Privacy Policy — Sapphire City Explorers
Last updated: 1 August 2026. Sapphire City Explorers (operating at sapphirees.pro) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you use our website, book a tour, attend an event or otherwise interact with us. It also sets out your rights under data protection law, including the UK GDPR and the Data Protection Act 2018, and, where applicable, rights under the CCPA for California residents.
Who we are and who is responsible for your data
Sapphire City Explorers is the data controller for personal information collected through our web domain and during the course of our business. Our contact details are: Sapphire City Explorers, Unit 3, Brighton Cultural Quarter, 12 Pavilion Parade, Brighton BN1 1EE, United Kingdom; email: [email protected]; phone: +44 1273 000123.
Personal data we collect
We collect different types of personal data depending on your interaction with us, including
Identity data: name, title, date of birth (where required for age-restricted events)
Contact data: email address, postal address and telephone number
Booking and transaction data: tour bookings, booking reference, payment details (note: payment card details are processed by third-party payment processors and are not stored by Sapphire City Explorers), dietary requirements, accessibility needs
Technical data: IP address, device and browser information, pages visited, referrer URL (collected via cookies and analytics)
Communications data: communications you send to us (emails, contact form messages) and feedback surveys
Special categories: limited sensitive data such as medical or accessibility information you provide to enable a safe and comfortable tour
How we collect personal data
Data is collected when you register on our website, book a tour, contact us by email or phone, sign up for a newsletter, participate in a survey or provide feedback, and when third-party services provide analytics data. We also collect information when you interact with our social media channels or when photos are taken on public tours (see below under photos and public images).
Why we collect personal data and our lawful bases
We process personal data for the following purposes and on these lawful bases
To fulfil a contract: processing bookings, communicating confirmations, providing the tour service, and handling payments (Contract performance).
Legitimate interests: improving our services, preventing fraud, handling complaints and enquiries, sending operational information such as changes or cancellations, and marketing where you have not opted out but we consider it proportionate (Legitimate interests).
Consent: where you have agreed to receive newsletters, marketing communications, or photography consent for promotional use (Consent).
Legal obligations: keeping records for tax, health and safety, and compliance with applicable laws (Legal obligation).
Vital interests: in rare circumstances we may process information necessary to protect someone’s life (Vital interests).
Third-party processors and sharing data
We share personal data with trusted third parties who help deliver our services, including
Payment processors (e.g. Stripe, PayPal) for payment transactions;
Booking and ticketing platforms used to manage reservations;
Marketing platforms (e.g. email service providers) where you have opted in;
Analytics providers such as Google Analytics (or alternatives) to understand site usage;
Local partners (cafés, venues) only when required to fulfil a booking (e.g. arranging group tastings); and
Authorities where required by law (e.g. to respond to a legal process or for safeguarding concerns).
Where data is transferred to processors outside the UK, we ensure appropriate safeguards are in place such as standard contractual clauses or reliance on an adequacy decision, and we will inform you of the safeguards applied.
Marketing communications
If you have consented to receive marketing information we may send you newsletters and offers about our tours and local events. You can opt out at any time via the ‘unsubscribe’ link in the emails or by contacting [email protected]. We will not share your marketing preferences with third parties for their own marketing without your consent.
Retention of personal data
We retain your personal data only for as long as necessary to provide services, comply with legal obligations (such as tax records), resolve disputes and enforce our agreements. Typical retention periods are: booking records and transaction data for seven years for accounting and tax compliance; marketing preferences until you unsubscribe; contact enquiries typically retained for two years unless further action is required.
Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure or destruction. Our website uses HTTPS. Access to personal data is restricted to staff and contractors who need it to perform their roles. However, no method of transmission or storage is 100% secure; if a data breach occurs we will follow relevant reporting obligations and inform affected individuals where required by law.
Photography and public images
On public tours, our guides may take photographs for promotional use. We will always ask for explicit consent before using identifiable images of individuals on marketing materials. If you prefer not to be photographed, please inform the guide at the start of the tour.
Your rights
Under the UK GDPR you have the right to access, correct, restrict or erase your personal data, and the right to data portability. You can also object to processing based on legitimate interests. To exercise these rights, contact [email protected]. We will respond within one month. If you are dissatisfied with our response, you have the right to complain to the Information Commissioner’s Office (ICO) in the UK.
California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. You also have the right to request the deletion of your personal information. We do not sell personal information. To exercise your CCPA rights, please submit a verifiable consumer request to us at [email protected].
Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website, and significant changes will be communicated to you directly where appropriate.
Contact
Questions about this policy can be sent to [email protected] or by post to Sapphire City Explorers, Unit 3, Brighton Cultural Quarter, 12 Pavilion Parade, Brighton, BN1 1EE, United Kingdom.