Privacy Policy

Norwich Free Walking Tour is operated by Thomas Thornhill, a sole trader based in Norwich, Norfolk, UK. Thomas Thornhill is the data controller for personal data collected through this website.

We operate the website at norwichfreewalkingtours.co.uk. For any questions about this policy or to exercise your data rights, contact us via the contact page or at hello@norwichfreewalkingtours.co.uk.

Contact form: When you submit our contact form we collect your name, email address, and message. This is used only to respond to your enquiry and is not used for marketing.

Booking data: When you book a tour through our booking widget, we collect your full name, email address, and phone number (for booking confirmation and reminders), and the number of adults and children in your group (for capacity management). We also record your group type (e.g. solo, couple, family) for operational purposes, and any UTM parameters present in the URL at the time of booking (e.g. source, medium, campaign) for marketing attribution.

Payment data: We do not collect, process, or store any payment card information. The tour is free to book. Tips at the end of the tour are given directly to the guide by card reader or cash.

Analytics: With your consent, we use Google Analytics 4 to understand how visitors use the site. This collects anonymised data such as pages visited, time on site, and device type. IP addresses are anonymised. No personally identifiable information is collected through analytics.

Contact enquiries are used solely to respond to your message. We do not add you to any mailing list without your explicit consent.

Booking data is used to manage your reservation, send confirmation and reminder emails, and manage tour capacity. Email addresses may be used to send you information about future tours if you have not unsubscribed.

Analytics data is used to improve the website experience. It is never sold or shared with third parties for advertising purposes.

Contact form messages are delivered to our inbox via Resend and are retained in our email account for as long as necessary to handle your enquiry.

Booking data is stored in Supabase (hosted on AWS in the EU region). Personal information (name, email, phone) is automatically anonymised after 2 years. Email preference records (e.g. unsubscribe records) are deleted after 3 years of inactivity.

Google Analytics data is retained for 14 months in accordance with our GA4 settings.

Under UK GDPR you have the right to access, correct, or request deletion of any personal data we hold about you. To exercise these rights, contact us or email hello@norwichfreewalkingtours.co.uk.

You can opt out of analytics cookies at any time via the cookie banner or by installing the Google Analytics opt-out browser add-on.

You can unsubscribe from booking reminder emails at any time by clicking the unsubscribe link in any email we send.

We use Google Analytics, which places cookies to distinguish users and analyse site usage. No other cookies are set by this website.

A consent banner appears on your first visit. Analytics cookies are only placed on your device if you choose to accept. You can change your preference at any time by clearing your browser's local storage for this site, which will cause the banner to reappear.

We share data with the following service providers only as necessary to operate:

• Resend — receives your name and email address to deliver booking confirmations, reminders, and contact form replies.
• Supabase — hosts our booking database (AWS EU region). Stores booking fields as described above.
• Vercel — hosts this website. Receives your IP address and request metadata as part of normal web hosting. This is not stored beyond standard server logs.
• Google Analytics — receives anonymised usage data if you accept analytics cookies.

No personal data is sold or shared for marketing purposes.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance of the updated policy.