Privacy
Who is responsible
The controller for the processing of personal data on this website is:
Golden Oak Travel Limited4a Glenfinlas StreetEdinburgh EH3 6AQScotland, United KingdomCompany number SC901627, registered in ScotlandDirectors: Beryl Preuschmann, Ben LehmannPhone: +44 131 608 5500Email: hello@route-meister.com
RouteMeister is a trading name of Golden Oak Travel Limited. For any questions about data protection, or to exercise your rights, please contact us at hello@route-meister.com or at the address above.
Overview and legal bases
We only process personal data where this is necessary to run this website and to deal with your enquiries. The applicable law is the UK GDPR and the Data Protection Act 2018; for visitors from the European Union, the EU General Data Protection Regulation (GDPR) also applies. The articles referred to below have the same wording in both regulations.
- Art. 6(1)(b) UK GDPR / GDPR – contract or steps prior to a contract, for example when you enquire about a trip;
- Art. 6(1)(f) UK GDPR / GDPR – legitimate interests, for example the secure and reliable operation of this website or answering general enquiries;
- Art. 6(1)(a) UK GDPR / GDPR – your consent, which you can withdraw at any time with effect for the future.
You are not obliged to provide us with personal data. Without your name and email address, however, we cannot reply to an enquiry.
Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered through Vercel’s global server network. Vercel processes data on our behalf as a processor.
Each time a page is requested, your browser transmits technical data that is recorded in server log files: IP address, date and time, the address requested, the referring page, browser and operating system (user agent) and the status code of the response. We need this data to deliver the website, keep it secure and find errors (legitimate interests, Art. 6(1)(f) UK GDPR / GDPR). We do not combine it with other data and do not use it to identify you.
Log files are kept only for a short time and are then deleted automatically, unless they are needed for longer to investigate a specific security incident. Vercel is certified under the EU-US Data Privacy Framework and its UK Extension; in addition, Standard Contractual Clauses apply.
Fonts
The fonts used on this website are stored on our own server and loaded from there. No connection is made to Google Fonts or any other font provider.
Enquiry form, email and phone
When you write to us using the enquiry form, we process the details you enter: name, email address, optionally your phone number and a message, and your travel wishes – preferred route, travel period or dates, duration, number of adults and children including the children’s ages, accommodation and rooms, focus, budget, extras and whether we should reply by email or phone. We also receive the language of the page you are writing from.
We use these details to answer your enquiry and, where appropriate, to send you a proposal. The legal basis is Art. 6(1)(b) UK GDPR / GDPR if your enquiry relates to a trip or another contract, otherwise Art. 6(1)(f) UK GDPR / GDPR (our interest in answering enquiries). The same applies when you contact us by email or phone.
The form does not store your enquiry on the website itself but forwards it directly to our team:
- by email via the email delivery service Resend (Resend, Inc., San Francisco, USA) to our mailbox.
The provider processes the data on our behalf as a processor. For transfers to the USA, see “International transfers”.
We delete enquiries once they have been dealt with and are no longer needed. If a contract is concluded, we keep the related records for as long as statutory retention periods require (in the United Kingdom usually up to six years).
If you book with us
Once a booking is made, we pass the necessary details to the suppliers of your trip, such as accommodation, car hire companies, ferries, drivers and guides. This includes the names of the travellers, the travel dates and your wishes for the trip. This is needed to carry out the trip (Art. 6(1)(b) UK GDPR / GDPR).
We only process and share health information, such as allergies or limited mobility, with your explicit consent (Art. 9(2)(a) UK GDPR / GDPR).
Booking a call with Calendly
To book a call, we use Calendly, a scheduling service provided by Calendly LLC, Atlanta, USA. Calendly’s booking window is only embedded in our website after you have agreed – in the cookie settings or in the notice that appears when you choose “Book a call”. Until then, no connection is made to Calendly. Alternatively, you can open Calendly’s page in a new tab; nothing is then embedded in our website.
Once the window is loaded, Calendly processes technical data such as your IP address and browser details and, if you book an appointment, your name, email address, the time you choose and any notes, so that we can hold the call. In the embedded window, Calendly sets its own cookies. Calendly’s privacy policy also applies: calendly.com/privacy.
The legal basis for loading Calendly is your consent (Art. 6(1)(a) UK GDPR / GDPR; for the cookies also the Privacy and Electronic Communications Regulations (PECR) or, for visitors from Germany, § 25(1) TDDDG). Data is transferred to Calendly LLC in the USA; see “International transfers”.
You can withdraw your consent at any time with effect for the future via “Cookie settings” at the bottom of every page or here:
“Ask a question” window
The “Ask a question” button opens a small window with a typical question and answer. The input field in this window is disabled: nothing you could type is processed, stored or sent to us or to third parties.
Links to other websites
This website contains links to other websites. Only when you follow such a link do you reach the other site; its operator is responsible for the processing of data there. For some journeys we link to an offer page at WeTravel (WeTravel, Inc., San Francisco, USA); WeTravel’s privacy policy applies there.
Google Analytics
With your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It shows us, in aggregated form, how visitors use our pages so that we can improve them.
Google Analytics is only loaded after you have agreed in the consent banner; until then, no connection is made to Google. Signals for advertising purposes remain switched off. After your consent, Google Analytics sets cookies (_ga, _ga_…) and processes usage data such as the pages you visit, time spent, approximate location and device and browser details. According to our configuration, IP addresses are shortened before storage and analytics data is deleted after 14 months.
The legal basis is your consent (Art. 6(1)(a) UK GDPR / GDPR; for setting the cookies also the Privacy and Electronic Communications Regulations (PECR) or, for visitors from Germany, § 25(1) TDDDG). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework and its UK Extension.
You can withdraw your consent at any time with effect for the future via “Cookie settings” at the bottom of every page or here:
International transfers
Some of our service providers are based in the USA (Vercel, Resend, Calendly and Google). Where a provider is certified under the EU-US Data Privacy Framework and its UK Extension (the “UK-US data bridge”), the transfer is based on the corresponding adequacy decisions of the European Commission and the UK government. In addition, or where this does not apply, we rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.
For visitors from the EU: we are based in the United Kingdom, for which the European Commission has adopted an adequacy decision.
Your rights
You have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data rectified (Art. 16);
- have your data erased (Art. 17);
- have processing restricted (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing, in particular processing based on legitimate interests (Art. 21);
- withdraw any consent you have given at any time with effect for the future (Art. 7(3)).
Simply write to us at hello@route-meister.com.
You also have the right to lodge a complaint with a data protection supervisory authority – in the United Kingdom with the Information Commissioner’s Office (ICO), ico.org.uk, phone 0303 123 1113; in the EU with the supervisory authority of the member state where you live or work or where the alleged infringement took place.
No automated decision-making
We do not make decisions based solely on automated processing, including profiling, within the meaning of Art. 22.
Changes to this policy
We update this privacy policy when our website or the law changes. The version published here applies.
Last updated: October 2026