Privacy

At Blenheim, we take the security and privacy of data very seriously. Our security measures are continuously maintained and adhered along with our privacy policy below. Blenheim is the data controller and our registered address is:

Blenheim Palace, Woodstock, Oxfordshire, OX20 1PP

Blenheim respects your privacy and will take all steps to protect the personal information we hold about you.

Our visitors

Booking your Blenheim tickets and purchasing online is quick, easy, convenient and safe. Blenheim Palace makes every effort to maintain customer confidentiality when securing an online payment. This includes ensuring the security of your credit card details and other personal information

We collect information about you (‘your information’):

• Personal information such as your name, address, telephone number, date of birth, age, your photo and email address, car registration and any other information that you provide to us freely when you register with us either in person or online when you purchase our tickets, register for free Blenheim WiFi, apply for your Annual Pass, provide feedback or when you send us an email.
• We use Auto Number Plate Recognition (ANPR) technology for security and protection of our site. If you enter your car registration number into our fast track system, we will link your transaction and or membership to enable us to identify your details faster when you arrive. 
• We will only collect children’s data which is provided and consented by the parent or someone with parental responsibility.
• Personal information collected while making group bookings, events, weddings or conferences. This information is used to administer the event and your account only. You will not receive any marketing emails unless you subscribe to our newsletter. We do not share your information to any third party. Our sales activities will comply with the Fair Processing principle.
• Information that does not identify you, but which relates to your use of the Website such as the pages visited on our website and the dates and times of your visit. We use cookies’ (for more information about cookies see our Cookies Policy below).
• Payment details: Payment card details are not stored by Blenheim Palace. The credit card machines and the website do not capture any payment information.
• We use Formsite, a third party form creation tool to collect information for enquiries including filming, property, hospitality, bursary and HR applications. 

How do we protect your information? 
We know how important it is to protect and manage your personal data.

• Your information is stored on secure servers in the European Economic Area (‘EEA’). Where we transfer and store the information outside the EEA area, we will ensure that appropriate controls are in place to ensure your information is protected.
• We take all the reasonable precautions to keep our network secure by using a well-configured firewall and antivirus software.

How do we use the information that you provide us with?

We use your Information for the purposes of:

• Contacting you (by email or post) with information about our products and future events and to send regular newsletters. Please note that this will only be done if you have opted in to receive email communication at the point of registration or when making a booking. You may notify us at any time if you do not wish to receive these offers by clicking on the ‘UNSUBSCRIBE’ link in those emails, or by contacting us at our address. Please note that it can take up to 72 hours for our systems to update your change in subscription status.
• We will not use any children’s data for any marketing purposes. This information will only be used for the purpose of issuing an annual pass. Our Education department welcomes children from various local schools, we will only take their basic information for the purposes of administering their attendance.
• Personal information will be stored on secure network systems and will be used only for our marketing purposes if consented, and for operational purposes.
• Facilitating restaurant and catering bookings.
• Conducting promotions, competitions or prize draws that you have entered using the website, or via social media. We may also invite you to complete surveys or provide us with feedback. Occasionally a third party organisation will have access to data to help us analyse information held by us for marketing purposes.
• Making the website available to you by recognising the IP address of your computer and any preferences you may have indicated on earlier visits.
• Monitoring visitor traffic on our website and conducting analysis on the performance of our website so that we can improve the user experience.
• When you register for free Blenheim WiFi and provide your email address, we will send you a transactional email, offering you to opt into our mailing list.
• The information you submit within any form is used in relation to the form and we do not use any of your information for marketing purposes.

Our Suppliers

• We hold information about our Suppliers as it is necessary for us to conduct our business activities and purchase supplies. We do not share our suppliers’ information with any third party. Suppliers’ include our contractors and subcontractors.
• We supply trade/business references as part of our new supplier procedure.

Our tenants

• We hold information about our tenants as it is necessary for us to conduct our contractual obligations. We do not use our tenants’ information for any marketing purposes. At times, we may require to pass on the tenants’ details to our approved subcontractors and authorities in order to fulfil our contractual obligations. We will take prior consent except during emergencies.

Our Job applicants, current and former employees

• When individuals apply to work with us, we will only use the information they supply to us to process their application.
• Once a person has taken up employment with us, we will compile a file relating to their employment. This information will only be used for purposes directly relevant to that person’s employment.
• Our GDPR Data Protection Policy is available to all our current employees via our Employee handbook.

CCTV

• We operate CCTV at various locations around the estate, especially at the car parks. This is required for the prevention and detection of crime and for protecting the safety of customers. It will not be used for other purposes. We conduct an annual review of our use of CCTV. The recorded images are programmed to be deleted after a reasonable time.

How long do we retain your information?

Customers

• For a reasonable period, after you have stopped being an active customer. You have options to unsubscribe to our mailing list. After this time, the data we hold will either be suppressed or deleted or retained providing you have asked us to do so.

Suppliers

• For a reasonable period, after you have stopped being an active supplier. After this time, the data we will be held securely stored on our networks in accordance with our statutory obligations.

Tenants

• For a reasonable period, after you have stopped being an active tenant. After this time, the data will be held securely stored on our networks in accordance with our statutory obligations.

Job applicants, current and former employees

• Personal information about unsuccessful candidates will be held for up to six months after the recruitment exercise has been completed, it will then be destroyed or deleted.
• Once employment has ended, we will retain the file in accordance with our statutory obligations and the information saved on our secured networks.

Your rights:

Customers, suppliers, tenants, employees, ex-employees and job applicants

• Right to be informed - You have the right to ask for information we hold for you.  Please request for our Subject Access Procedure and a Subject Access Request form.
• Right to Rectification -  The data we hold will be corrected when we are notified of any changes or errors.
• Right to be forgotten - Information we hold for you will no longer be processed if requested to do so.
• Right to complain to ICO – (Information Commissioners’ Office
• We are happy to answer your queries or concerns regarding your data. please contact us at dataprotection@blenheimpalace.com

 Changes to this policy

• Because we are constantly improving our website there may be developments in how we use your data. We will make sure we comply to the principles of General Data Protection regulation.
• All such developments will be promptly notified to you in this policy. The contents of this notice will be reviewed periodically, and any changes will be posted on this page, therefore you are advised to refer to it from time to time.
• Blenheim entities are registered on the data protection register with ICO.

Cookies