Privacy
notice
This notice explains what personal information Cumbria Guru uses, why we use it and the choices you have.
Who is responsible for your information?
Cumbria Guru, which operates Cumbria Guru, is the data controller for the personal information described in this notice.
Privacy contact: hello@cumbriaguru.com
Information we use
- Account information: email address, password hash, display name, username, profile photo, biography, account status and sign-in history.
- Trips and saved content: destinations, dates, party size, travel method, custom trip-cover images, itinerary items, booking notes and places or events you save.
- Preferences: preferred destination, travel style, interests and communication choices. If you choose to provide dietary or accessibility information, it may reveal health, religious or other sensitive information.
- Contributions and enquiries: reviews, images, place or event suggestions, business claim details and messages you send us.
- Usage and security information: activity records, searches, affiliate-link interactions and technical information normally included in web requests. For affiliate clicks we retain one-way session, network-address and browser hashes, approximate country, region or city when supplied by our hosting or content-delivery provider, device category, referring domain and automated-traffic indicators. The raw IP address and full browser identification are not stored in the affiliate-click record.
- Optional view measurement: where the analytics consent signal permits it, page paths, content types and IDs, timestamps and a one-way session hash used to count page, place and post views without storing the raw session ID or IP address in the view record.
Why we use information
Traffic-quality labels are indicators for reporting and review, not proof of a person’s identity. We do not make solely automated decisions that produce legal or similarly significant effects.
How long we keep information
We keep account and trip information while your account is active and then only for as long as reasonably needed to deal with deletion requests, disputes, security, backups and legal obligations. Detailed affiliate-click session, network and browser hashes, city or region, referring domain and assessment reasons are removed after 90 days; the click, coarse country or device category and traffic-quality result may remain for aggregate commercial reporting. Other security and activity records are kept for a limited period based on risk and operational need. Marketing consent records may be retained to demonstrate your choices. Content you publish may be anonymised rather than deleted where necessary to preserve the integrity of the service.
Your data protection rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful use. You have an absolute right to object to direct marketing.
Use your account settings where available or contact us. We may need to verify your identity. There is usually no charge, although the law allows limits in some circumstances.
Children’s information
Cumbria Guru is a general travel-planning service and is not designed to collect information from children under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and take appropriate action. Parents and young people may exercise the same data protection rights described above.
Questions and privacy complaints
Email hello@cumbriaguru.com and state that your message is a data protection complaint. We will acknowledge it within 30 days, investigate without undue delay, keep you informed where appropriate and explain the outcome.
You can also complain to the Information Commissioner’s Office. We would appreciate the opportunity to resolve your concern first, but you do not have to contact us before approaching the ICO.
Changes to this notice
We review this notice when our service or the law changes. Material changes will be highlighted on the site or brought to account holders’ attention where appropriate.
Advertising, analytics and your choices
When a direct advertisement is delivered, we record the campaign, creative, placement, page context, device category and time. Viewability and click events help advertisers understand aggregate performance. We use rotating one-way hashes rather than storing raw IP addresses in advertising records, and suspected automated or duplicate activity is excluded from commercial reporting.
Google AdSense and Google Analytics use Google Consent Mode. Google Privacy & messaging is the consent-management interface for visitors in the UK, EEA and Switzerland and communicates applicable choices through Google’s consent signals and the IAB TCF. The publisher tag loads so that this interface can appear, but optional storage defaults to denied. Google may serve eligible limited ads following a refusal; personalised advertising and analytics storage depend on the relevant consent choice.
Use Privacy choices in the footer to reopen Google’s interface and change or withdraw your choices.