Picton Castle and Gardens

Privacy Policy

In accordance with the General Data Protection Regulation (GDPR) that came into effect on 25th May 2018, we have updated our Privacy Policy. GDPR imposes additional obligations on organisations and gives you extra rights around how your data is used. Picton Castle is committed to ensuring that your privacy is protected, and we have taken all the necessary steps to ensure that the new GDPR regulations are adhered to.

This privacy policy sets out how Picton castle Trust uses and protects any information that you give us, this includes information collected from:

  • Visitors to our website
  • People who use our services, including season ticket holders, garden group members and group tours
  • People who hire our lodges or use Picton castle as a wedding venue
  • Visitors who kindly give us their details in order for gift-aid to be collected
  • Staff, volunteers and contractors
  • Debtors and creditors
  • Artists who exhibit in our galleries and stallholders who attend our events
  • People who fill out a visitor satisfaction survey
  • People whose details are included in our accident book

The kind of information we collect may include name and job title, contact information including address, telephone number and email address and information relevant to customer surveys and/or offers. The information we gather may be used in several ways, depending on the original basis of collection.

Data protection says that we are allowed to use and share data only when we have a lawful basis for doing so, and that we must have one of these reasons:

(a) Consent the individual has given clear consent for you to process their personal data for a specific purpose
(b) Contract the processing is necessary for a contract you have with the individual, or because they have asked you to take specific steps before entering into a contract
(c) Legal Obligation the processing is necessary for you to comply with the law (not including contractual obligations)
(d) Vital interests the processing is necessary to protect someone’s life
(e) Public task the processing is necessary for you to perform a task in the public interest or for your official functions, and the task or function has a clear basis in law
(f) Legitimate interests the processing is necessary for your legitimate interests or the legitimate interest of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.

  • Here is a list of the reasons we use your personal information and the lawful basis required for doing so:
    Season ticket holders/garden group/group tours-Consent, contract, legitimate interests
  • Direct-debits-Contract, consent
  • Gift-aid-Contract, consent
  • Lodge guests/weddings-Contract, legitimate interests, consent
  • Artists/stallholders-Contract, consent, legitimate interest
  • Debtors/creditors-Contract, consent, legal obligation, legitimate interests

The GDPR includes the following rights for individuals:

  • The right to be informed;
  • The right to access;
  • The right to rectification
  • The right to erasure
  • The right to restrict processing;
  • The right to data portability
  • The right to object; and
  • The right not to be subject to automated decision-making including profiling

At Picton Castle we endeavour to ensure that the above rights are adhered to and that all individuals who have given us their personal information are aware of these rights. We only use your data for the purpose with which it was given and we do not pass any information on to a third party without your consent.

Our newsletter is compiled by Lesley Jones of Spun Gold, and she has access to the email addresses of all those who have requested the newsletter. Details given for gift-aid are passed on to the Inland Revenue are collected using our software provider Tengo and their privacy policy can be found at: https://www.tengosoftware.com/privacy-policy/

We use Google Analytics to collect data about traffic to the Picton castle website. If you wish to opt-out of Google Analytic tracking please visit and install the Google Analytics Opt-out Browser Add-on.

We retain data for as long as it is needed for a specific purpose otherwise it is deleted from our systems after three years.

In accordance with the GDPR guidelines above, individuals can contact Picton castle at any time to have their information removed or to ask for more clarification about what information we hold and why.

If you would like to be removed then please contact us on 01437 751326 or email us at admin@pictoncastle.co.uk

How we use cookies

A cookie is a small file which asks permission to be placed on your computer’s hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.

You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.