Explore
Home Destinations Guide Seasonal Calendar Festivals & Culture Contact Explore

Privacy Policy

Effective Date: January 1, 2026 • Last Reviewed: May 2026

This Privacy Policy describes how Gridsbrowselb Expeditions & Publishing Ltd. (referred to herein as "Gridsbrowselb", "we", "us", or "our"), operating the web domain gridsbrowselb.pics, collects, uses, protects, and discloses information gathered through your use of our editorial travel publication, digital destination guides, and contact interfaces.

1. Data Controller Identification

For the purposes of the General Data Protection Regulation (EU GDPR), the UK Data Protection Act 2018, and relevant international data privacy statutes, the Data Controller is:

Gridsbrowselb Expeditions & Publishing Ltd.
Company Registration No: UK-08942177
Registered Office: 14 St. Ann's Square, Royal Exchange Quarter, Manchester, M2 7PW, United Kingdom
Data Protection Officer Contact: [email protected]

2. Categories of Information We Collect

2.1. Information You Voluntarily Provide

When you interact with our publication—such as submitting an editorial enquiry, requesting bespoke seasonal itinerary advice via our contact form, or subscribing to our seasonal dispatches—we may collect:

  • Full Legal Name and Professional Title
  • Email address and telephone contact information
  • Travel preferences, preferred European travel months, and geographical areas of interest
  • Any free-form feedback, comments, or correspondence text submitted

2.2. Information Collected Automatically

As you browse our website, our servers automatically log standard diagnostic technical metadata, which may include:

  • Internet Protocol (IP) address (anonymized/truncated prior to analytical storage)
  • Browser type, version, and rendering engine
  • Operating system and device hardware characteristics
  • Uniform Resource Locators (URLs) visited, referring pages, and exit pages
  • Date and time timestamps of page requests

3. Legal Grounds for Processing (GDPR Compliance)

Under Article 6 of the UK/EU GDPR, we only process your personal data when we have an established lawful basis:

  • Consent (Art. 6(1)(a)): Where you have provided clear, affirmative consent (e.g., opting in to non-essential analytics cookies or newsletter communications).
  • Contractual Necessity (Art. 6(1)(b)): To respond to your direct queries, deliver requested travel publications, or execute service agreements.
  • Legitimate Interests (Art. 6(1)(f)): To maintain site security, detect and prevent malicious abuse or cyber threats, and evaluate aggregate editorial performance.
  • Legal Obligation (Art. 6(1)(c)): To comply with applicable statutory accounting, tax, or regulatory disclosure requirements.

4. Data Retention Periods

We retain personal information only for as long as strictly necessary to fulfill the specific purposes outlined in this Policy, unless a longer retention term is required or permitted by UK law:

  • Contact Enquiries: Retained for a maximum of 24 months following the resolution of your inquiry, after which records are permanently deleted.
  • Server Access Logs: Retained in rolling encrypted archives for 90 days strictly for cybersecurity and infrastructure monitoring.
  • Cookie Consent Logs: Stored locally in your browser's localStorage for 12 months, or until you clear your browser cache.

5. Your Statutory Privacy Rights

Depending on your jurisdiction (including the UK, European Economic Area, and California under CCPA/CPRA), you are entitled to exercise the following rights regarding your personal information:

  • Right of Access (Article 15 GDPR): Request a copy of the personal data we hold about you in a structured, machine-readable format.
  • Right to Rectification (Article 16 GDPR): Request correction of inaccurate or incomplete personal data.
  • Right to Erasure / 'Right to be Forgotten' (Article 17 GDPR): Request the permanent deletion of your personal records where no overriding legal basis persists.
  • Right to Restrict Processing (Article 18 GDPR): Limit how we process your data while a dispute or verification request is active.
  • Right to Data Portability (Article 20 GDPR): Request transfer of your data to another service provider.
  • Right to Object (Article 21 GDPR): Object to any processing based on our legitimate interests or for direct marketing purposes.

To exercise any of these rights, please email our Data Protection Officer at [email protected]. We respond to all verified statutory requests within 30 calendar days.

6. Third-Party Data Processors

We do not sell, rent, or lease your personal data to data brokers or advertising networks. We engage trusted third-party cloud infrastructure and hosting providers who act strictly under data processing agreements compliant with GDPR standard contractual clauses (SCCs).

7. Supervisory Authority Contact

If you believe our processing of your personal information infringes statutory privacy rights, you have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or with your local European Data Protection Authority.