Privacy Policy - Clifton Castles
Last updated: [18/02/2026]
Clifton Castles is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our website or book our services.
Clifton Castles is the Data Controller responsible for your personal data.
If you have any questions about this policy or how we handle your data, please contact us at:
📧 cliftoncastles@gmail.com
1. What Information We Collect
We may collect and process the following types of personal data:
- Full name
- Address and postcode
- Telephone number
- Email address
- Event details (date, location, booking requirements)
- Payment information (excluding full card details if processed by third-party providers)
- Technical data such as IP address, browser type, and website usage data
We only collect information that is necessary to provide our hire services.
2. How We Collect Your Data
We collect data when you:
- Submit an enquiry or booking form
- Contact us via email, phone, text, or social media
- Make a payment
- Use our website (via cookies and analytics tools)
3. Lawful Basis for Processing
Under UK GDPR, we process your personal data under the following lawful bases:
- Contractual necessity - to fulfil our hire agreement with you.
- Legal obligation - for tax, accounting, and regulatory purposes.
- Legitimate interests - to manage bookings, improve services, and operate our business effectively.
We do not rely on consent as the primary lawful basis for booking-related data processing.
4. How We Use Your Information
We use your personal data to:
- Process and manage bookings
- Deliver and collect hired equipment
- Communicate with you about your booking
- Process payments
- Comply with legal and accounting requirements
- Improve our website and services
We do not sell, rent, or trade customer data.
5. Data Sharing
We may share your information with:
- Website hosting providers
- Email service providers
- Payment processors
- Accountants or professional advisers
- Legal authorities where required by law
All third parties are required to respect the security of your data and process it lawfully.
We do not transfer your data outside the UK unless appropriate safeguards are in place.
6. Data Retention
We retain personal data only for as long as necessary to:
- Fulfil booking obligations
- Comply with legal requirements (such as HMRC record-keeping)
- Resolve disputes
Financial records may be retained for up to 6 years in accordance with UK legal requirements.
7. Cookies & Website Tracking
Our website may use cookies and analytics tools (such as Google Analytics) to:
- Monitor website performance
- Analyse visitor behaviour
- Improve user experience
Cookies do not identify you personally unless you provide personal information through forms.
You can control cookies through your browser settings.
8. Your Data Protection Rights
Under UK GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate information
- Request deletion of your data where appropriate
- Restrict or object to processing in certain circumstances
- Request data portability where applicable
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us using the details above.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):
9. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.