Privacy Policy
Introduction
This privacy policy explains how Gatcombe House Estate (“we,” “our,” or “us”) collects, uses, shares, and protects personal information when you visit our historic property, use our website, or interact with us in any way. We are committed to ensuring the privacy and security of your personal data in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Gatcombe House is a Grade II* listed Georgian manor house located in the heart of the Isle of Wight. Built in 1751 for Sir Edward Worsley, our historic estate is committed to preserving our heritage while providing visitors with an exceptional experience.
What information do we collect and why?
When you visit Gatcombe House
When you visit our property, we may collect:
• Your name and contact details (for booking tickets and managing your visit)
• Payment information (for processing admission fees and purchases)
• Images through CCTV (for security purposes)
• Photographs during events (with your consent)
• Accessibility requirements (to provide appropriate assistance)
When you purchase from our gift shop or online store
When you make a purchase from us, we collect:
• Your payment card details (to process your payment)
• Your email address (for online purchases to send order confirmations)
• Your telephone number (for online purchases to contact you regarding your order)
When you book an event or activity
When you book an event or activity with us, we collect:
• Your full name and the names of anyone participating
• Your email address (to send booking confirmations)
• Your telephone number (to contact you regarding your booking)
• Your payment details (to process your payment)
When you contact us with enquiries
When you contact us with an enquiry, we collect:
• Your name (to process your enquiry)
• Your preferred contact details (to respond to your enquiry)
• The details of your enquiry (to respond appropriately)
When you subscribe to our newsletter
If you subscribe to our newsletter, we collect:
• Your name
• Your email address
• Your postcode (optional)
Our legal basis for processing your data
We process your personal data on the following legal grounds:
• Contract: When processing is necessary for the performance of a contract with you (such as when you purchase tickets or book an event)
• Legitimate interests: When we have a legitimate interest to process your data (such as maintaining records of your visits to better understand and support your relationship with us)
• Consent: When you have given us consent to process your data (such as for marketing communications or photography)
• Legal obligation: When we are required by law to process your data
Who has access to your data and who we share it with
Access to your personal data is restricted to Gatcombe House staff and volunteers on a need-to-know basis only. We will never sell your data to third parties.
We may share your information with:
• Payment processors (for processing secure card payments)
• Email service providers (for delivering newsletters)
• Event booking providers (for facilitating bookings)
• IT service providers (for maintaining our systems)
Where these third parties act as data processors, we have appropriate contracts in place requiring them to process your data only on our instructions and to keep it secure.
Data transfers outside the UK
In some cases, your data may be processed outside the UK. Where this occurs, we ensure adequate safeguards are in place to protect your personal data, including the use of Standard Contractual Clauses and International Data Transfer Agreements.
How long we keep your personal data
We retain your personal data for different periods depending on the purpose:
• Contact details and visit records: 6 years from the end of our financial year
• Credit/Debit Card payments: Until transaction completion
• CCTV images: One calendar month (unless needed for investigating incidents)
• Photographs/video footage: Permanently unless you request deletion
• Marketing preferences: Until you withdraw consent
Your rights regarding your personal data
Under data protection law, you have the right to:
• Request access to your personal data
• Request correction of inaccurate data
• Request erasure of your data
• Object to processing of your data
• Request restriction of processing
• Request transfer of your data (data portability)
• Withdraw consent at any time
To exercise any of these rights, please contact our Data Protection Officer at george.watts@gatcombeestate.com.
Cookies and website tracking
Our website uses cookies to enhance your browsing experience and provide certain functionality. We use analytics cookies to understand how visitors use our site, helping us to improve it. You can manage your cookie preferences through your browser settings.
Photography and filming
If we plan to take photographs or film individuals or small groups at an event, we will ask for your consent before doing so. For large events, we will inform you that photography or filming is taking place at the point of booking and through clear signage on the day.
CCTV
We operate CCTV cameras at our property for security purposes. Appropriate signage is in place where CCTV is in operation. CCTV footage is retained for one calendar month unless a crime or incident has been reported and the images need to be retained for investigation purposes.
Changes to this privacy policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website and, where appropriate, notify you by email.
Contact us
If you have any questions or concerns about our privacy policy or how we handle your personal data, please contact us at:
Data Protection Officer
Gatcombe House Estate
Gatcombe
Isle of Wight
email: george.watts@gatcombeestate.com
While email is our preferred contact method for data protection inquiries, if you need to speak with us by phone, please include your contact number in your email and we will call you back.
Last updated: May 11, 2025