Privacy Policy
Last updated: September 2026
Introduction
Star-ocelot ("we", "us", or "our") is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect information when you use our website or engage with our services.
By using our website or services, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
Information You Provide Directly
When you make enquiries, book our services, or communicate with us, we may collect:
- Name and contact details (email address, postal address)
- Service preferences and booking details
- Payment information (processed securely through third-party payment providers)
- Any additional information you choose to provide in correspondence
Information Collected Automatically
When you visit our website, we may automatically collect:
- IP address and approximate location
- Browser type and version
- Device information
- Pages visited and time spent on the site
- Referring website or source
How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your enquiries and communicate with you
- To process and manage your bookings
- To provide our heritage experience services
- To improve our website and services
- To send you relevant information about our programmes (with your consent)
- To comply with legal obligations
Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contract: Processing necessary to fulfil bookings and provide services you have requested
- Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services and website functionality
- Consent: Where you have given explicit consent, such as for marketing communications
- Legal Obligation: Where we are required by law to process certain data
Data Sharing
We do not sell your personal information to third parties. We may share your data with:
- Service providers who assist with our operations (payment processing, website hosting)
- Heritage sites and venues in connection with your booked experiences
- Professional advisors where necessary
- Authorities when required by law
All third-party service providers are contractually obligated to handle your data securely and in accordance with applicable data protection laws.
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Enquiry data: 2 years from last contact
- Booking records: 7 years for tax and legal compliance
- Marketing preferences: Until you withdraw consent
- Website analytics: 26 months
Your Rights
Under applicable data protection laws, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal requirements)
- Object to or restrict certain processing
- Data portability (receiving your data in a portable format)
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details provided below.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
International Transfers
Your data is primarily stored and processed within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place.
Changes to This Policy
We may update this Privacy Policy from time to time. Significant changes will be communicated via our website. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: [email protected]
Address: 47 Heritage Lane, London, WC1A 2HP, United Kingdom
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.