Privacy

At Blenheim, we take the security and privacy of data very seriously. Our security measures are continuously maintained and adhered along with our privacy policy below. Blenheim is the data controller and our registered address is:

Blenheim Palace, Woodstock, Oxfordshire, OX20 1PP

Blenheim respects your privacy and will take all steps to protect the personal information we hold about you.

Our visitors

Booking your Blenheim tickets and purchasing online is quick, easy, convenient and safe. Blenheim Palace makes every effort to maintain customer confidentiality when securing an online payment. This includes ensuring the security of your credit card details and other personal information

We collect information about you (‘your information’):

• Personal information such as your name, address, telephone number, email address, and any other information that you provide to us freely when you register with us either in person or online when you purchase our tickets, register for free Blenheim WiFi, apply for your Annual Pass, provide feedback or when you send us an email.
• We use Auto Number Plate Recognition (ANPR) technology for security and protection of our site. 
• We will only collect children’s data which is provided and consented by the parent or someone with parental responsibility.
• Personal information collected while making group bookings, events, weddings or conferences. This information is used to administer the event and your account only. You will not receive any marketing emails unless you subscribe to our newsletter. We do not share your information to any third party. Our sales activities will comply with the Fair Processing principle.
• Information that does not identify you, but which relates to your use of the Website such as the pages visited on our website and the dates and times of your visit. We use cookies’ (for more information about cookies see our Cookies Policy below).
• Payment details: Payment card details are not stored by Blenheim Palace. The credit card machines and the website do not capture any payment information.
• We use Formsite, a third party form creation tool to collect information for enquiries including filming, property, hospitality, bursary and HR applications. 
• Over £564 million in tax relief is missed every year by charities and donors. We have partnered with Swiftaid to help tackle this. Swiftaid is authorised to create declarations on behalf of millions of UK taxpayers and provides a service that can add Gift Aid on eligible donations made to The Blenheim Palace Heritage Foundation in the current tax year. Swiftaid is a third party and uses your personal data in accordance with its own privacy policy and donor terms. Your Swiftaid account can be managed directly with Swiftaid via account management.

How do we protect your information? 
We know how important it is to protect and manage your personal data.

• Your information is stored on secure servers in the European Economic Area (‘EEA’). Where we transfer and store the information outside the EEA area, we will ensure that appropriate controls are in place to ensure your information is protected.
• We take all the reasonable precautions to keep our network secure by using a well-configured firewall and antivirus software.

How do we use the information that you provide us with?

We use your Information for the purposes of:

• Contacting you, where you have given us your consent to do so, with information about our products, fundraising initiatives, future events and to send regular newsletters. You may notify us at any time if you do not wish to receive these communications by clicking on the ‘UNSUBSCRIBE’ link in our emails, or by contacting us at our address.
• We will not use any children’s data for any marketing purposes. This information will only be used for the purpose of issuing an annual pass. Our Education department welcomes children from various local schools, we will only take their basic information for the purposes of administering their attendance.
• Personal information will be stored on secure network systems and will be used only for our marketing purposes if consented, and for operational purposes.
• Facilitating restaurant and catering bookings.
• Conducting promotions, competitions or prize draws that you have entered using the website, or via social media. We may also invite you to complete surveys or provide us with feedback. Occasionally a third party organisation will have access to data to help us analyse information held by us for marketing purposes.
• Making the website available to you by recognising the IP address of your computer and any preferences you may have indicated on earlier visits.
• Monitoring visitor traffic on our website and conducting analysis on the performance of our website so that we can improve the user experience.
• When you register for free Blenheim WiFi and provide your email address, we will send you a transactional email, offering you to opt into our mailing list.
• The information you submit within any form is used in relation to the form and we do not use any of your information for marketing purposes.

Our Suppliers

• We hold information about our Suppliers as it is necessary for us to conduct our business activities and purchase supplies. We do not share our suppliers’ information with any third party. Suppliers’ include our contractors and subcontractors.
• We supply trade/business references as part of our new supplier procedure.

Our tenants

• We hold information about our tenants as it is necessary for us to conduct our contractual obligations. We do not use our tenants’ information for any marketing purposes. At times, we may require to pass on the tenants’ details to our approved subcontractors and authorities in order to fulfil our contractual obligations. We will take prior consent except during emergencies.

Our Job applicants, current and former employees

• When individuals apply to work with us, we will only use the information they supply to us to process their application.
• Once a person has taken up employment with us, we will compile a file relating to their employment. This information will only be used for purposes directly relevant to that person’s employment.
• Our GDPR Data Protection Policy is available to all our current employees via our Employee handbook.

CCTV

• We operate CCTV at various locations around the estate, especially at the car parks. This is required for the prevention and detection of crime and for protecting the safety of customers. It will not be used for other purposes. We conduct an annual review of our use of CCTV. The recorded images are programmed to be deleted after a reasonable time.

How long do we retain your information?

Customers

• For a reasonable period, after you have stopped being an active customer. You have options to unsubscribe to our mailing list. After this time, the data we hold will either be suppressed or deleted or retained providing you have asked us to do so.

Suppliers

• For a reasonable period, after you have stopped being an active supplier. After this time, the data we will be held securely stored on our networks in accordance with our statutory obligations.

Tenants

• For a reasonable period, after you have stopped being an active tenant. After this time, the data will be held securely stored on our networks in accordance with our statutory obligations.

Job applicants, current and former employees

• Personal information about unsuccessful candidates will be held for up to six months after the recruitment exercise has been completed, it will then be destroyed or deleted.
• Once employment has ended, we will retain the file in accordance with our statutory obligations and the information saved on our secured networks.

Your rights:

Customers, suppliers, tenants, employees, ex-employees and job applicants

• Right to be informed - You have the right to ask for information we hold for you.  Please request for our Subject Access Procedure and a Subject Access Request form.
• Right to Rectification -  The data we hold will be corrected when we are notified of any changes or errors.
• Right to be forgotten - Information we hold for you will no longer be processed if requested to do so.
• Right to complain to ICO – (Information Commissioners’ Office
• We are happy to answer your queries or concerns regarding your data. please contact us at dataprotection@blenheimpalace.com

 Changes to this policy

• Because we are constantly improving our website there may be developments in how we use your data. We will make sure we comply to the principles of General Data Protection regulation.
• All such developments will be promptly notified to you in this policy. The contents of this notice will be reviewed periodically, and any changes will be posted on this page, therefore you are advised to refer to it from time to time.
• Blenheim entities are registered on the data protection register with ICO.

Cookies