Privacy Policy

Who is responsible for your information

Norfolk Historic Shipwrecks LTD is responsible for personal information handled through castironman.com and through enquiries made about Sounding Line historical sailings. Our business address is 217 College Road, Norwich, NR2 3JD. Our VAT ID is GB 944069411. Questions about privacy may be directed to [email protected] or +441603630550.

This notice explains the information we collect, why we use it, the legal bases we rely on, how long we keep it, who may receive it and the rights available to people in the United Kingdom under data protection law.

Information we collect

When you send a sailing enquiry, we may collect your name, email address, telephone number, party size, preferred sailing, preferred date and any message you choose to provide. If you later make a booking, we may also need booking administration information, passenger details reasonably required for safe operation, payment records and correspondence relating to the booking.

We ask you not to include unnecessary sensitive information in the free-text field. If a mobility or health-related detail is relevant to safe boarding or participation and you choose to tell us, we use it only to assess practical arrangements and safety requirements connected with the requested sailing.

Why we use personal data and our lawful bases

We use enquiry information to respond to your request, discuss suitable sailings, prepare booking information and take steps at your request before entering into a contract. Where a booking is made, we use relevant information to administer and perform that contract, including operational communication about weather, timing, meeting arrangements and changes to the passage.

We may retain limited business correspondence, transaction records and safety-related booking records where necessary to meet legal obligations, establish or defend legal claims, maintain accounting records, or pursue our legitimate interests in operating and improving the service. Where consent is the appropriate legal basis for an optional use, you may withdraw that consent at any time without affecting processing that took place before withdrawal.

Sharing information

Information may be shared with service providers that support our business, such as hosting, email, payment, professional advisory and operational suppliers, where they need the information to perform their role. Where a sailing is fulfilled with an operational partner, relevant booking and safety information may be shared with that operator so the passage can be delivered safely and correctly.

We do not sell personal data. We may disclose information where required by law, regulation, court order, law-enforcement request or to protect legal rights and safety.

International transfers

Some technology or professional service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards for such a transfer, we use an appropriate legal mechanism and take reasonable steps to assess the protections applied by the recipient.

How long we keep information

General enquiries that do not become bookings are ordinarily retained only for as long as needed to respond and manage follow-up, then reviewed for deletion. Booking, payment and accounting records may be retained for longer where tax, legal or contractual record-keeping obligations apply. Safety correspondence and dispute-related material may be retained for the period reasonably necessary to manage claims or demonstrate how a booking was handled.

Retention is reviewed according to purpose rather than kept indefinitely. When information is no longer required, it is deleted, anonymised or securely archived where continuing retention is legally necessary.

Your rights

Depending on the circumstances, you may have rights to request access to your personal data, correction of inaccurate information, deletion, restriction of processing, objection to certain processing and portability of information you provided. Where processing relies on consent, you can withdraw that consent.

To exercise a right, contact us using the details above. We may need information to verify identity before releasing or changing personal data. You also have the right to raise concerns with the UK Information Commissioner’s Office if you believe your information has been handled unlawfully.

Cookies and similar technologies

Our use of cookies and related storage technologies is described in the Cookie Policy. The site is designed so that the editorial and enquiry experience does not depend on optional advertising or behavioural profiling cookies set by Norfolk Historic Shipwrecks LTD.

Security

We use organisational and technical measures appropriate to the nature of the information we handle. No internet service can guarantee absolute security, but access to personal information is limited to people and providers who need it for legitimate business purposes.

Changes to this notice

We may update this notice when our services, legal obligations or processing practices change. The version published on this page is the version that applies when you use the site. Material changes will be reflected in the wording of this notice.