Privacy Policy

1. Introduction Heritage Tour Services Ltd ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect and use your personal data when you visit https://thewindsorinsider.com (the "Site") and book our tours.

2. Data Controller Heritage Tour Services Ltd is the data controller.

  • Company No: 16967963 (England & Wales)
  • Contact: paul@thewindsorinsider.com


3. Data We Collect & How

  • Directly: Through our website contact form (Name, Email, Message).
  • Via Bokun: For primary tour bookings (Contact details and transaction info).
  • Via SumUp: For add-ons or extra hours paid via payment link or card reader.


4. Third-Party Processors To provide our services, we share data with the following essential processors:

  • Bokun (TripAdvisor): Our primary booking platform.
  • SumUp: Our payment provider for direct/ad-hoc transactions. SumUp processes your payment data as an independent controller to ensure secure, PCI-compliant transactions. We do not store your full card details.


5. Cookies and Tracking Technologies

Our website uses cookies to improve your experience, ensure our booking system works correctly, and help us understand how visitors use our site.

  • Essential Cookies: These are necessary for the website to function, such as allowing you to add a tour to your basket and process a secure payment via Stripe. These cannot be switched off.
  • Analytical & Performance Cookies: We use these to count visits and traffic sources so we can measure and improve the performance of our site.
  • Managing Your Preferences: We use a Consent Management Platform (Cookiebot) to give you full control over your data. When you first visit our site, a banner will appear allowing you to Accept All, Reject All, or Manage Preferences. You can change your mind at any time by clicking the cookie icon on the bottom corner of our website.

For more details on the specific cookies we use and how long they stay on your device, please refer to the automated Cookie Declaration listed below.


6. Your Rights Under UK GDPR, you have the right to access, correct, or delete your data. To exercise these rights, please contact us at paul@thewindsorinsider.com.