Privacy policy
Last updated: September 2026
This Privacy Policy explains how Emerald Cave Tickets ("we", "us", "our") collects and processes personal data through your use of emeraldcavetickets.net (the "Site"). We are the data controller responsible for your personal data. By using the Site you confirm that you are over 18 years of age. We collect as little personal data as possible.
1. Introduction
Personal data means any information capable of identifying an individual; it does not include anonymised data. It is important that the information we hold about you is accurate and up to date, so please let us know if it changes by emailing info at emeraldcavetickets.net.
2. What data we collect and why
The Site has no user accounts and no login. We may process the following limited categories of personal data:
- Communication data. If you contact us by email (name, email address and the content of your message). We use this to respond to you and keep a record of the correspondence, on the basis of our legitimate interest in handling enquiries.
- Technical and usage data. Such as your IP address, browser type, the pages you view and the time of your visit. Your IP address is processed automatically by our hosting provider (Cloudflare); our privacy-first analytics records only anonymised, aggregated usage statistics. We use this to operate, secure and improve the Site, on the basis of our legitimate interests.
We do not collect payment or card details (these are handled entirely by GetYourGuide at checkout), and we do not collect sensitive data such as information about your health, race, religion or political opinions.
3. How we collect your data
We collect data directly from you when you email us, and automatically as you use the Site through server logs and similar technologies.
4. Cookies and analytics
Our hosting and content-delivery provider (Cloudflare) processes technical data such as IP addresses to deliver and protect the Site. We use Simple Analytics, a privacy-first analytics service, to understand how the Site is used: it sets no cookies and collects no personal data or cross-site identifiers, recording only aggregated, anonymised statistics such as page views, referrers and country. Because it uses no cookies and stores no personal data, no analytics consent banner is required. The Site itself sets no cookies. When you click a tour link and book through GetYourGuide, GetYourGuide may set cookies to attribute the referral to us, governed by GetYourGuide's own privacy policy. You can set your browser to refuse some or all cookies; if you do, parts of the Site may not function properly. We do not sell your personal data.
5. Fonts, third-party content and links
The Site loads its fonts from Google Fonts, so your browser contacts Google's servers to fetch them, which transmits your IP address to Google. Tour photos are served from our own server. The Site links to GetYourGuide, whose privacy practices we do not control; we encourage you to read the privacy notice of every site you visit.
6. Disclosures of your data
We may share your personal data with service providers who host and administer the Site, with GetYourGuide as our booking partner, and with government bodies or professional advisers where required by law. We require all third parties to respect the security of your data and to process it only for specified purposes and in accordance with our instructions.
7. International transfers
Some of our providers may process data outside the European Economic Area. Where that happens, we rely on safeguards recognised under the GDPR, such as an adequacy decision of the European Commission or standard contractual clauses, to ensure a comparable level of protection for your data.
8. Data security and retention
We put in place measures to prevent your personal data from being lost, misused, altered or accessed without authorisation, and we limit access to those who need it. We retain personal data only for as long as necessary for the purposes we collected it, including any legal or reporting requirements, after which it is deleted or anonymised.
9. Your rights under the GDPR
Where the GDPR applies, you have the right to access, correct, erase, restrict or object to our processing of your personal data, to request its transfer, and to withdraw any consent you have given. To exercise any of these rights, email info at emeraldcavetickets.net. You also have the right to lodge a complaint with your local data-protection supervisory authority.
10. Changes
We may update this policy from time to time; the date shown above reflects the latest version.
