DISCOVEREDINBURGH
Legal & Data Protection

Privacy & Cookie Policy

Last Updated: October 2026 • Compliant with UK GDPR & UK Data Protection Act 2018

1. Overview & Data Controller

Discover Edinburgh ("we", "our", or "us") operates discoveredinburgh.com. We are committed to safeguarding the privacy of our visitors in strict compliance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection legislation, the Data Controller is Discover Edinburgh, Royal Mile, Edinburgh EH1 1RE, Scotland, United Kingdom. If you have questions concerning your personal data, please email privacy@discoveredinburgh.com.

2. Information We Collect

We minimize the collection of personal information to what is strictly necessary to provide an exceptional destination experience:

  • Newsletter Subscriptions: When you voluntarily subscribe to our monthly journal ("Join the Club"), we store your email address, subscription timestamp, and source in our secure database. You may unsubscribe at any time via the link in each email.
  • Trip Planner & Favorites: Saved itinerary places and accommodation bookmarks are processed client-side in your browser via local storage (`localStorage`). This data stays on your personal device and is not transmitted to our servers unless you explicitly share a trip URL.
  • Anonymous Telemetry & Performance: We collect aggregate, non-identifying telemetry (such as Core Web Vitals, page response times, and device viewports) to ensure high-performance rendering.
  • Server Logs: Standard web server access logs (IP address, browser user-agent, referring URL, timestamp) are retained for a maximum of 30 days solely for system security and DDoS protection.

3. Cookie & Local Storage Policy

Cookies are small text files placed on your device to ensure website functionality. We categorize our storage into:

Essential Cookies (Strictly Necessary)

Required for site security, navigation state, and remembering your cookie consent preferences. These cannot be disabled.

Analytical & Performance Cookies

Used to understand anonymous page visit patterns and identify slow page loads. Loaded only with your consent via our banner.

4. Third-Party Partners & Affiliate Links

Discover Edinburgh contains outbound links to verified third-party partners (including Booking.com, GetYourGuide, and Viator) for hotel reservations and guided tours.

When you click an affiliate booking button, you are redirected to the external operator’s secured domain. The partner operator processes transactions under their respective privacy policies. Discover Edinburgh does not process payment information or credit card numbers.

5. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you hold the following statutory rights regarding your personal data:

  • The right to access: Request a copy of the personal data we hold about you.
  • The right to rectification: Request correction of inaccurate information.
  • The right to erasure ("Right to be forgotten"): Request deletion of your email address from our subscriber records.
  • The right to withdraw consent: Withdraw consent for marketing emails at any time.

To exercise any of these rights, please contact our Data Protection Officer at privacy@discoveredinburgh.com. We fulfill all verified requests within 30 days without charge.