This Privacy Policy explains how we collect, use, store and protect your personal data when you interact with our website or services. It applies to all websites, platforms and online services we operate.

We are committed to safeguarding your personal information and complying with all applicable data-protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you do not agree with any part of this Privacy Policy, please discontinue use of our website.

1. Who we are

Data Controller:

‍Netley Hall Estate
Dorrington
Shrewsbury, SY5 7JZ

office@netleyhall.com

2. Personal data we collect

Depending on how you use our website, we may collect:

Information you provide directly

• Name
• Email address
• Telephone number
• Postal address
• Booking information
• Enquiry details submitted via forms or emails
• Any other information you choose to share with us

Information collected automatically

When you visit our website, we may automatically collect:

• IP address
• Device type
• Browser type and version
• Pages views and time spent
• Referring website
• General location (approximate)

This data is typically collected via essential website technologies. Any non-essential tracking (analytics, advertising, embedded services) will be covered in the separate Cookies Policy.

Information from third parties

We may receive information from:

• Payment processors
• Booking platforms
• Social media platforms (if you interact with our accounts)
• Embedded third-party services
• Marketing tools
• Public sources (if relevant to your enquiry)

3. How we use your personal data

We use personal data only when we have a lawful basis. Your data may be used for:

Providing and managing our services

• Responding to enquiries
• Handling bookings or purchases
• Providing customer support
• Sending essential service messages

Improving our website and services

• Monitoring website performance
• Analysing user behaviour (only with consent, via cookie tools)
• Ensuring security and fraud prevention

Marketing (only with your consent or legitimate interest)

• Sending newsletters or updates
• Providing details about services, promotions or events. You can opt out at any time.

Legal and regulatory requirements

• Maintaining records
• Handling complaints or disputes
• Complying with lawful requests from authorities

4. Our Legal Bases for Processing

We rely on the following lawful bases under UK GDPR:

• Consent – for marketing communications, non-essential cookies, and any activity where we request your permission.
• Contract – when processing is necessary to provide services you have requested (e.g. bookings, purchases).
• Legitimate Interests – for running and improving our website and business, where these interests do not override your rights.
• Legal Obligation – where we must retain or share data to comply with the law.

Who do we disclose your information to?

We may also share information with the following third parties; Legal services for advice, eg. in respect of a dispute. We may need legal advice should there be a claim or dispute therefore your information will be required in the process. This may also include a court or Ombudsman.

Withdrawal of consent

You have the right to withdraw you consent for us to hold your information at any time by contacting us through email. Our email address is office@netleyhall.com. We will stop using your information and remove the information from our database as soon as possible.

Your rights

• A right of access to your information and to details about how we use your information
• A right to rectification of inaccurate information
• A right to have information erased (a right to be forgotten)
• A right to restrict the use we can make of your information
• A right to information portability
• A right to object to the processing of your information

We will comply with all of the above rights in a timely manner, no later than one month after the request has been received. For more complex requests more time may be requested to fully address the issue. There is no charge for any request, unless it is manifestly unfounded or excessive. If a request is manifestly unfounded or excessive then we will either charge our reasonable administrative costs to comply with it, or we tell you that we are not going to comply because it is manifestly unfounded or excessive.

Access to information

You may access any of the information that we hold about you as well as the reasons for holding this information, who we disclose the information to, the type of information that has been collected and the length of time in which the data will be held.If you make a request to access your data that we hold about you we will need to confirm your identity and then will comply and give you access to the requested data. If you wish to have access to a particular piece of information that we hold about you then you may also request this.

Right to rectification

If any of the information that you have provided is inaccurate then let us know as soon as possible and we will correct it. You may also wish to supplement any information that we currently hold about you. If we have supplemented or rectified any information that we currently hold about you then we will inform any third parties that we have already provided this data to of the changes that have been made. If required, then we will inform you of who we have notified these changes to.

Right to erasure

You have the right to ask us to erase the information that we hold about you such as in the following;

• We no longer need to keep it for the purposes for which it was collected or used
• Our only basis to process it is your consent and you withdraw that consent
• You object to our use of the information and we do not have any overriding legitimate grounds to continue using the information
• We are using the information unlawfully
• We have to erase it in order to comply with our legal obligations

Unless we have a serious reason for not doing so, such as a legal dispute, then we will remove your details from our system at you request. If we need to erase any of your information that we currently hold about you then we will inform any third parties that we have already provided this data to of the changes that have been made. If required, then we will inform you of who we have notified these changes to.

Right to restrict processing

You have the right to ask us to restrict the use of your information such as in the following;

• You have made a request for rectification or to supplement inaccurate information
• You can ask that we restrict your processing while we deal with your request
• The use of the information is unlawful, but you ask that we restrict our use of the information rather than delete it
• We no longer need to use it but you want us to keep it so that you can use it for a legal claim

In these instances, we will cease using the information that you have provided (although we may still store it) unless you consent to our use, we need it for legal claims, we need to use it to protect another person or where there is an important public interest in us doing so.
‍
If we need to restrict any of your information that we currently hold about you then we will inform any third parties that we have already provided this data to of the changes that have been made. If required, then we will inform you of who we have notified these changes to.

Complaints

To exercise all relevant rights, queries or complaints, please contact us at office@netleyhall.com to discuss the issue.

© Copyright Netley Hall. All rights reserved.

Netley Hall Estate, Dorrington, Shrewsbury, SY5 7JZ