Privacy Policy

Hike Scotland helps you discover and organise hiking routes, guided tours and places to stay across Scotland. This policy explains how we handle personal data when you use the site. Contact details for the operator are in our Legal Notice.

We only collect data for specific, limited purposes:

• Newsletter — your email address, so we can send the updates you signed up for. You can unsubscribe at any time via the link in every email.
• Bookings — your name, email, phone number and the details needed to fulfil a tour or stay reservation.
• Account & sign-in — if you sign in with Google, we receive your name, email address and profile picture to create and secure your account.
• Analytics — aggregate, anonymous usage statistics (see “Tracking & cookies” below).

We process data on the basis of your consent (newsletter, analytics), the performance of a contract (bookings), and our legitimate interest in running a secure, functional website (essential account and session handling), in line with Art. 6(1) GDPR.

We rely on a small set of processors, each handling data on our behalf under their own data-protection terms:

• Supabase — database and authentication, hosted in the EU (Frankfurt, eu-central-1).
• Vercel — website hosting and content delivery.
• Umami Cloud — privacy-friendly, cookieless web analytics.
• Google — optional sign-in (OAuth).

We use Umami for analytics. Umami is cookieless and does not track you across sites or build advertising profiles — it records only aggregate, anonymous metrics such as page views and referrers. We do not use advertising or third-party tracking cookies.

The only cookies we set are strictly necessary ones required to keep you signed in and to secure your session when you use an account.

We retain personal data only as long as needed for the purpose it was collected — newsletter data until you unsubscribe, booking data for as long as required to fulfil and document the reservation, and account data until you delete your account.

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing or withdraw consent at any time. To exercise any of these, contact us using the details in the Legal Notice. You may also lodge a complaint with your local data-protection authority.