Privacy Notice
Last updated: 28 August 2026
1. Who we are
Walton Horizons provides outdoor wellbeing retreats, guided walking experiences and team experiences in the UK.
For data-protection purposes, Walton Horizons, operated by Marcelina Walton, is the controller of the personal information described in this notice.
Contact details:
Email: hello@waltonhorizons.co.uk
2. About this notice
This notice explains how we collect, use, store and share personal information when you:
visit our website;
contact us or submit an enquiry;
join our mailing list;
book or attend an experience;
provide information about your health, walking confidence, dietary requirements or access needs;
submit feedback; or
agree to the use of a photograph or testimonial.
We process personal information in accordance with the UK General Data Protection Regulation, the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations.
3. Information we may collect
Depending on how you interact with us, we may collect:
Identity and contact information
Your name, email address, telephone number, postal address, organisation and job role.
Enquiry and booking information
The experience you are interested in, preferred dates or locations, team size, messages, booking details and correspondence.
Retreat suitability and safety information
Your walking experience, confidence, fitness, relevant medical conditions, injuries, allergies, dietary requirements, medication, mobility or access needs, emergency contact and other information needed to assess suitability and deliver an experience safely.
Health information is special-category personal data and receives additional protection.
We only ask for information that is relevant to the experience. Please do not provide medical information that we have not requested.
Payment and transaction information
Payment status, amounts, dates and transaction references. Card details are normally processed directly by the relevant payment provider and are not stored by Walton Horizons.
Newsletter information
Your name, email address, subscription preferences and a record of when and how you joined or left the mailing list.
Photographs, feedback and testimonials
Photographs or video taken during an experience, feedback you provide and any testimonial, name or contextual information you separately approve for publication.
Website and technical information
Your IP address, browser, device, approximate location, pages viewed, referral source and information collected through cookies or similar technologies.
4. How we collect information
We collect information:
directly from you through forms, emails, telephone calls and conversations;
when you book or attend an experience;
when an organisation arranges an experience involving you;
when you join our mailing list or provide feedback;
through website cookies and analytics, where enabled; and
from payment, website, form or email service providers where necessary.
If a team organiser gives us information about participants, the organiser should ensure they are authorised to provide it and that participants receive this notice.
5. How and why we use your information
We use personal information for the following purposes.
Responding to enquiries
We use your details to respond, discuss suitable experiences and provide requested information.
Our lawful basis is taking steps at your request before entering into a contract and, where appropriate, our legitimate interest in managing enquiries.
Managing bookings and delivering experiences
We use booking and contact information to confirm arrangements, communicate practical information and provide the agreed experience.
Our lawful basis is performance of a contract or taking steps before entering into one.
Assessing suitability and supporting safety
We use walking, health, dietary and access information to assess whether an experience is suitable, plan reasonable adjustments and support participant welfare.
Our Article 6 lawful basis will normally be performance of a contract. Where this involves health or other special-category information, we will normally rely on your explicit consent under Article 9 of the UK GDPR.
In a genuine emergency, information may be used or disclosed where necessary to protect someone’s vital interests.
You may withdraw explicit consent, but this may mean we cannot safely provide a particular experience.
Processing payments and maintaining records
We use transaction information to take or confirm payments, issue refunds, maintain accounts and meet tax, insurance and legal obligations.
Our lawful bases are performance of a contract and compliance with legal obligations.
Sending email updates
We use your name and email address to send Walton Horizons news, retreat dates and occasional field notes when you have asked to receive them.
Our lawful basis is consent. You can unsubscribe at any time using the link in an email or by contacting us.
Unsubscribing will not stop essential messages concerning an enquiry, booking or experience.
Using photographs and testimonials
We only publish identifiable photographs, video, testimonials or related personal details where we have obtained appropriate consent.
Consent may be withdrawn for future use. We will take reasonable steps to remove the material from channels we control, although we cannot guarantee the removal of copies already shared or published by others.
Operating and improving the website
We use technical information to operate, secure and understand the use of our website.
Strictly necessary processing is based on our legitimate interests in providing a safe and functional website. Non-essential analytics or similar cookies are used only where the required consent has been provided.
Establishing or defending legal claims
We may use relevant information to handle complaints, incidents, insurance matters or legal claims.
Our lawful basis is our legitimate interests and, where applicable, compliance with legal obligations. Special-category information may be processed where necessary for the establishment, exercise or defence of legal claims.
6. When information is required
Some information is necessary to respond to an enquiry, enter into a booking or deliver an experience safely.
You do not have to provide personal information, but without certain details we may be unable to accept a booking, assess suitability, make an adjustment or provide an experience safely.
Marketing consent, photography consent and testimonial consent are optional and are not conditions of taking part.
7. Who we share information with
We may share information, where necessary, with:
Squarespace, which hosts our website and may process form submissions, contacts, analytics or email communications;
payment processors and banking providers;
email and mailing-list providers;
carefully selected guides, venues, accommodation providers, catering providers or delivery partners;
IT, website and administrative support providers;
professional advisers, accountants, insurers and legal representatives;
emergency services, medical professionals or a nominated emergency contact where necessary; and
regulators, courts or public authorities where disclosure is legally required.
We only share the information reasonably necessary for the relevant purpose.
We do not sell personal information.
Where another organisation books a team experience, we may provide the organiser with necessary administrative information. Health or private personal information will not ordinarily be shared with the organiser without a lawful reason.
8. International transfers
Some service providers, including Squarespace, may process information outside the UK, including in the United States.
Where information is transferred internationally, we require an appropriate legal mechanism and safeguards. These may include UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, the UK International Data Transfer Agreement or the UK Addendum to approved Standard Contractual Clauses.
9. How long we keep information
We keep information only for as long as it is reasonably needed.
Our normal retention approach is:
general enquiries that do not lead to a booking: up to 24 months after the last meaningful contact;
booking, contract, payment and accounting records: normally up to six years, or longer where legally required;
health, suitability, dietary and access information: only for as long as needed to plan and deliver the experience, normally reviewed for deletion within 12 months afterwards;
incident, complaint, insurance or legal-claim records: for the period reasonably required to manage the matter and applicable legal time limits;
mailing-list information: until you unsubscribe or we stop using the list;
a minimal suppression record: retained where necessary to ensure we respect an unsubscribe request;
consent records: for as long as necessary to demonstrate what was agreed;
photographs and testimonials: until consent is withdrawn or the material is no longer needed; and
website and cookie information: according to the periods stated in our cookie settings or cookie notice.
Information may be kept longer where an incident, safeguarding issue, complaint, insurance matter or legal obligation requires it.
When information is no longer required, it will be securely deleted, anonymised or destroyed.
10. Security
We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
Access is limited to people and providers who reasonably need the information. No internet-based system can be guaranteed completely secure, but we review our arrangements and respond appropriately to suspected data breaches.
11. Your data-protection rights
Depending on the circumstances, you may have the right to:
be informed about how your information is used;
request access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to delete information;
ask us to restrict how information is used;
object to processing based on legitimate interests;
receive information you provided in a portable format;
withdraw consent at any time; and
object to direct marketing at any time.
These rights are not absolute and exemptions may apply.
Walton Horizons does not currently use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise a right, contact hello@waltonhorizons.co.uk. We may need to confirm your identity before responding.
12. Complaints
Please contact us first if you are concerned about how we have handled your information:
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Website: https://ico.org.uk/make-a-complaint/
13. Cookies
Our website may use:
essential cookies needed for security and website operation;
preference cookies;
analytics cookies; and
cookies associated with embedded or third-party services.
Non-essential cookies will not be used unless the required consent has been obtained. You can accept, reject or manage non-essential cookies through the website’s cookie controls.
Further details should be provided in the website’s cookie notice or cookie-management panel.
14. Children
Our website and experiences are intended primarily for adults. We do not knowingly collect personal information from children through the website unless this is necessary for a specifically arranged experience and appropriate permission and safeguards are in place.
15. Links and social media
Our website may contain links to Instagram, Facebook and other third-party services. Those organisations control their own processing and privacy practices.
We encourage you to review their privacy notices before providing information through their platforms.
16. Changes to this notice
We may update this notice when our services, providers or legal obligations change.
The latest version will be published on this page with its updated date.