Privacy Policy

Forest Adventure Ltd & Ravens Nest Fly Fishery
Last updated: 2026 | ICO Registered

1. Introduction and Our Commitment to Privacy

This Privacy Policy outlines how Forest Adventure Ltd and Ravens Nest Fly Fishery (referred to as “we,” “us,” or “our”) collect, use, store, and protect your personal data. We are committed to safeguarding your privacy and ensuring full compliance with the General Data Protection Regulation (GDPR) and all other applicable data protection laws in the United Kingdom.

Our ICO membership underscores our dedication to upholding the highest standards of data protection. We take your privacy seriously and handle your personal data with care, transparency, and respect at every step.

This policy applies to all users of our websites, customers who book activities or fishing sessions, and anyone who contacts us directly. By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are and What We Do

We operate two distinct outdoor leisure businesses, each providing memorable experiences in nature. Both businesses are committed to responsible data handling as part of delivering excellent customer service.

1. Forest Adventure Ltd — provides outdoor adventurous activities including forest-based experiences, high ropes, and guided outdoor pursuits. We collect personal data to manage bookings, ensure participant safety, and deliver outstanding adventure experiences. (forestadventure.co.uk)
2. Ravens Nest Fly Fishery — offers premier fly fishing experiences on beautiful natural waters. We collect personal data to manage fishing session bookings, communicate with guests, and continually improve the angling experience we provide. (ravensnestflyfishery.com)

3. The Personal Data We Collect

We collect only the personal data necessary to operate our services safely and effectively. This falls into two main categories:

Information you provide directly

1. Contact details: name, address, email, and phone number for bookings and communications
2. Emergency contacts: required for adventurous activity participants
3. Payment information: handled securely via trusted third-party processors
4. Preferences: activity choices, dietary requirements, and personal interests

Information collected automatically

1. Website usage data: pages visited, time on site, and browser type collected via cookies
2. Device information: IP address and operating system for security and analytics

4. How We Use Your Personal Data

We use the personal data we collect for specific, legitimate purposes only. We will never use your data in a way that is incompatible with the purpose for which it was originally collected.

1. Service & booking management: processing bookings and payments for both Forest Adventure Ltd activities and Ravens Nest Fly Fishery sessions; communicating important safety, event, and booking information to participants.
2. Service improvement: analysing website traffic and user behaviour to enhance our websites and service offerings; personalising your experience based on stated preferences and past interactions.
3. Marketing & communications: sending newsletters, promotional offers, and updates about new activities — only with your explicit consent. You may opt out of marketing communications at any time, easily and without penalty.
4. Legal compliance: fulfilling our legal obligations under UK law and responding to lawful requests from regulatory authorities, including the ICO, where required.

5. Legal Basis for Processing Your Data

Under the UK GDPR, we are required to have a valid legal basis for processing your personal data. Depending on the nature of the processing activity, we rely on one or more of the following lawful bases:

1. Consent: where you have explicitly given us permission to process your data — for example, signing up for our marketing newsletter or agreeing to optional cookies.
2. Contractual necessity: when processing is essential to fulfil a contract with you — such as processing a booking for an adventure activity or fishing session.
3. Legitimate interests: for purposes such as improving our services, fraud prevention, and network security — provided these interests do not override your fundamental rights and freedoms.
4. Legal obligation: where we are required by law to process and retain your data, such as for tax records or responding to regulatory investigations.

6. Data Sharing and Third-Party Processors

We do not sell your personal data to any third party. However, to operate our businesses effectively, we may share your data with carefully selected, trusted third-party service providers who are contractually obligated to protect your information.

1. Payment processors: secure and encrypted transaction handling for activity and session bookings. Your full payment card details are never stored by us directly.
2. Booking & CRM systems: software platforms that assist us in managing customer reservations, schedules, and communications efficiently and securely.
3. Email marketing platforms: used only for customers who have explicitly opted in to receive marketing communications from us. You may unsubscribe at any time.

7. Your Rights Under GDPR

Under the UK General Data Protection Regulation, you have a comprehensive set of rights regarding your personal data. We are committed to facilitating the exercise of these rights promptly and without charge.

1. Right to access: request a copy of the personal data we hold about you at any time.
2. Right to rectification: request correction of any inaccurate or incomplete personal data we hold.
3. Right to erasure: request deletion of your personal data under certain circumstances (the “right to be forgotten”).
4. Right to restrict processing: request that we limit how we process your personal data in certain situations.
5. Right to data portability: request your personal data in a structured, commonly used, machine-readable format.
6. Right to object: object to the processing of your data for direct marketing or on grounds of legitimate interests.
7. Right to withdraw consent: withdraw consent for data processing at any time where consent is the legal basis for processing.

8. Data Security and Retention

How we protect your data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. Our security measures are regularly reviewed and updated to reflect best practice and evolving threats.

1. Encrypted data transmission (SSL/TLS) across our websites
2. Restricted internal access to personal data on a need-to-know basis
3. Regular staff training on data protection responsibilities
4. Secure third-party processors vetted for compliance

How long we keep your data

Your data will be retained only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law.

1. Booking records: retained for up to 7 years for legal and financial obligations
2. Marketing data: retained until you withdraw consent or unsubscribe
3. Website usage data: typically retained for 12–24 months

9. Contact Us & Data Protection

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please do not hesitate to get in touch with us using the contact details below.

Forest Adventure Ltd & Ravens Nest Fly Fishery
Address: [Insert your company address here]
Email: [Insert your contact email address here]
Phone: [Insert your contact phone number here]
Data Protection Officer: [Insert DPO name and contact details, or state if not applicable]

Lodge a complaint

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your personal data has not been handled appropriately by us. The ICO is the UK’s independent authority set up to uphold information rights. You can contact them at ico.org.uk.

10. Closing Note

Your privacy matters to us. We are committed to handling your personal data with care, transparency, and respect — so you can focus on enjoying your adventure or your time on the water.

This Privacy Policy was last reviewed in 2026. We reserve the right to update this policy periodically. Any significant changes will be communicated via our websites.