Who we are: We are eola Ltd, a booking and management platform for experience providers, and the operator of the eola marketplace, through which customers can find and book outdoor experiences. If you need it, our company number is 10810774 and our registered office is 90a High Street, Berkhamsted, Hertfordshire, UK. eola Ltd is the controller of your personal information, and is responsible for your personal information. All references in this policy to "eola", "our", "us" or "we" refer to eola Ltd. All references in this policy to "our website", refer to the website owned by eola at eola.co and all of its subdomains.
Our values and what this policy is for: We value your privacy and want to be accountable and fair to you as well as transparent with you in the way that we collect and use your personal information. We also want you to know your rights in relation to your information which you can find in section 6 .
In line with these values, this privacy policy tells you what to expect when we collect and use personal information about you as a controller of it. We have tried to make it easy for you to navigate so you can find the information that is most relevant to you and our relationship with you.
We are always looking to improve the information we provide to our customers and contacts so if you have any feedback on this privacy policy, please let us know using our contact details in section 13 .
Who this policy applies to: This policy applies to:
Visitors to our website;
Enthusiasts, meaning people who book activities through our website;
Instructors, and other contacts at activity centres that partner with us; and
People who contact us with enquiries.
Depending on our relationship, we will collect and use your information in different ways.
Please note that this policy only applies where we are collecting and using your personal information as a "controller"; that means, where we are determining what personal information we collect about you, and how and why we use it.
Where we are collecting and using your personal information on behalf of an instructor or activity center - for example, where you make a booking or purchase via the instructor's or activity center's website, or where an activity center specifically asks us to collect certain types of personal information which we wouldn't need otherwise (such as information concerning your health) - we are a "processor" of that personal information (not a controller).
What this policy contains: This privacy policy describes the following important topics relating to your information (you can click on the links to find out more):
Your rights to object: You have various rights in respect of our use of your personal information as set out in section 6 . Two of the fundamental rights to be aware of are that:
you may ask us to stop using your personal information for direct-marketing purposes. If you exercise this right, we will stop using your personal information for this purpose.
you may ask us to consider any valid objections which you have to our use of your personal information where we process your personal information on the basis of our, or another person's, legitimate interest.
You can find out more information in section 6 .
What you need to do and your confirmation to us: Please read this privacy policy carefully to understand how we handle your personal information. By engaging with us in the ways set out in this privacy policy, you confirm that you have read and understood the entirety of this privacy policy, as it applies to you.
You may provide us with your personal information voluntarily. We may also receive information about you from third parties such as our suppliers (including our payment provider), and - if you are an instructor or a contact at an activity center - from online publicly available sources (including social media) . We refer to those third parties as "third party sources" or "suppliers" throughout this policy.
You may give us personal information about yourself by using the online forms provided on our website, setting up an account with us, by contacting us by phone, email or other means, and by engaging with our social media pages.
Please go to the section or sections below that best describes our relationship with you to find out the information that we collect about you and how we use this information. We refer to this as "personal information" throughout this policy.
What personal information we collect about you
We, or third parties on our behalf, may collect and use any of the following information about you:
information provided when you correspond with us;
any updates to information provided to us;
personal information we collect about you or that we obtain from our third party sources;
the following information created and recorded automatically when you visit our website:
Technical information. This includes: the Internet Protocol (IP) address used to connect your computer to the internet address; the website address and country from which you access information; the files requested; browser type and version; browser plug-in types and versions; operating system; and platform. We use this personal information to administer our website, to measure the efficiency of our systems, to undertake an analysis on the locations from which people access our webpages and to help inform further product improvements; and
Information about your visit and your behaviour on our website (for example, the pages that you click on). This may include the website you visit before and after visiting our website (including date and time), time and length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, traffic data, location data, weblogs and other communication data and information provided when requesting further service or downloads.
How we use your personal information
We will collect, use and store the personal information listed above for the following reasons:
to allow you to book activities via our website;
to receive, and respond to, enquiries from you through our website or social media pages about what we do;
for improvement and maintenance of our website and to provide technical support for our website;
to ensure the security of our website;
to recognise you when you return to our website, to store information about your preferences, and to allow us to customise the website according to your individual interests; and
to evaluate your visit to the website and prepare reports or compile statistics to understand the type of people who use our website, how they use our website and to make our website more intuitive. Such details will be anonymised as far as reasonably possible and you will not be identifiable from the information collected.
Please see section 2.5 for more details about how we use your personal information.
What personal information we collect about you
We, or third parties on our behalf, may collect and use any of the following information about you:
your name;
your email address;
your telephone number;
information provided when you correspond with us;
information about bookings you make with us, including information used to verify your identity;
information about your account with us and how you use it; including, when you created your account, when you last updated it and when you last signed into your account;
any updates to information provided to us; and
when you use our website, the information listed above at section 2.1 .
How we use your personal information
We will collect, use and store the personal information listed above for the following reasons:
to allow you to book activities via our website, and to manage your booking;
to deal with any enquiries or issues you have about your booking;
to carry out marketing and market research; and
where we are permitted to do so, to contact you (including by email or post) about your bookings, your account with us, and the activities you can book with us.
Please see section 2.5 for more details about how we use your personal information.
Special categories of data. As a controller of your personal information, we do not collect or use any special categories of data. In our capacity as a processor of your personal information (acting on behalf of activity centres), we may handle certain special categories of personal data (such as information concerning your physical health); the activity centre determines whether or not it is necessary to collect those categories of personal information and is, therefore, the "controller" of it.
Information we need to provide services to you. We need certain types of personal information so that we can provide services to you and perform contractual and other legal obligations that we have to you. If you do not provide us with such personal information, or if you ask us to delete it, you may no longer be able to book activities with us, or otherwise use our services.
What personal information we collect about you
We, or third parties on our behalf, may collect and use any of the following information about you:
your name;
your profile photo;
your postal address;
your email address;
your telephone number;
your date of birth;
information provided when you correspond with us;
information about your business, your association with an activity centre, and your interactions with an activity centre;
information about your (or your activity centre's) account with us and how you use it; including, when you created the account, when you last updated it and when you last signed into it;
any updates to information provided to us; and
when you use our website, the information listed above at section 2.1 .
How we use your personal information
We will collect, use and store the personal information listed above for the following reasons:
to allow you to manage activities booked with you, or the activity centre you are associated with, or interact with, via our website;
to deal with any enquiries or issues you have;
to carry out marketing and market research; and
where we are permitted to do so, to contact you (including by email or post) about your account with us.
Please see section 2.5 for more details about how we use your personal information.
People who contact us with enquiries
What personal information we collect about you
We, or third parties on our behalf, may collect and use any of the following information about you:
information provided when you correspond with us; and
any updates to information provided to us.
How we use your personal information
We will collect, use and store the personal information listed above to deal with any enquiries or issues you have about our products and services, including any questions you may have about how we collect, store and use your personal information, or any requests made by you for a copy of the information we hold about you. If we do not have a contract with you, we may process your personal information for these purposes where it is in our legitimate interests for customer services purposes.
Please see section 2.5 for more details about how we use your personal information.
Whatever our relationship with you is, we may also collect, use and store your personal information for the following additional reasons:
to deal with any enquiries or issues you have about how we collect, store and use your personal information, or any requests made by you for a copy of the information we hold about you. If we do not have a contract with you, we may process your personal information for these purposes where it is in our legitimate interests for customer services purposes;
for internal corporate reporting, business administration, ensuring adequate insurance coverage for our business, ensuring the security of company facilities, research and development, and to identify and implement business efficiencies. We may process your personal information for these purposes where it is in our legitimate interests to do so;
to comply with any procedures, laws and regulations which apply to us - this may include where we reasonably consider it is in our legitimate interests or the legitimate interests of others to comply, as well as where we are legally required to do so; and
to establish, exercise or defend our legal rights - this may include where we reasonably consider it is in our legitimate interests or the legitimate interests of others, as well as where we are legally required to do so.
We consider that the legal bases for using your personal information as set out in this privacy policy are as follows:
our use of your personal information is necessary to perform our obligations under any contract with you (for example, to manage and fulfil bookings made by you, and to comply with our contract to provide services to or receive services from you); or
our use of your personal information is necessary for complying with our legal obligations; or
where neither (a) nor (b) apply, use of your personal information is necessary for our legitimate interests or the legitimate interests of others (for example, to ensure the security of our website or when we share your personal information with social media platforms (as described below)). Our legitimate interests are to:
run, grow and develop our business;
operate our website;
carry out marketing, market research and business development; and
for internal administrative purposes.
If we rely on our (or another person's) legitimate interests for using your personal information, we will undertake a balancing test to ensure that our (or the other person's) legitimate interests are not outweighed by your interests or fundamental rights and freedoms which require protection of the personal information.
We may process your personal information in some cases for marketing purposes on the basis of your consent (which you may withdraw at any time after giving it, as described below).
If we rely on your consent for us to use your personal information in a particular way, but you later change your mind, you may withdraw your consent by contacting us at help@eola.co and we will stop doing so.
To help facilitate and subsequently manage bookings, we share certain personal information between enthusiasts making the booking and the relevant instructor or activity center accepting or receiving the booking, including personal information that an activity center may specifically ask us to collect from enthusiasts (such as information concerning the enthusiast's health and their signed disclaimer).
We will also share your personal information with the following third parties or categories of third parties:
A payment service provider, who processes payments made through our website and will also share certain, limited personal information with us;
A database and website hosting provider, who may access personal information stored within our systems when providing support and maintenance services;
Service providers we use to send e-mails to enthusiasts, instructors and others who have expressed an interest in hearing from us;
Social media platforms;
Our other service providers and sub-contractors, including suppliers of technical and support services (such as suppliers who track bugs and errors on our website);
companies that assist in our marketing, advertising and promotional activities; and
analytics and search engine providers that assist us in the improvement and optimisation of our website.
We will disclose your personal information with third parties:
where it is in our legitimate interests to do so to run, grow and develop our business:
if we sell or buy any business or assets, we may disclose your personal information to the prospective seller or buyer of such business or assets;
if substantially all of our or any of our affiliates' assets are acquired by a third party, in which case personal information held by us will be one of the transferred assets;
if we are under a duty to disclose or share your personal information in order to comply with any legal obligation, any lawful request from government or law enforcement officials and as may be required to meet national security or law enforcement requirements or prevent illegal activity;
in order to enforce or apply our terms of use, our terms and conditions for customers or any other agreement or to respond to any claims, to protect our rights or the rights of a third party, to protect the safety of any person or to prevent any illegal activity; or
to protect the rights, property, or safety of eola, our staff, our customers or other persons. This may include exchanging personal information with other organisations for the purposes of fraud protection.
We may also disclose and use anonymised, aggregated reporting and statistics about users of our website or our goods and services for the purpose of internal reporting or reporting to third parties, and for our marketing and promotion purposes. None of these anonymised, aggregated reports or statistics will enable our users to be personally identified.]
Save as expressly detailed above, we will never share, sell or rent any of your personal information to any third party without notifying you and, where necessary, obtaining your consent. If you have given your consent for us to use your personal information in a particular way, but later change your mind, you should contact us and we will stop doing so.
We keep your personal information for no longer than necessary for the purposes for which the personal information is processed. The length of time for which we retain personal information depends on the purposes for which we collect and use it and/or as required to comply with applicable laws and to establish, exercise or defend our legal rights.
You have certain rights in relation to your personal information. If you would like further information in relation to these or would like to exercise any of them, please contact us via email at help@eola.co at any time. You have the following rights:
Right of access. You have a right of access to any personal information we hold about you. You can ask us for a copy of your personal information; confirmation as to whether your personal information is being used by us; details about how and why it is being used; and details of the safeguards which are in place if we transfer your information outside of the United Kingdom.
Right to update your information. You have a right to request an update to any of your personal information which is out of date or incorrect.
Right to delete your information. You have a right to ask us to delete any personal information which we are holding about you in certain specific circumstances. You can ask us for further information on these specific circumstances by contacting us using the details in section 13 .
We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort. You can ask us who the recipients are, using the contact details in section 13 .
Right to restrict use of your information: You have a right to ask us to restrict the way that we process your personal information in certain specific circumstances. You can ask us for further information on these specific circumstances by contacting us using the details in section 13 .
We will pass your request onto other recipients of your personal information unless that is impossible or involves disproportionate effort. You can ask us who the recipients are using the contact details in section 13 .
Right to stop marketing: You have a right to ask us to stop using your personal information for direct marketing purposes. If you exercise this right, we will stop using your personal information for this purpose.
Right to data portability: You have a right to ask us to provide your personal information to a third party provider of services.
This right only applies where we use your personal information on the basis of your consent or performance of a contract; and where our use of your information is carried out by automated means.
Right to object. You have a right to ask us to consider any valid objections which you have to our use of your personal information where we process your personal information on the basis of our or another person's legitimate interest.
We will consider all such requests and provide our response within a reasonable period (and in any event within one month of your request unless we tell you we are entitled to a longer period under applicable law). Please note, however, that certain personal information may be exempt from such requests in certain circumstances, for example if we need to keep using the information to comply with our own legal obligations or to establish, exercise or defend legal claims.
If an exception applies, we will tell you this when responding to your request. We may request you provide us with information necessary to confirm your identity before responding to any request you make.
Our website and services are not directed at children. We do not knowingly collect or use any personal information from children in our capacity as a controller of personal information.
In our capacity as a processor of your personal information (acting on behalf of activity centres), we may collect and use limited personal information relating to children; for example, if they form part of a booking. The relevant activity center is the controller of that personal information.
Where we are permitted to do so, we will collect and use your personal information for undertaking marketing by email, telephone and post. We will send you marketing relating to us, and the activities you can book through us.
If you are an instructor or a contact at an activity center, we may obtain your contact details from publicly available sources (such as social media) and contact you that way to discuss whether you would be interested in partnering with us.
If you wish to stop receiving marketing communications, you can contact us help@eola.co.
We include features on our website which allow you to easily link to our social media pages or share our content with others by clicking on social media buttons. Even if you do not use those features when using our website, the social networks that provide the features can identify you through some of them. The fact that your account with a social network is activated on your device when you use our website, can allow that platform to monitor your navigation of our website. Our use of those features means that we will share certain personal information with those social media providers, and they will share certain personal information with us.
We also share your personal information with social media or other similar platforms, so that you and other people can see relevant content on that platform. For example, we may use Facebook Custom Audiences and share your e-mail address in a protected format with Facebook so that we can: include you in a custom audience that we will serve relevant advertising content to on Facebook, or create an audience of other Facebook users based on the information Facebook holds about you.
Those platforms' use of your personal information is governed by their own privacy policies, which you should read carefully. We cannot be responsible for any personal information about you that is collected and stored by those third parties.
Your personal information may be used, stored and/or accessed by suppliers operating outside the UK; specifically, in the United States of America. Further details on to whom your personal information may be disclosed are set out in section 4.
If we provide any personal information about you to any such non-UK suppliers, we will take appropriate measures to ensure that the recipient protects your personal information adequately in accordance with this privacy policy. These measures may include the following:
ensuring that there is an adequacy decision by the UK Government in the case of transfers out of the UK, which means that the recipient country is deemed to provide adequate protection for such personal information; or
where we have in place standard model contractual arrangements with the recipient which have been approved by the UK Government for transfers out of the UK. These model contractual clauses include certain safeguards to protect personal information.
Further details on the steps we take to protect your personal information, in these cases is available from us on request by contacting us by email at help@eola.co at any time.
The main risk of our processing of your personal information is if it is lost, stolen or misused. This could lead to your personal information being in the hands of someone else who may use it fraudulently or make public, information that you would prefer to keep private.
For this reason, eola is committed to protecting your personal information from loss, theft and misuse. We take all reasonable precautions to safeguard the confidentiality of your personal information, including through use of appropriate organisational and technical measures; for example, encryption, through the use of passwords where appropriate, and penetration testing of our systems.
In the course of provision of your personal information to us, your personal information may be transferred over the internet. Although we make every effort to protect the personal information which you provide to us, the transmission of information over the internet is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of your personal information transmitted to our website and that any such transmission is at your own risk. Once we have received your personal information, we will use strict procedures and security features to prevent unauthorised access to it.
Where we have given you (or where you have chosen) a password which enables you to access your online account, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
On our website, we, activity centers or enthusiasts, may refer out (via hyperlink) to other websites that are not operated by us. These hyperlinks are provided for your reference and convenience only and do not imply any endorsement of the activities of such third-party websites or any association with their operators. This privacy policy only applies to the personal information that we collect or which we receive from third party sources, and we cannot be responsible for personal information about you that is collected and stored by third parties. Third party websites have their own terms and conditions and privacy policies, and you should read these carefully before you submit any personal information to these websites. We do not endorse or otherwise accept any responsibility or liability for the content of such third party websites or third party terms and conditions or policies.
We may update our privacy policy from time to time. Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by post or email. Please check back frequently to see any updates or changes to our privacy policy.
If you have any queries or complaints about our collection, use or storage of your personal information, or if you wish to exercise any of your rights in relation to your personal information, please contact our Data Protection Officer on help@eola.co. We will investigate and attempt to resolve any such complaint or dispute regarding the use or disclosure of your personal information.
You may also make a complaint to the Information Commissioner's Office, or the data protection regulator in the country where you usually live or work, or where an alleged infringement of applicable data protection laws has taken place. Alternatively, you may seek a remedy through the courts if you believe your rights have been breached.
The practices described in this privacy policy statement are current as of March 2022.
