Last updated: September 2026
This Privacy Policy explains how Whale Watching (“we”, “us”, “our”) collects and processes personal data through your use of whale-watching.net (the “Site”). We are the data controller responsible for your personal data. By using the Site you confirm that you are over 18 years of age. We collect as little personal data as possible.
Personal data means any information capable of identifying an individual; it does not include anonymised data. It is important that the information we hold about you is accurate and up to date — please let us know if it changes by emailing email.
The Site has no user accounts and no login. We may process the following limited categories of personal data:
We do not collect payment or card details (these are handled entirely by Headout at checkout), and we do not collect sensitive data such as information about your health, race, religion or political opinions.
We collect data directly from you when you email us, and automatically as you use the Site through cookies, server logs and similar technologies.
Our hosting and content-delivery provider (Cloudflare) processes technical data such as IP addresses to deliver and protect the Site. We use Simple Analytics, a privacy-first analytics service, to understand how the Site is used: it sets no cookies and collects no personal data or cross-site identifiers, recording only aggregated, anonymised statistics such as page views, referrers and country. Because it uses no cookies and stores no personal data, no analytics consent banner is required; you can read exactly what it collects at simpleanalytics.com/what-we-collect. When you click a tour link and book through Headout, Headout may set cookies to attribute the referral to us, governed by Headout’s own privacy policy. You can set your browser to refuse some or all cookies; if you do, parts of the Site may not function properly. We do not sell your personal data.
Tour images load directly from Headout’s image CDN, so your browser contacts Headout to fetch them. The Site may also link to third-party websites whose privacy practices we do not control; we encourage you to read the privacy notice of every site you visit.
We may share your personal data with service providers who host and administer the Site, with Headout as our booking partner, and with government bodies or professional advisers where required by law. We require all third parties to respect the security of your data and to process it only for specified purposes and in accordance with our instructions.
Some of our providers may process data outside the European Economic Area. Where that happens, we rely on safeguards recognised under the GDPR, such as an adequacy decision of the European Commission or standard contractual clauses, to ensure a comparable level of protection for your data.
We put in place measures to prevent your personal data from being lost, misused, altered or accessed without authorisation, and we limit access to those who need it. We retain personal data only for as long as necessary for the purposes we collected it, including any legal or reporting requirements, after which it is deleted or anonymised.
Where the GDPR applies, you have the right to access, correct, erase, restrict or object to our processing of your personal data, to request its transfer, and to withdraw any consent you have given. To exercise any of these rights, email email. You also have the right to lodge a complaint with your local data-protection supervisory authority.
We may update this policy from time to time; the date shown above reflects the latest version.
