Website Privacy Policy

What this policy covers

This policy is about the globaladventurer.co.uk website: reading it, emailing us, and, when the shop is open, buying GPX route files here. The iPhone, iPad and Apple Watch app has its own privacy policy, which also covers the services the app talks to.

The short version

Reading this site sends the ordinary technical data every website receives, and nothing more: no advertising trackers, no analytics scripts, no sign-up forms. Emailing us keeps a copy of the conversation. Buying a route file, when the shop is open, gives us your name, email address and order, with payment handled by Stripe or PayPal.

What we collect and why

• Server logs. Every request to this site is logged with the address it came from (your IP address), the page or file asked for, the time and the browser's description of itself. The logs are used for security and troubleshooting and are deleted after 14 days. Legal basis: legitimate interests.
• Cloudflare. The site sits behind Cloudflare, which carries every request, blocks attacks and caches pages. Cloudflare sees the same technical data and keeps its own logs under its privacy policy; it acts as our processor.
• Fonts. The typefaces are loaded from Google Fonts, so your browser asks Google's servers for the font files and Google receives your IP address and browser details in that request, under Google's privacy policy. No other third-party scripts or resources are loaded on the app pages.
• Cookies. The shop pages set one strictly necessary session cookie for your basket, your currency and form security. The app and policy pages set no cookies of their own. No tracking or advertising cookies are set anywhere.
• Support emails. If you email us, we keep the correspondence to help you, for up to two years after the last message. Legal basis: legitimate interests.
• Orders, when the shop is open: your name, email address, what you bought and the order reference, to deliver your downloads, provide support and keep legally required accounting records. Legal basis: performance of a contract.
• Payment, when the shop is open, is processed entirely by Stripe or PayPal as independent controllers. We receive confirmation of payment and a transaction reference, never your card details.

Where it is kept, and for how long

The site and its database are hosted with Amazon Web Services in London. Automatic backups of the database are kept for seven days, so something you ask us to delete may persist in a backup for up to a week after it is removed from the live site. Server logs are deleted after 14 days. Order records are kept for six years after purchase, as UK tax and accounting rules require. Support correspondence is kept for up to two years.

Who we share data with

Cloudflare and Amazon Web Services as processors, Google for the font files, and, for shop purchases, Stripe and PayPal. Some of these providers process data outside the UK under appropriate safeguards such as the UK Addendum to the Standard Contractual Clauses. We do not sell personal data, and we do not share it with anyone for advertising.

Your rights

Under UK GDPR you can ask for access to, correction of, or deletion of your personal data, object to or restrict processing, and ask for portability. Email [email protected] and we will respond within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk).

Who we are

Global Adventurer is operated by eplatforms ltd, a company registered in England and Wales (number 03954521), registered office 9 Donnington Park, 85 Birdham Road, Chichester, West Sussex, PO20 7AJ, United Kingdom.

Changes

If this policy changes materially we will update this page and its date.