Effective Date: 1st January 2025
Website Address: https://nomadphotographytours.com

1. Who We Are
Nomad Photography Tours is a UK-based photography tour business. We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU GDPR (where applicable).
This privacy policy explains how we collect, use, and store your personal information when you interact with our website or services.
2. Personal Data We Collect
a. Comments and User Content
When visitors leave comments on our site, we collect the information provided in the comments form, along with the visitor’s IP address and browser user agent string to help detect spam.
We may use a third-party service such as Gravatar to manage profile images. An anonymised string (hash) generated from your email address may be provided to Gravatar. Their privacy policy is available at: https://automattic.com/privacy/. Once your comment is approved, your profile image (if applicable) may be publicly visible.
b. Media Uploads
If you upload images to the website, please avoid uploading files containing embedded GPS location data (EXIF). Visitors to the site may be able to extract location data from these images.
c. Cookies and Tracking Technologies
We use cookies to improve your browsing experience. These include:

• Comment cookies: If you leave a comment, you may opt in to saving your name, email, and website in cookies. These are stored for convenience and last for one year.

• Login cookies: If you log in, we use cookies to remember your session and display preferences. These expire after a set period, typically two days to two weeks depending on your preferences.

• Editing cookies: When editing or publishing content, an additional cookie is stored that simply logs the post ID; this expires after one day.

• Essential and functional cookies: Used to ensure the site operates correctly.

You can manage or disable cookies through your browser settings.
d. Embedded Content
Articles on this site may include embedded content (e.g. videos, images, social media feeds). Embedded content from third-party websites behaves in the same way as if you had visited those websites directly. These external sites may collect data, use cookies, and track your interactions with their content, especially if you are logged in to their services.
3. Legal Basis for Processing
We process your personal data based on the following lawful grounds:

• Your consent (where applicable, e.g. for cookies or email newsletters)

• Fulfilment of a contract or pre-contractual obligations

• Compliance with legal obligations

• Our legitimate interests (e.g. website analytics, fraud prevention)

4. Data Sharing and Transfers
We do not sell your data. However, we may share personal information with:

• Website hosting and technical service providers

• Email and analytics platforms (e.g. for newsletter distribution or spam detection)

• Regulatory authorities or legal entities when required by law

If personal data is transferred outside the UK or EEA, we ensure adequate safeguards (such as Standard Contractual Clauses) are in place.
5. Data Retention

• Comments and associated metadata are retained indefinitely to recognise and auto-approve future comments.

• Registered user data is retained as long as the account is active. Users can access, amend, or delete their data at any time via their account settings.

• Technical logs and backup data are retained for a limited time as part of our security and disaster recovery processes.

6. Your Rights
Under data protection laws, you have the following rights:

• Access – Request a copy of the personal data we hold about you.

• Rectification – Request correction of inaccurate or incomplete data.

• Erasure – Request deletion of your data (subject to legal exemptions).

• Restriction – Request limited processing of your data.

• Portability – Receive your data in a structured, commonly used format.

• Objection – Object to processing based on legitimate interests or direct marketing.

• Withdraw consent – Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the contact information at the bottom of this policy.
7. Data Security
We take appropriate technical and organisational measures to secure your data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.
8. Where Your Data Is Sent
Visitor comments may be processed through an automated spam detection service and may be stored or analysed on servers hosted by third parties.
9. Contact Us
If you have any questions or concerns about this privacy policy or how your data is handled, please contact:
Data Controller:
Nomad Photography Tours
Email: info@nomadphotographytours.com
Website: https://nomadphotographytours.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK at https://ico.org.uk.