This Privacy Policy governs the manner in which Charlton Park Estate collects, uses, maintains, discloses and processes information collected from users of the\u00a0https:\/\/charltonparkestate.com\/\u00a0website (“Site”). This privacy policy applies to the Site and all products and services offered by Charlton Park Estate. To use the Charlton Park Estate website and services you must agree to this privacy policy. When signing up, you agree to this policy and your use of Charlton Park Estate signifies your continued acceptance.<\/p>\n
<\/p>\n
Charlton Park Estate (“we”, “us”, “our”) is a Limited registered company in England & Wales (company number: 01496206) with a registered address at Charlton Park House, Charlton, Malmesbury, Wiltshire, SN16 9DG. We operate a number of services including events, farming and others. This privacy policy covers how we will use, collect and process any data provided to us.<\/p>\n
We may collect non-personal identification information about Users whenever they interact with our Site. Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service providers utilized and other similar information.<\/p>\n
Throughout your interactions with us we will collect only the data that we require in order to provide you with the service that you are requesting. The key information that we process is shown below for your information:<\/p>\n
When you access any of our services we will store a record of your IP address along with details of your request in our logs. This information is stored and used by our system to ensure the integrity of our services.<\/p>\n
Retention:<\/b>\u00a0This information is stored in rotating logs, which are kept for a minimum of 6 months.<\/p>\nAuthorisation & Session Data<\/h4>\n
\n
Whenever you login to one of our services we will use at least two cookies that will identify your session to our services. This is necessary to provide our service to you.
\nThe\u00a0browser_id<\/b>\u00a0cookie is a permanent cookie that uniquely identifies your browser to us and allows us to ensure that previous sessions from that browser are invalidated when logging in again. This is only used for the purposes of invalidating these sessions as well as allowing us to notify you when new sessions are created in new browsers.
\nThe\u00a0user_session<\/b>\u00a0cookie is, initially, a session-only cookie that contains a unique token that identifies your specific session. This data is not stored on our end and is only stored in a hashed form. If you choose to persist your login session, this cookie will be converted to a more permanent cookie with an expiry time at some point in the future. The actual time will depend on the service you are using.
\nIn addition to these cookies, we also store IP addresses & user agents with your session. This allows us to look for anomalies in its use to help us protect your account and our systems.<\/p>\n
Retention:<\/b>\u00a0This data is stored until such time as the associated user account is deleted.<\/p>\nYour Name<\/h4>\n
\n
When you sign up, we need to know your first & last name so that you can be identified. We will use your name to address you and it may be stored in various systems that you use. This is necessary to provide our service to you.
\nYour name may be shared with other people that share access to an account you are part of. For example, if you have an Charlton Park Estate account, your name will be shared with other members of that account.<\/p>\n
Retention:<\/b>\u00a0Your name will be retained until your user account is deleted. In some cases, your name may be kept with your billing records were we have a legal obligation to store this information.<\/p>\nE-mail Address<\/h4>\n
\n
We will store your e-mail address for the purposes of managing your account with us. This will be used for transactional e-mails that relate directly to your account or services. This information is required in order to ensure you are informed about your account and can take appropriate actions in various situations.
\nWe may also use your e-mail address to send you messages about our services which may include notifications about newly launched features, improvements to the service, upcoming maintenance as well as ways to help you make the most of your service. If you would rather not receive these messages, please let us know or click the unsubscribe link in these e-mails.
\nWe will not send you any other marketing messages unless you subscribe to our newsletter which you can do through our website when signing up or through one of our applications. When you do this, you will be consenting with us to use your email address for this purpose. You may withdraw this consent at any time by unsubscribing from the messages or contacting us.
\nIf you are using a service that allows multiple users to have access to the same account, your e-mail address may be shared with the other users on this account.
\nOur applications may share a cryptographic hash (MD5) of your e-mail address with the Gravatar service to allow us to display an appropriate profile image with your images. If you do not have an account with Gravatar, they will not be able to determine your actual e-mail address.<\/p>\n
Retention:<\/b>\u00a0Your email address will be kept until such time as all accounts associated with it are deleted from our systems.<\/p>\nOutgoing E-mails<\/h4>\n
\n
If we send you transactional e-mails, these will be passed through our internal mail server and stored for a period of time to assist with debugging delivery problems and ensuring messages are appropriately delivered to their destinations. This is necessary to provide our service to you.
\nThe information stored includes the contents of the message sent, the e-mail addresses of the recipients and any other headers.<\/p>\n
Retention:<\/b> The contents of messages are stored for a minimum period of 30 days from the date the message is received by our mail system.<\/p>\nIncoming E-mails<\/h4>\n
\n
If you send us e-mails, these may be passed through our mail servers. If some cases, these messages will be consumed by one of our services or applications. This is necessary to provide our service to you.<\/p>\n
Retention:<\/b> The contents of messages are stored for a minimum period of 30 days from the date the message is received by our mail system.<\/p>\nYour Postal Address<\/h4>\n
\n
We require your postal address in order to provide you with an invoice for your services. This information is collected as a legal obligation and will be stored on our systems along with invoices for a minimum period of 7 years. We may need to send you items by post. To do this, you will need to provide your address to us again and consent to us using it for the purposes of sending you items by post. We may store your address on file to allow us to send you items in the future. You may opt to have this address removed from our records at any time by contacting us.<\/p>\n
When you use our services you might upload or generate personal information relating to your own customers and users. You will remain the data controller for all such data that is stored within our systems and are responsible for ensuring you have an appropriate lawful basis & notices in place to allow us to store this data on your behalf.
\nIf you use a Charlton Park Estate service which allows you to upload, store or process any personal data, you are responsible for ensuring that you are compliant with appropriate laws & regulations (for example the General Data Protection Regulation) for this data.
\nWe do not recommend customers store any personal data in areas of our systems that are not designed for the purposes of storing this information.<\/p>\n
Retention:<\/b>\u00a0Data stored in the services you have with us will be kept until such time as you delete the data yourselves or you cancel your account. Upon cancellation of an account, we may keep the data for up to 7 days at which point it will be purged from our databases.<\/p>\nAnalytics<\/h4>\n
\n
We use Google Analytics to help us track the details of visitors browsing our public websites. We do not use Google Analytics on any URLs once you have been authenticated. We do not send any personal data to Google’s services through Google Analytics and we configure our tracking codes to anonymise any IP addresses.<\/p>\n
If you contact us by e-mail or through one of our websites, you will be sharing your contact details (e-mail address and\/or phone number) with us for the purposes of responding to your query. This is necessary to provide our service to you.<\/p>\n
Retention:<\/b>\u00a0We retain all support requests (including name & contact details) that we receive for the purposes of auditing and training of staff.<\/p>\nE-mail Directly To\/From Our Employees<\/h4>\n
\n
If you communicate with our employees directly by e-mail (i.e. not using our normal support channels), we may retain your name & e-mail address in the mailboxes of the employee(s) that you communicate with. This is necessary to provide our service to you.<\/p>\n
Retention:<\/strong> Employee e-mails are kept indefinitely. Any e-mails that contain sensitive data that are delivered by accident will be removed immediately.<\/p>\n We store backups of website data stored by us for use in disaster recovery. Backup data is encrypted and stored off site in a secure data centre. This is necessary to provide our service to you.<\/p>\n Retention:<\/b> Database backup data is stored for a minimum period of 20 days, whereas full backup data is stored for a minimum period of 4 months.<\/p>\n We use a United Kingdom based hosting company. All their data centres have a number of physical security precautions in place including 3m perimeter fencing, full CCTV coverage, 24\/7 security personnel and electronic access control systems.<\/p>\n We may share and\/or transfer your data with other companies within our group for the purposes of administration and company structuring.<\/p>\n If one of our services is acquired by another company or entity, we may share your information with the acquiring company so that they may continue to provide you with the services that you have elected to receive. You will be notified by e-mail in the event that such an acquisition occurs.<\/p>\n In some cases, we may use third parties to provide storage or computing services. We maintain a list of third parties that process data on our behalf.<\/p>\n Professional Services<\/strong> Payment Service Providers<\/strong> Technical Service Providers<\/strong> E-mail Marketing Software<\/strong> Communication Services<\/strong> We will not share your data with third parties for the purposes of any marketing without your consent unless otherwise specified in this privacy notice. It is important to us that the information we store is up to date and accurate. You may update your details at any time through our various websites & applications.<\/p>\n In some cases, you may be able to request that we remove your personal data from our systems. As with correcting your data, you can often delete your data yourselves through our websites & applications. In other cases, though, please feel free to contact us using the information below.<\/p>\n You have a lot of rights, including right to request access to and rectification or erasure of your personal data or restriction of processing of it. You also have the right to object to our processing of your data in some situations, as well as the right to data portability.<\/p>\n Upon discovering any data breaches, we will notify any affected individuals as soon as its practical following our data breach notification policy. This policy dictates that in the event of a data breach concerning personal data, the affected parties will be notified by e-mail to the main e-mail address we store with your account.<\/p>\n No method of electronic storage can be 100% secure, however, we have sophisticated and detailed security & development policies that govern our systems & applications to help ensure your data is as secure as it can be.<\/p>\n We do not provide any of our services to anyone under the age of 18. If we are made aware of anyone under the age of 18 using our services we will immediately delete any and all data from our systems.<\/p>\n We may need to make changes to this privacy policy from time to time. All changes will be published to our websites and we recommend reviewing it to stay up to date. If we make any changes that we feel may affect your privacy rights, we will notify you by e-mail or by displaying the information within the our services or applications.<\/p>\n Under the General Data Protection Regulation, unless we have otherwise specified above, we will be processing your data as a legitimate interest. These interests include staff training, ensuring the security of our systems and to allow us to operate our business in an efficient manner. We may disclose your information if we are requested to by any law enforcement agency where we believe we are required to comply with the request under any applicable laws.<\/p>\n You may have the right to lodge a complaint with your local data protection authority or the Information Commissioner’s Office (ICO) in the United Kingdom (our authority). If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:Backups<\/h4>\n
\nOur Servers<\/h3>\n
\nTransfer Of Data To Group Companies<\/h3>\n
\nTransfer Of Data On Product Or Service Acquisition<\/h3>\n
\nThird Party Processors<\/h3>\n
\n
\nWe may share your details with processional service companies such as accountants or accounting software.<\/p>\n
\nWe may share your details with company who provide us with payment services for taking payments from credit\/debit cards.<\/p>\n
\nWe may share your details with providers we use to provide computing services.<\/p>\n
\nWe may share your details with e-mail marketing software providers to allow us to send e-mails to customers.<\/p>\n
\nWe may share your details with companies who provide us with communication services such as a live chat or e-mail providers.<\/p>\n
\nSome of our applications allow users to configure integrations with third party services. When using any of these integrations, you share your data with the organisations who operate these services. You should review their own privacy information with regard to how they will treat this information once it has been provided.<\/p>\nCorrecting Your Personal Data<\/h3>\n
\nRemoval Of Your Personal Data<\/h3>\n
\nYour Rights<\/h3>\n
\nNotification Of Data Breaches<\/h3>\n
\nElectronic Storage Of Data<\/h3>\n
\nUse Of Our Services By Persons Under The Age Of 18<\/h3>\n
\nChanges To Our Privacy Policy<\/h3>\n
\nOur Lawful Basis For Data Processing<\/h3>\n
\n
\nWhere our processing is based on consent, you may withdraw consent at any time.
\nWhere our processing is necessary for us to perform our contract with you, or to take steps to enter into a contract with you, we will not be able to enter into a contract with you or deliver our services to you if you do not give us the data in question.<\/p>\nDisclosure Of Information To Law Enforcement Agencies<\/h3>\n
\nData Protection Authority<\/h3>\n
\n
\nThe ICO can be contacted at: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Other information can be found on their website at ico.gov.uk.<\/p>\nContacting Us<\/h3>\n
\n
\nCharlton Park Estate
\nCharlton Park House, Charlton, Malmesbury, Wiltshire, SN16 9DG
\n01666 822146 <\/a>
\ninfo@charltonparkestate.com<\/a><\/p>\n
\n