G-UP Privacy Policy

  1. Who We Are
    G-UP ("we," "us," or "our") operates supported outdoor experiences, training blocks, and community initiatives in Scotland. We are committed to protecting your privacy and handling your personal information transparently and securely in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

  2. Information We Collect

  • Contact Information: Name, email address, phone number, and physical address.

  • Booking & Payment Details: Records of bookings, bank transfer confirmations, and transaction details (we do not store bank account numbers or credit card details).

  • Health & Safety Information: Pre-existing medical conditions, allergies, injuries, emergency contacts, and physical fitness self-declarations provided via booking emails or forms.

  • Dynamic & Location Data: GPS tracking data or live locations during supported runs and expeditions (where agreed for safety or operational purposes).

  • Media: Photos, videos, and social media content captured during G-UP supported sessions or events.

     3.   How We Use Your Information

  • We process your personal data for the following specific purposes:

  • To fulfill booking requests, manage logistics, and communicate regarding upcoming sessions.

  • To ensure safety and deliver emergency care, including sharing vital medical info with emergency services if required.

  • To process bank transfers and manage accounting records.

  • To share updates, media, and promotional content on our website and social media (with your consent via our Media Release policy).

  • To support our Pay-It-Forward initiatives and community programs.

  1. Legal Basis for Processing

  • Contractual Necessity: Processing required to confirm bookings and deliver our services to you.

  • Vital Interests: Processing medical and emergency contact data to protect your safety in outdoor environments.

  • Legal Obligation: Retaining financial records for tax and legal compliance.

  • Consent: Using your photo, video, or testimonial content on public channels, which you can withdraw at any time.

  1. How We Store and Protect Your Data

  • Digital Records: All personal data, booking emails, and medical disclosures are stored securely on password-protected cloud systems and devices accessible only by authorized G-UP crew.

  • Data Retention: We retain personal data only as long as necessary. Financial records are held for 6 years to comply with UK tax law. Medical declarations are securely deleted 12 months after your event unless required longer for legal liability purposes.

  1. Sharing Your Information

  • Emergency Services: With mountain rescue, medical personnel, or police in the event of an emergency.

  • Operational Partners: With trusted local partners (such as campsites or transport providers) solely where required to deliver your booked itinerary.

  1. Your Rights Under UK GDPR

  • Access a copy of the personal data we hold about you.

  • Request corrections to inaccurate or incomplete data.

  • Request deletion of your data (where we are not legally required to retain it).

  • Withdraw consent for marketing, social media feature, or photo release at any time.

  1. Contact Us
    If you have questions about this policy or wish to exercise your data rights, please contact us via email at your dedicated G-UP contact email address.