Privacy Policy

Last updated: [20.09.25]

Brownlow Castle respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our website and services. It also outlines your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Brownlow Castle (“we”, “our”, “us”) operates the Brownlow Castle website and provides services including castle tours, Afternoon Tea experiences, wedding enquiries, and the sale of gift vouchers.

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at:

Email: info@brownlowcastle.com
Post: Brownlow Castle, Windsor Avenue, Lurgan, Craigavon, Northern Ireland BT67 9BJ

We are the “data controller” of the personal data collected through our website.

2. Information We Collect

We may collect and process the following types of personal data:

• Identity Data: name, title, contact details (email address, phone number, postal address).

• Booking Data: details of your tour, Afternoon Tea, or gift voucher purchase, including date and time of bookings.

• Payment Data: processed securely through PayPal. We do not store card details ourselves.

• Enquiry Data: information you provide when completing the contact form or wedding enquiry form.

• Technical Data: IP address, browser type, and browsing activity collected via standard website analytics.

3. How We Collect Your Data

We collect data in the following ways:

• Directly from you when you complete a booking, purchase, or enquiry form.

• Through third-party services integrated into our site:

  • PayPal (payment processing)

  • Acuity Scheduling (booking and scheduling system)

4. How We Use Your Data

We use your personal data to:

• Process and confirm your bookings and purchases.

• Respond to your enquiries (including wedding enquiries).

• Send you service-related communications (e.g. booking confirmations, reminders, updates).

• Provide customer support.

• Maintain records for legal, tax, and accounting purposes.

• Improve our website and services.

We will only use your personal data when the law allows us to, including:

• To perform a contract with you (e.g. delivering your booking or purchase).

• Where necessary to comply with a legal obligation.

• Where it is in our legitimate interests and your rights do not override these.

5. Sharing Your Data

We may share your data with:

• PayPal (to process payments securely).

• Acuity Scheduling (to manage bookings and scheduling).

• Our trusted IT and website service providers who support the functioning of our website.

We do not sell or rent your personal data to third parties.

Some of our third-party providers may store or process data outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place to protect your data in line with UK GDPR requirements.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

• Booking and purchase records: up to 7 years (for tax and accounting purposes).

• Enquiries: up to 12 months.

• Technical/analytics data: as per provider retention periods.

7. Your Rights

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you.

• Request correction of any inaccurate or incomplete data.

• Request erasure of your personal data, where applicable.

• Object to or restrict our processing of your data in certain circumstances.

• Request data portability.

• Withdraw consent at any time (where consent is the legal basis for processing).

To exercise your rights, please contact us at [Insert Contact Email].

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled.

8. Data Security

We have put in place appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised use, access, alteration, or disclosure.

9. Cookies and Website Analytics

Our website may use cookies and analytics tools to improve user experience and monitor website performance. You can manage your cookie preferences through your browser settings.

10. Updates to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the date of the last update.