stripe — we do not store card details)
- Communications with us
- Optional participation in WhatsApp groups
3. How we use your information
We use your personal data to:
- Manage your booking
- Deliver your voyage and associated activities
- Communicate with you before, during, and after your trip
- Meet our legal and financial protection obligations (including ABTOT requirements)
- Ensure safety and appropriate accommodation arrangements
- Improve our services
We do not use your data for unrelated marketing unless you explicitly opt in.
4. Our lawful basis for processing
We process your data under the following lawful bases:
-
Contract – to provide the voyage you have booked
-
Legal obligation – to meet financial protection, accounting, and safety requirements
-
Legitimate interests – to operate and improve our services
-
Consent – for optional activities such as joining a WhatsApp group
5. Who we share your data with
We only share your information where necessary to operate your voyage, including:
- Vessel operators
- Tutors or facilitators where relevant
- Payment processors (Wetravel, Stripe)
- Accommodation or venue providers for shore‑based sessions
- Emergency services if required for safety reasons
We do not sell your data or share it for unrelated marketing.
6. International transfers
If any service provider processes data outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses.
7. How long we keep your information
We retain personal data only for as long as necessary to:
- Deliver your voyage
- Meet legal, accounting, and insurance requirements
After this period, data is securely deleted.
8. Your rights
You have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion in certain circumstances
- Object to or restrict processing
- Withdraw consent (where consent is the basis for processing)
To exercise your rights, contact us using the details below.
9. How to contact us
For any questions about this notice or your data, please contact:
Sessions and Sail
sessionsandsail@gmail.com
Lingarth, Cullivoe, Yell, Shetland ZE2 9DD, UK
If you are not satisfied with our response, you can contact the Information Commissioner’s Office (ICO).