Privacy Policy

adventuro Ltd operates an online marketplace for outdoor activities and experiences. Customers can browse and book activities in multiple countries, and activity providers (centres) can list and manage activities wherever they operate.

Contact: team@adventuro.com
Postal address:
adventuro Ltd
Grosvenor House
3 Chapel Street
Congleton
England
CW12 4AB

If you are in the UK, you may complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. If you are in the European Economic Area, you may complain to your local data protection authority. Please contact us first if you are comfortable doing so, so that we can try to resolve the issue.

The information we collect depends on how you use the Services. You do not have to provide optional information, but some information is required to create an account, make a booking or use a requested feature.

Information you provide

• Account and contact details: name, email address, telephone number, account identifiers, authentication information, profile location, country, languages and communication preferences.
• Booking and participant details: selected activity, date, time, party size, participant names and answers to questions required by an activity provider.
• Special category information: health, accessibility, dietary or medical information when it is relevant to safely provide an activity. Please only provide information that the provider reasonably needs.
• Payment and transaction details: booking value, currency, payment status, refunds, discounts, gift vouchers and Stripe transaction references. Stripe collects card details through its payment interface; we do not receive or store full card numbers or security codes.
• Communications and content: enquiries, booking chat messages, support requests, reviews, ratings, logbook entries, answers to booking questions, feedback and other information you send to us or an activity provider.
• Marketing preferences: whether you want to receive marketing and how you interact with our communications.

Information collected automatically

• Device and technical data: IP address, device and app identifiers, browser, operating system, app version, language, network and diagnostic information.
• Usage data: screens and pages viewed, searches, filters, course interactions, booking-funnel steps, referring pages, timestamps and app lifecycle events.
• Attribution data: campaign and referral parameters such as UTM values, partner references and advertising click identifiers (for example, gclid or fbclid) when they are present in a link used to reach us.
• Location: approximate location inferred from an IP address and precise device location only after you allow location access and use a feature such as "near me". We do not collect background location.
• Push notification data: device push token, platform, permission status and interactions with booking notifications when you enable notifications.
• Cookies and local storage: authentication, preferences, consent choices, attribution, recently viewed courses, saved courses and analytics identifiers.

Information from other sources

• Apple or Google profile information when you choose social sign-in, received through Clerk and limited by the provider permissions you grant.
• Booking status, availability, messages and fulfilment information from activity providers and their booking systems.
• Payment status, fraud signals and transaction references from Stripe.
• Campaign and conversion information from analytics, advertising and referral partners.

Our legitimate interests include operating a reliable marketplace, improving our products, understanding demand, attributing partner referrals, protecting users and preventing fraud. We consider the impact on your rights before relying on legitimate interests. You may object where this basis applies.

Where we process health or other special category information, we do so only where necessary and where an additional legal condition applies, normally your explicit consent. In an emergency, vital interests may apply.

When you enquire about or book an activity, we share the information needed to fulfil the booking with the relevant activity provider (centre). This can include your name and contact details, booking and participant details, messages, and any health, accessibility or dietary information you choose to provide.

Activity providers use this information to confirm, administer and safely deliver their activities. Providers may be based in the UK or in other countries where the activity takes place. They may have their own privacy policy and may act as an independent controller. Where a provider is outside the UK, your information may be transferred to that country so the activity can be delivered.

If you are an activity provider, we process your business contact details, centre profile, listings, booking and payout information, communications with customers and adventuro, and account and technical data needed to operate your centre account. We share what is necessary with customers, payment providers and service providers to run the marketplace.

Please contact the provider or us if you need help understanding how a provider uses your information or what safeguards apply to an international transfer.

We use service providers to operate the Services. They process information under contracts and must protect it appropriately. The providers used for a particular interaction may include:

We may also disclose information in connection with a merger, financing, reorganisation or sale of all or part of our business, subject to appropriate confidentiality and legal safeguards.

We require third parties that process app user data on our behalf to provide protection consistent with this policy and applicable law.

We use cookies, software development kits, pixels, local storage and similar technologies to keep the Services working, remember preferences, understand use, attribute referrals and measure advertising.

• Essential technologies support authentication, security, payments, saved preferences and requested features.
• Analytics technologies such as RudderStack and Mixpanel measure screens, searches, course views and booking funnels.
• Advertising measurement may send course interactions, purchase history, transaction value and campaign identifiers to Meta, Google Ads or TikTok to measure whether advertising led to a booking.
• Partner attribution records a referral partner and links it to later booking activity so that we can report and calculate commission.

On the website, you can use the cookie and analytics choices presented to you. You can also remove stored website data through your browser. On mobile, you can change device permissions in system settings and manage push notifications in the Account tab. You may withdraw consent or object to non-essential processing by contacting team@adventuro.com.

Apple's App Tracking Transparency permission is separate from this privacy policy. We do not currently request access to Apple's advertising identifier (IDFA). Advertising conversion measurement may still be described as "tracking" in app-store privacy labels.

Mobile permissions are optional and requested when relevant:

• Location: one-time, foreground location to show nearby activities. We do not request background location.
• Notifications: booking messages and status updates. You can disable these in the app or device settings.
• Calendar: write-only access to add a booked activity when you request it. We do not read your calendar for this feature.
• Photos: save-only access when you choose to download a voucher image. We do not read your photo library for this feature.

adventuro is used by customers booking activities in different countries and by activity providers (centres) operating in different countries. Personal information may therefore be accessed, stored or processed in the UK, the country where you or a provider is located, and in other countries where our service providers operate (for example, the United States or countries in the European Economic Area).

When you book an activity abroad, or when a provider outside the UK receives booking details, information may be transferred to that country so the booking can be fulfilled. When you use the Services from outside the UK, your information may still be processed in the UK and by our international service providers.

Where personal information is transferred to a country that has not been found to provide adequate protection, we use an approved safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, provider contractual commitments, or another lawful transfer mechanism. Activity providers are responsible for their own compliance when they receive and use booking information in their country.

Contact us for more information about the safeguards relevant to your data or a particular booking.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, safety, fraud-prevention and dispute-resolution requirements. We use the following criteria:

• Account and profile information is normally kept while the account is active and until an account-deletion request has been completed, subject to information we must retain.
• Booking, payment and financial records may be kept for up to six years after the relevant transaction or longer where law or an active dispute requires.
• Booking messages, support records, reviews and logbook content are kept for as long as needed to provide the account or booking, resolve safety or support issues, and establish or defend legal claims.
• Identifiable analytics and attribution data is kept for the period configured in our analytics services and then deleted or anonymised when it is no longer needed. Aggregated statistics that no longer identify a person may be retained longer.
• Push tokens are removed or replaced when you disable notifications, sign out, change device, or ask us to delete the account, subject to technical processing time.

Deleted information may remain temporarily in restricted backups until those backups are overwritten. We do not use backup copies for ordinary business purposes.

We use organisational and technical measures designed to protect personal information, including encrypted network connections, access controls, authentication and restricted provider access. No system can be guaranteed to be completely secure. Please use a strong sign-in method and contact us if you believe your account or information has been compromised.

Depending on where you live — including if you are a customer or activity provider in the UK, European Economic Area or another country with privacy laws — you may have rights to access, receive a copy of, correct, delete, restrict or object to our use of your personal information. You may also have the right to data portability, to withdraw consent, and to complain to a regulator.

• Update available profile information in your account or contact us.
• Unsubscribe from marketing using the link in an email or contact us.
• Disable push notifications in the app or device settings.
• Withdraw optional device permissions in device settings.
• Use website privacy choices or browser controls for non-essential technologies.
• Email team@adventuro.com to exercise another privacy right.

We may need to verify your identity before completing a request. Rights can have legal exceptions; for example, we may need to keep transaction records required by tax law or information needed to resolve a dispute.

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects.

You can ask us to delete your adventuro account and associated personal information by contacting team@adventuro.com from the email address linked to your account. Where an in-app deletion option is available, you can also start the request from the Account area.

Deletion means removing the account and personal information we are not legally required to keep; it is not merely temporary deactivation. We will also revoke applicable authentication sessions and, where relevant, Sign in with Apple tokens. We will confirm when the request is complete or explain any information that must be retained and why.

Adventuro accounts and direct use of the Services are intended for people aged 18 or over. Adults may book activities for children and provide limited participant information needed to fulfil and safely deliver the booking. The adult providing that information must be authorised to do so and should not provide more information than necessary.

If you believe a child has created an account or provided information without appropriate authorisation, contact team@adventuro.com so that we can investigate and take appropriate action.

If a US state privacy law applies to you and to adventuro, you may have additional rights, including rights to know, correct or delete information and to opt out of certain targeted advertising, sale or sharing.

We do not sell personal information for money. Disclosures of purchase, attribution or device data to advertising partners for cross-context behavioural advertising or measurement may be treated as "sharing" or a "sale" under some state laws. To opt out, use the available privacy controls or email team@adventuro.com with the subject "Do Not Sell or Share My Personal Information". We will not discriminate against you for exercising an applicable privacy right.

An authorised agent may submit a request where permitted by law. We may ask for evidence of authority and may verify the request directly with you.

We may update this policy when our Services, providers or legal obligations change. We will publish the revised policy with a new "Last updated" date. If a change materially affects how we use personal information, we will provide additional notice where required.