Privacy Policy

This Privacy Policy relates to our use of any personal information you provide to us through this website, in person, through social media, by email or over the phone.

This website is controlled by Walthew Leisure Ltd (trading as Climb Quest) which is a company registered in the United Kingdom. Whenever you provide such information, we are legally obliged to use your information in compliance with all UK laws concerning the protection of personal information, including the General Data Protection Regulation (GDPR). This website may contain hyperlinks to websites owned and operated by third parties. These third party websites have their own privacy policies, including cookies, and you should review these also. The third party policies will govern the use of personal information you submit or are collected by cookies whilst visiting these websites. We do not accept any responsibility or liability for the privacy practices of such third parties.

Collection of information

We are committed to protecting your privacy, and collecting the minimum amount of personal information about you whilst still providing you with a satisfactory service.

Booking with us

When you book your climbing, we will ask for personal information about you. This can consist of information such as your name and names of your party, e-mail address, postal address, telephone or mobile number and any other information needed to ensure that our service to you is tailored to your needs. Different web pages within this website may ask for different or additional personal information. By entering your details in the fields requested, you enable us to provide you with the services you select.

Data you give at the time of booking is stored in our booking system, which is a secure, password protected site.  Personal information will be deleted from our booking system after a period of 12 months, unless you book with us again within that time.We do not keep any credit card details after your booking transaction.

Subscribing to our marketing newsletters

We contact customers with marketing newsletters sent to their email address. However, we only send newsletters to customers who have opt-ed in to receiving marketing from us.

If you wish to unsubscribe at any time, you can either do so by clicking the unsubscribe link at the bottom of our newsletters, emailing us or calling us on 01223 941 700.

Use of information

Personal information collected about you and your activities is used primarily to assist in the processing of the task for which you visited the website, and the improvement of our services.All personal information collected in the UK is held and processed in accordance with GDPR. All reasonable precautions are taken to prevent unauthorised access to this information. This safeguard may require you to provide additional forms of identity should you wish to obtain information about your account details. To read the privacy policy for our booking system, please contact us.

Any personal information provided to or to be gathered by this website is controlled by Walthew Leisure Ltd as the data controller, whose registered office address is Clip ‘n Climb Cambridge, Unit 34, Clifton Road Industrial Estate, Clifton Road, Cambridge, CB1 7EB.

Changes regarding NHS Test and Trace

To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing.

By maintaining records of staff, customers and visitors, and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.

As a customer/visitor of Clip ‘n Climb Cambridge you will be asked to provide some basic information and contact details.

The following information will be collected:the names of all customers or visitors, or if it is a group of people, the name of one member of the group a contact phone number for each customer or visitor, or for the lead member of a group of people date of visit and arrival time and departure timeThe venue/establishment as the data controllers for the collection of your personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information.

When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation for that period of time.

The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the venue/establishment, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction.In addition, if you only interact with one member of staff during your visit, the name of the assigned staff member will be recorded alongside your information.

NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them.For example, if another customer at the venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of customer details for a particular time period (for example, this may be all customers who visited on a particular day or time-band, or over a 2-day period).We may require you to pre-book appointments for visits or to complete a form on arrival.

Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order). In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.

However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (perhaps, for example, your name, date of birth and phone number). Where this is the case, this information only will continue to be held after 21 days and we will use it as we usually would, unless and until you tell us not to.Your information will always be stored and used in compliance with the relevant data protection legislation.

The use of your information is covered by the General Data Protection Regulations Article 6 (1) (c) – a legal obligation to which we as a venue/establishment are subject to. The legal obligation to which we’re subject, means that we’re mandated by law, by a set of new regulations from the government, to co-operate with the NHS Test and Trace service, in order to help maintain a safe operating environment and to help fight any local outbreak of corona virus.

By law, you have a number of rights as a data subject, such as the right to be informed, the right to access information held about you and the right to rectification of any inaccurate data that we hold about you.

You have the right to request that we erase personal data about you that we hold (although this is not an absolute right).

You have the right to request that we restrict processing of personal data about you that we hold in certain circumstances.You have the right to object to processing of personal data about you on grounds relating to your particular situation (also again this right is not absolute).

Disclosing information

We do not disclose any personal information obtained about you from this website to third parties.If you would like to see the data that we hold for you, please do so by emailing us or calling 01223 941 700 and speaking to Beth Walthew.  

We will ensure that we respond to a subject access request without undue delay and within one month of receipt.  

We abide by the rules set out by the ICO regarding right of access.Within GDPR, you have a ‘right to be forgotten’, which would mean us deleting your information from our booking system.  

If you wish this to happen, please contact us using the details above.

If you are unhappy or wish to complain about how your information is used, you should contact a member of staff in the first instance to resolve your issue.

If you are still not satisfied, you can complain to the Information Commissioner’s Office. Their website address is www.ico.org.uk.

Changes to this policy

This Privacy Policy may be updated from time to time without notice. Any changes to our Privacy Policy will be placed here and will supersede all previous versions of the policy.