Privacy Policy

Your personal data

Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).

Who we are Arley

Hall & Gardens is a privately owned, award winning enterprise, open to the public and visited by thousands of people every year. Arley has been the cherished home of the present Viscount Ashbrook and his family for more than 550 years. Arley Hall & Gardens is fully committed to both protecting and respecting your privacy. This policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By visiting this or any of our business partners’ websites (also referred to as “sites”) you are accepting and consenting to the practices described in this policy.

We comply with our obligations under the “GDPR” by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data. We use your personal data for the following purposes: • To enable us to provide a service for the benefit of all; • To administer season-ticket records; • To manage our employees and volunteers; • To maintain our own accounts and records; • To inform you of news, events, activities and services running at Arley Hall & Gardens.

How long will you use my personal data for

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. Details of retention periods for different aspects of your personal data are available upon request by contacting us at helen.begent@arleyhallandgardens.com.

Information we may collect from you

We may collect and process the following data about you: Information you give us • You may give us information about you by filling in forms on our website or at any of our sites, purchasing tickets, season-tickets or other products / services or by corresponding with us by telephone, email or otherwise. • This includes information you provide when you subscribe to our newsletter, or place an order on one of our sites; when you report a problem with our site; or if you join one of our special public engagement programmes. • The information you may give us may include your name, email address, postal address and telephone number and financial and credit card information. Information we collect about you on the Arley Hall & Gardens website With regard to each of your visits to our site we may automatically collect the following information: • technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; • information about your visit, including the full Uniform Resource Locators (URL) click stream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number. Information we receive from other sources • We may receive information about you from certain third parties with whom we have to work closely including business partners such as Barretts Event Catering (our caterers), our professional advisers, sub-contractors in technical, payment and delivery services, analytics providers, search information providers and credit reference agencies; • If we are doing business with you or accepting a donation, we may have to conduct due diligence on you, for example where we are under a legal or regulatory requirement; • We may combine information we receive from other sources with information you give to us and information we collect about you; • We may use this information and the combined information for the purposes set out above (depending on the types of information we receive and the consent).

Uses made of your information

We use information held about you in the following ways: Information you give to us: 1. When using an online form: • We ask for your details so we can respond in an appropriate way, for example when enquiring about a venue for hire, booking a specific event or requesting materials or other services we may provide. • In accordance with your preferences, you may be contacted with relevant promotions, offers or information that you have expressed an interest in or that might be of interest to you. If you wish us to stop contacting you please email helen.begent@arleyhallandgardens.com or click ‘unsubscribe’ at the bottom of our mailing lists. 2. When signing up for e-mail updates: • We ask for your details so we can add you to our email database and send you updates you’ve requested. • This information will not be given to any third party, except to the extent and for the purpose we may be required to do so by any law, or where you have consented to it. If you wish us to stop contacting you please email helen.begent@arleyhallandgardens.com or click ‘unsubscribe’ at the bottom of our mailing lists. 3. When purchasing a ticket or other product online: • We collect various personal details about you when you purchase tickets or other products and services (e.g. memberships, retail goods and image library content) online, including name, home address, billing address, telephone number, email etc. • We use the information to process orders and to provide a more personalised service. • Collecting these details allows our system to create a customer account for you in order that we can sell you such products and services. • Having a record of your personal details also allows us to identify you if we need to contact you regarding your booking or other order, if you need to contact us to change your booking or order, or to help identify you if collecting tickets. • We are also able to help if tickets or orders are lost by checking your personal details on the database. • Additionally, our bank recommends that we take the billing address of people purchasing tickets in advance as this can help to prevent fraudulent use of credit cards. • However, if you would prefer not to provide us with any of your personal information, you can buy tickets in person at our Gift Shop or Estate Office during opening hours (please see our website for up to date opening hour information). • The information we collect in this way will not be given to any third party, except to the extent and for the purpose we may be required to do so by any law. • By disclosing your personal information to us using our website or over the telephone, you consent to the collection, storage and processing of your personal information by Arley Hall & Gardens in the manner set out in this Privacy notice. If you have any questions or concerns about the information we hold about you, you can also email helen.begent@arleyhallandgardens.com. 4. When filling in a form during a visit or applying for one of our services or events: • We ask for your details so we can fulfil your specific request in accordance with your preferences and consent. This will be explained to you at the time and on the relevant form.

Information we collect about you

We may use this information: • to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes; • to improve our site to ensure that content is presented in the most effective manner for you and for your computer, or other device being used to access our site; • to allow you to participate in interactive features of our service, when you choose to do so; • as part of our efforts to keep our site safe and secure; • to measure or understand the effectiveness of any advertising we may serve to you and our other customers, and to deliver relevant advertising to you; • to make suggestions and recommendations to you and other users of our services about goods or events that may interest you or them.

Disclosure of your information

We may use or share personal information held about you in the following ways: • within Arley Hall & Gardens for legitimate and relevant purposes. • with suppliers, sub-contractors and business partners (such as Barretts Event Catering, our caterer) but only in relation to relevant services that you have requested. • with analytics and search engine providers that assist us in the improvement and optimisation of our site. • if we are under a duty to disclose or share your personal data in order to comply with any legal obligations.

Where we store your personal data

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA, who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy notice. All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. The transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site or over email; any transmission is at your own risk. Your rights and your personal data Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data: • The right to request a copy of your personal data which we hold about you; • The right to request that we correct any personal data if it is found to be inaccurate or out of date; • The right to request your personal data is erased where it is no longer necessary for us to retain such data; • The right to withdraw your consent to the processing at any time; • The right to request that the data controller provide the data subject with his/her personal data and where possible, to transmit that data directly to another data controller (known as the right to data portability); • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing; • The right to object to the processing of personal data; • The right to lodge a complaint with the Information Commissioner’s Office.

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Information about our use of cookies

Our websites uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. Cookies are tiny text files that are stored on your browser if you agree. Most cookies contain a unique identifier called a cookie ID: a string of characters that websites and servers associate with the browser on which the cookie is stored. This allows us to distinguish your browser from other browsers, to recognize your browser by its unique cookie ID and to store information about your preferences on a particular website. This information may remain on your computer or other internet enabled device after your internet session finishes and you leave the website, but you can delete them using some browsers, manually or using system utilities. Most internet browsers are pre-set to accept cookies. The cookies we use on our websites include: • Session cookies, which are temporary cookies that remain in the cookie file of your browser until you leave the site; and • Persistent cookies, which remain in the cookie file of your browser for much longer (though how long will depend on the lifetime of the specific cookie). Most major websites use cookies. Cookies cannot be used by themselves to identify you. We may share statistical information regarding cookies with third parties. 1. Web analytics cookies: We use Google Analytics cookies on this website to collect information about how our visitors use and navigate this website so that we can continually work to add new features and improve your experience of it. The cookies collect information such as the number of visitors to the site, which pages they visited and whereabouts they came to the site from. This information is anonymous and cannot be used to identify you personally. 2. Third-party cookies: During your visits to this website you may be delivered cookies by third-party websites. When you visit a page with content embedded from, for example, Instagram, Facebook, Twitter, YouTube or Flickr, you may be presented with cookies from these websites. 3. We have no control over the dissemination of these cookies. You should check the third-party websites for more information about these.

How to manage cookies

You have the ability to accept or decline cookies by modifying the settings in your browser. However, you may not be able to use all the interactive features of our site if cookies are disabled. You may wish to visit www.aboutcookies.org which contains comprehensive information on how to modify the cookie settings on a wide variety of browsers. You will also find details on how to delete cookies from your computer as well as more general information about cookies. For information on how to do this on the browser of your mobile phone or tablet you will need to refer to your device manual Changes to our privacy notice. Any changes we may make to our privacy notice in the future will be posted on this page.

Please check back frequently to see any updates or changes to our privacy notice. This policy was last updated on 4th November 2023. Contact Questions, comments and requests regarding this privacy notice should be addressed to helen.begent@arleyhallandgardens.com.