Privacy Policy

Account details. Your name and email address. We do not use passwords — signing in sends a one-time code to your email, so there is no password for us to store or for anyone to steal.

Traveler details. For each person on a booking: name, date of birth, shirt size, and their relationship to you.

Safety information. Emergency contacts, and any medical, dietary or accessibility needs you tell us about. We ask for this so we can look after people on the road.

Payment records. Amounts, dates, balances and payment status. We never see or store full card numbers. Card details go directly to our payment processor.

Contact history. Emails and text messages we send you about your trip, and whether they were delivered.

• To register you, take payment and manage your booking.
• To keep travelers safe — emergency contacts and medical needs are shared only with the staff accompanying that trip.
• To send receipts, instalment reminders and itinerary updates.
• To meet our accounting and legal obligations.

We do not sell personal information, and we do not share it with advertisers.

Medical, dietary and accessibility details are sensitive, and we treat them that way. They are visible only to staff who need them to run your trip and to the group leader responsible for your party. They are never used for marketing.

Children do not hold accounts with us. A parent, guardian or group leader registers them, and only that adult and our staff can see a child's details. We do not market to children.

We use a small number of service providers to run the platform. Each receives only what it needs:

• Our hosting and database provider stores your registration securely.
• Our payment processor handles card details and charges. It receives your name, email and the amount — we receive only a record that a payment succeeded or failed.
• Our email and text providers deliver trip messages.
• Trip suppliers — hotels, transport, site partners — receive only the traveler names and any access or dietary needs relevant to their part of the journey.

Booking and safety information is kept while your trip is active and then for as long as we must for accounting and legal reasons — normally seven years for financial records. Medical and dietary notes are deleted sooner, once the trip has finished and any related matter is closed.

• See or correct your information from your dashboard, or by emailing us.
• Ask us to delete your account and records, except anything we must keep by law.
• Ask for a copy of your information.
• Stop trip texts by replying STOP; stop marketing email with the unsubscribe link. Messages about a booking you have paid for will still reach you.

Email info@crjourneys.org and we will respond within 30 days.

Data is encrypted in transit and at rest. Access is restricted to staff who need it, and privileged actions are logged. Passwordless sign-in removes an entire category of risk, though no system can be guaranteed completely secure.

We use only what the site needs to work — chiefly a cookie that keeps you signed in. We do not use advertising or third-party tracking cookies. To see which pages are useful and how fast they load, we count visits with our hosting provider's analytics, which sets no cookies and records no personal details.

If we change this policy we will update the date above, and email you about anything significant.

Questions or concerns: info@crjourneys.org. See also our Terms & Conditions.