Privacy Policy

1. Who we are

This privacy policy applies to salisburytostonehenge.com, operated by Caboose Salisbury of 115 South Western Road, Salisbury, SP2 7RR, England. We are the data controller for any personal data collected through this website.

Contact: hello@caboosesalisbury.com | 01722 504858

2. What data we collect

When you make a booking through this website, we collect:

• Your name
• Your email address
• Your travel date, departure time and return time
• Number of passengers
• Payment information (processed by Stripe — we do not store card details)

We also collect anonymised website usage data via Google Analytics 4, including pages visited, time on site, and general location (country/region level). This data does not identify you personally.

3. How we use your data

We use your personal data solely to:

• Process and confirm your shuttle booking
• Send you a booking confirmation email
• Contact you if there is a change to your booked service
• Fulfil our contractual obligation to provide the shuttle service

We do not use your data for marketing, do not sell your data to third parties, and do not share your data with any party other than those necessary to fulfil your booking (Stripe for payment processing, Resend for email delivery).

4. Legal basis for processing

We process your personal data on the basis of contractual necessity (Article 6(1)(b) UK GDPR) — processing is necessary to fulfil the booking contract you have entered into with us.

5. Third-party processors

We use the following third-party services which may process your data:

• Stripe (stripe.com) — payment processing. Stripe is PCI DSS compliant. We do not receive or store your card details. Stripe privacy policy: stripe.com/privacy
• Supabase — booking data storage. Data stored in EU-region servers.
• Resend — transactional email delivery for booking confirmations.
• Google Analytics 4 — anonymised website usage analytics. You may opt out via your browser settings or google.com/settings/ads.

6. Data retention

We retain booking records for 7 years in line with UK financial record-keeping requirements. After this period, records are securely deleted.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to our legal retention obligations)
• Object to processing or request restriction
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email us at hello@caboosesalisbury.com.

8. Cookies

This website uses the following cookies:

• Google Analytics cookies (_ga, _gid) — anonymised usage data. You may disable these in your browser settings.
• Session cookies — necessary for the booking process to function correctly. These expire when you close your browser.

9. Changes to this policy

We may update this privacy policy from time to time. Updates will be posted on this page with a revised date at the top. We recommend checking this page periodically.

10. Contact