Privacy Policy
What we collect when you use this site, why we collect it, who else sees it, and how to make us delete it.
Effective · Southwest Adventure Tours LLC
1. Who we are
This website is operated by Southwest Adventure Tours LLC ("Southwest Adventure Tours", "we", "us"), a Utah limited liability company with its registered address at 382 E 650 S Circle, Cedar City, UT 84720. We are the controller of the personal information described in this policy.
You can reach us about anything in this policy by email at info@southwestadventuretours.com, by phone on 800-970-5864, or by post at the address above. Please put "Privacy" in the subject line so it reaches the right person.
This policy covers this website. It does not cover our reservation system or any other website we link to (see §6).
2. The short version
- The only information this site asks you for is what you type into the inquiry form.
- This site uses Google Analytics to count visits and see which pages get read. It sets cookies to do that, it does not identify you, and you can opt out (see §4).
- We never take payment card details on this site. Bookings and payments happen in a separate reservation system.
- We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
- You can ask us to delete what we hold about you at any time, and we will.
3. What we collect and why
Information you give us. The inquiry form on this site asks for the following. Only name and email are required; everything else is optional and the form works without it.
| What | Why we need it |
|---|---|
| Name | So a guide can address a reply to you |
| Email address | To answer your inquiry. This is the only field we reply to |
| Phone number (optional) | To call you back if you would rather talk than type |
| Tour, party size, preferred date (optional) | To check availability and quote accurately |
| Your message (optional) | To answer the question you actually asked |
Information collected automatically with your inquiry. When the form is submitted we store the browser user-agent string and the referring page alongside it. This is used to filter automated spam submissions and to understand which page prompted the inquiry. It is not used to build a profile of you.
Server logs. Our hosting provider records standard web-server information (IP address, timestamp, requested URL, response status) for every request to every website it hosts. This is used for security, abuse prevention and diagnosing faults. We do not combine it with the inquiry data above.
If you phone or email us. We keep the correspondence, and any details you give us in it, so that we can handle your booking and answer follow-up questions.
5. Our legal bases for using it
For visitors in the United Kingdom and the European Economic Area, UK and EU data protection law requires us to name a legal basis for each use:
- Answering your inquiry and arranging a tour. Necessary to take steps at your request before entering into a contract, and to perform that contract.
- Spam filtering, security and server logs. Our legitimate interest in keeping the site available and free of abuse.
- Keeping records of bookings and correspondence. Compliance with our legal and tax obligations, and our legitimate interest in defending legal claims.
- Counting visits and page views. Our legitimate interest in understanding which pages are useful so we can improve them. Where the law in your country requires your consent before cookies are set for this, you can refuse or remove them using the options in §4.
7. Where your information is held
We are a United States business and our systems are hosted in the United States. If you contact us from outside the US, and a good number of our guests do, your information will be transferred to and stored in the US, where privacy law differs from your own.
For transfers from the UK or the EEA we rely on the UK International Data Transfer Addendum and the European Commission's Standard Contractual Clauses, as incorporated into our agreements with the providers listed above. By sending us an inquiry you are asking us to correspond with you, which necessarily involves that transfer.
8. How long we keep it
- Inquiries that do not become bookings. Kept for 24 months, then deleted, so that we can pick up a conversation if you come back to us the following season.
- Inquiries and correspondence relating to a tour you took. Kept for 7 years from the date of the tour, which is longer than the Utah limitation period for a personal-injury claim, because these records are what we would rely on if a claim were brought.
- Server logs. Kept for the period set by our hosting provider, typically 30 days.
If you ask us to delete your information sooner, we will, except where we are required to keep a record for tax purposes or need it to defend a claim that has already been made.
9. Your rights
Wherever you live, you can ask us to do any of the following, and we will not treat you any differently for asking:
- Know what personal information we hold about you and get a copy of it.
- Correct anything that is wrong.
- Delete what we hold, subject to §8.
- Opt out of any sale or sharing of your information, although as stated, there is none.
- Withdraw consent where we relied on it, at any time.
- Complain to a regulator if you think we have got this wrong.
California residents have these rights under the CCPA as amended by the CPRA, including the right to know the categories of information collected (identifiers and internet activity, as set out in §3), the right to limit use of sensitive personal information (we collect none), and the right not to be discriminated against for exercising them.
Utah, Colorado, Connecticut, Virginia and other state residents have equivalent rights under their state privacy statutes, including the right to appeal a refusal. If we decline a request we will tell you why, and tell you how to appeal it.
UK and EEA residents additionally have the right to data portability, the right to restrict or object to processing, and the right to lodge a complaint with your national supervisory authority, which in the UK is the Information Commissioner's Office.
To exercise any of these, email info@southwestadventuretours.com or call 800-970-5864. We will respond within 45 days (or one month in the UK and EEA), and will tell you if we need longer. We may need to ask you a question or two to confirm you are who you say you are, particularly before deleting anything. You may use an authorised agent; we will ask for proof of their authority.
10. How we protect it
This site is served over HTTPS everywhere. The inquiry database sits behind row-level security and is reachable only with a server-side key that is never sent to your browser. Access is limited to the people at Southwest Adventure Tours who handle bookings.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information we will notify you and the relevant regulator where the law requires it.
11. Children
Our tours welcome families, but this website is intended for adults making travel arrangements and is not directed at children. We do not knowingly collect personal information from anyone under 13.
If a child has sent us information through this site, contact us at info@southwestadventuretours.com and we will delete it. When a parent or guardian books for a family, we ask for the number of guests and their ages only where a tour has an age-based fare, never more than that.
12. Changes to this policy
We will update this page when what we do changes, and the effective date at the top will always tell you when it was last revised. If a change materially affects how we use information you have already given us, we will contact you about it rather than relying on you to re-read this page.