GDPR Compliance

Last Updated: 26 May 2026

Our Commitment to Data Protection

Dusk Adventures is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page provides information about how we comply with data protection law.

Data Controller

Dusk Adventures is the data controller responsible for your personal data. Our contact details are:

Dusk Adventures
47 Wellington Street
Leeds LS1 4HN
United Kingdom
Email: [email protected]

Your Rights Under GDPR

Under UK GDPR, you have comprehensive rights regarding your personal data:

1. Right to Be Informed

You have the right to clear, transparent information about how we use your personal data. This is provided through our Privacy Policy and this GDPR information page.

2. Right of Access

You can request a copy of the personal data we hold about you. This is known as a Subject Access Request (SAR). We will respond within one month of receiving your request.

3. Right to Rectification

If personal data we hold about you is inaccurate or incomplete, you can request that we correct or complete it.

4. Right to Erasure

Also known as the "right to be forgotten", you can request deletion of your personal data in certain circumstances, including:

  • The data is no longer necessary for the purpose it was collected
  • You withdraw consent (where processing was based on consent)
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • The data must be erased to comply with a legal obligation

Note: This right is not absolute and may not apply where we have a legal obligation to retain data (e.g., safeguarding records, financial records).

5. Right to Restrict Processing

You can request that we restrict how we use your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

7. Right to Object

You can object to processing of your personal data where:

  • Processing is based on legitimate interests or public interest
  • Processing is for direct marketing purposes
  • Processing is for research or statistical purposes

8. Rights Related to Automated Decision Making

You have rights regarding automated decision-making and profiling. We do not currently use automated decision-making or profiling in our services.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: [email protected]

We will respond to your request within one month, though this may be extended by two further months where requests are complex or numerous. We will inform you of any such extension.

We may need to verify your identity before processing your request. We will not charge a fee for processing requests unless they are manifestly unfounded, excessive, or repetitive.

Lawful Basis for Processing

We only process personal data where we have a lawful basis to do so. The lawful bases we rely on are:

Consent

We process certain data based on your consent, such as when you opt in to receive marketing communications. You can withdraw consent at any time by contacting us or using unsubscribe links in communications.

Contract

We process data necessary to fulfil our contractual obligations when you register for our programmes or services.

Legal Obligation

We process data where necessary to comply with legal obligations, such as safeguarding requirements and financial record-keeping.

Legitimate Interests

We process data where necessary for our legitimate interests or those of a third party, provided your rights and interests do not override those interests. For example:

  • Improving our services and website
  • Preventing fraud and ensuring security
  • Internal administration and business development

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Pseudonymisation and anonymisation where appropriate
  • Regular security testing and monitoring
  • Access controls and authentication procedures
  • Staff training on data protection and security
  • Incident response procedures

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of the breach where required.

International Transfers

We primarily store and process data within the United Kingdom. If we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy decisions by the UK government
  • Standard contractual clauses
  • Binding corporate rules

Data Protection Officer

For questions about data protection or to exercise your rights, contact our Data Protection Officer:

Email: [email protected]

Complaints

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire SK9 5AF
Website: dusk-adventures.com
Helpline: 0303 123 1113

Children's Data

We take special care when processing data relating to children. Where we collect data directly from children under 13, we obtain parental consent first. For children aged 13-18, we assess competence to provide consent on a case-by-case basis.

Parents and guardians have the right to:

  • Access their child's personal data
  • Request rectification or erasure
  • Withdraw consent on behalf of their child
  • Object to processing

Updates to This Information

We may update this GDPR information from time to time. Significant changes will be communicated through our website and, where appropriate, directly to affected individuals.

Further Information

For more detailed information about how we handle personal data, please refer to our Privacy Policy.