This privacy notice explains how Zestful Journeys handles personal data when you use rokezzestash.surf. It follows the data lifecycle from collection through use, disclosure, retention, and deletion, and is intended to describe our general practices for website visitors and booking enquiries.
Depending on how you use the website, we may process your name, email address, phone number if you provide it, inquiry message, tour date and group details, and any accessibility or dietary information you choose to share. We also process limited technical data such as server request metadata and browser or device information to keep the site functioning and secure.
We receive data when you submit a contact form, send an email, call us, or provide details during a booking request. Technical data is generated automatically when you visit the website, and cookie-related information is collected through the site’s essential and preference functions.
We use essential cookies to support basic site functions and preference cookies to remember privacy choices. We do not confirm the use of analytics or marketing cookies on this website.
The website uses cookies for essential site operation and to remember privacy preferences. You can usually control cookies through your browser settings, including blocking or deleting them, but some essential functions may not work as intended if cookies are disabled.
We use personal data to answer enquiries, manage booking requests, confirm route and timing details, arrange the guided experience, handle payment-related administration, maintain website security, and support technical delivery. Where you provide optional accessibility or dietary information, we use it only to assess whether a route or arrangement can be reasonably confirmed for your specific request.
We may share limited data with service providers that help us operate the website, deliver technical functions, or process communications. These recipients may only use the data for the tasks we assign and are expected to handle it under appropriate confidentiality and security obligations.
We may disclose personal data when required to comply with law, respond to lawful requests, protect our rights, or address security or fraud concerns. Any such disclosure is limited to what is reasonably necessary for the relevant purpose.
Privacy rights lifecycle
You may ask whether we hold personal data about you, request access to it, ask for correction of inaccurate details, and request deletion where the data is no longer needed or where the law allows. In some cases, you may also object to certain processing or ask us to limit how data is used, subject to applicable legal requirements.
To protect privacy, we may need to confirm your identity and understand the scope of your request before responding. Once verified, we will review the request, explain any limits that apply, and carry out the requested action where required and feasible.
We retain personal data for as long as needed to respond to enquiries, manage bookings, maintain records connected with the service relationship, meet security needs, and satisfy legal obligations. When data is no longer required for those purposes, it is deleted or anonymised according to our internal lifecycle review.
If this policy is updated, the revised version will apply from the date it is published unless a different effective date is stated. Where a change materially affects how we handle personal data, we will use a reasonable method to make the update visible on the website or through direct communication where appropriate.
Use the contact channels listed here for questions about this notice or the handling of your data.
