The Underley Estate is committed to protecting and respecting your personal data and privacy. This privacy notice relates to our use of any personal data we collect from you from any of our services. Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal data and The General Data Protection Regulation 2018 (GDPR).
Information that we collect
You may give your personal details to the Estate by purchasing a product or service in person, by phone or by using our website, engaging with us on social media, contacting us by any means, choosing to interact with competitions and surveys we send you. Commenting on or reviewing us, signing up for e-newsletters, giving a third-party permission to share with us the information they hold about you, applying for work either as an employee or contractor/supplier or, in some circumstances, your personal details may have been provided to us by another person, e.g., a referral.
We may collect data from publicly available sources (such as Land Registry) when you have given your consent to share information or where the information is made public as a matter of law.
Your image may be recorded on CCTV when you visit the grounds of the Estate, The Business Centre and Herdwork
By registering or using our services, you consent to the collection, use and transfer of your information under the terms of this policy.
Your personal data will be processed on a need-to-know, confidential basis by members of the team. It may also be processed by third parties such as third-party holiday booking companies, cloud backup providers, website hosting companies, IT managed service providers, privacy consultants, accountants, statutory bodies, and similar as required. Everyone with access to your data will treat it confidentially and in a GDPR compliant fashion.
We may also disclose your personal information to third parties:
- In the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets; or
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or to protect our rights, property, or safety, or that of our clients, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We only process data that is necessary for our purpose and we only keep it for as long as we have to.
The Regulations are particular about where data is processed and some internet and other services work through contracts with overseas companies. We will not transfer your data to ‘Third Countries’ however some of our processors may do and where this is the case we have ensured that they are using GDPR recognised means of doing this.
Our security measures include state of the art malware (anti-virus) endpoint protection, password protection, email encryption, computer monitoring, update management, staff training, intruder alarms, and CCTV.
Use of your Information
Your information will enable us to provide you with access to all parts of our website and to supply the goods or services you have requested. It will also enable us to bill you and to contact you where necessary concerning your orders. We will also use and analyse the information we collect so that we can administer, support, improve and develop our business.
In particular, we may use your information to contact you for your views on our services and to notify you occasionally about important changes or developments to the website or our services. Further, where you have consented, we might also use your information to let you know by email about other products and services which we offer which may be of interest to you. If you change your mind about being contacted in the future, please let us know.