Privacy Policy

Norwich Free Walking Tours is operated by Thomas Thornhill, a sole trader based in Norwich, Norfolk, UK. Thomas Thornhill is the data controller for personal data collected through this website.

We operate the website at norwichfreewalkingtours.co.uk. For any questions about this policy or to exercise your data rights, contact us via the contact page or at hello@norwichfreewalkingtours.co.uk.

Contact form: When you submit our contact form we collect your name, email address, and message. This is used only to respond to your enquiry and is not used for marketing.

Booking data: When you book a tour through our booking widget, we collect your full name, email address, and phone number (for booking confirmation and reminders), and the number of adults and children in your group (for capacity management). We also record your group type (e.g. solo, couple, family) for operational purposes, and any UTM parameters present in the URL at the time of booking (e.g. source, medium, campaign) for marketing attribution.

Payment data: We do not collect, process, or store any payment card information. The tour is free to book. Tips at the end of the tour are given directly to the guide by card reader or cash.

Petition signatures: When you sign the Roy's Plaza petition at /roys-plaza we collect your name, email address, and which of the escalating demands you ticked. The petition is a parody and is not submitted to any authority, so your details are never passed to Norwich City Council, Roys, or anyone else.

Best in Norwich votes and nominations: When you nominate or vote at /best-in-norwich we collect your email address, the categories you answered, and the names you suggested. The email address is used to make sure one person votes once per category and to come back to you if a suggestion needs checking. It is never published beside your vote, and it is never shared with the businesses on the ballot.

Analytics: With your consent, we use Google Analytics 4 to understand how visitors use the site. This collects anonymised data such as pages visited, time on site, and device type. IP addresses are anonymised. No personally identifiable information is collected through analytics.

Contact enquiries are used solely to respond to your message. We do not add you to any mailing list without your explicit consent.

Booking data is used to manage your reservation, send confirmation and reminder emails, and manage tour capacity. Email addresses may be used to send you information about future tours if you have not unsubscribed.

Petition signatures are used to count how many people have signed and to display that running total on the page. If you ticked the optional box when signing, we will also email you updates on how the petition is going, and occasionally about our walking tours. If you did not tick it, we will not email you at all. You can unsubscribe from petition updates at any time.

Best in Norwich votes and nominations are used to build the ballot, count the result, and publish the winners. Totals are published, individual votes are not. If you ticked the optional box, we will also email you the results and occasionally about our walking tours, and you can unsubscribe at any time. If you did not tick it, we will not email you at all.

Analytics data is used to improve the website experience. It is never sold or shared with third parties for advertising purposes.

Contact form messages are delivered to our inbox via Resend and are retained in our email account for as long as necessary to handle your enquiry.

Booking data is stored in Supabase (hosted on AWS in the EU region). Personal information (name, email, phone) is automatically anonymised after 2 years. Email preference records (e.g. unsubscribe records) are deleted after 3 years of inactivity.

Petition signatures are stored in Supabase (AWS EU region) and kept while the petition is running. They are deleted within 12 months of the petition closing, or sooner on request.

Best in Norwich votes and nominations are stored in Supabase (AWS EU region) and kept while that year's awards are running. They are deleted within 12 months of the winners being announced, or sooner on request.

Google Analytics data is retained for 14 months in accordance with our GA4 settings.

Under UK GDPR you have the right to access, correct, or request deletion of any personal data we hold about you. To exercise these rights, contact us or email hello@norwichfreewalkingtours.co.uk.

You can opt out of analytics cookies at any time via the cookie banner or by installing the Google Analytics opt-out browser add-on.

You can unsubscribe from booking reminder emails at any time by clicking the unsubscribe link in any email we send.

We use Google Analytics, which places cookies to distinguish users and analyse site usage. No other cookies are set by this website.

A consent banner appears on your first visit. Analytics cookies are only placed on your device if you choose to accept. You can change your preference at any time by clearing your browser's local storage for this site, which will cause the banner to reappear.

We share data with the following service providers only as necessary to operate:

• Resend: receives your name and email address to deliver booking confirmations, reminders, and contact form replies.
• Supabase: hosts our booking database (AWS EU region). Stores booking fields as described above.
• Vercel: hosts this website. Receives your IP address and request metadata as part of normal web hosting. This is not stored beyond standard server logs.
• Google Analytics: receives anonymised usage data if you accept analytics cookies.

No personal data is sold or shared for marketing purposes.

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the site after changes constitutes acceptance of the updated policy.