Introduction
Matlock Farm understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website and our premises. We will only collect and use personal data in ways that are described here and in a manner that is consistent with our obligations and your rights under the GDPR and applicable Data Protection Laws.
Who We Are?
Matlock Farm Park is a UK company that operates the Matlock Farm Park attraction which is a family friendly attraction that looks after a range of farm animals. We work hard to provide engaging and educational trips to our farm for visitors, catering for local schools and children’s parties also. Our site includes a café, indoor playcentre and in-house riding school.
You can contact us at:
Matlock Farm Park,
Jaggers Lane,
Matlock
DE4 5LH
T: 01246 590200
Company number: 12131393
What Does This Policy Cover?
Please read this Privacy Policy carefully to understand our practices regarding your personal data and how we will collect, use and store your personal data. This Privacy Policy applies only to your use of our website, premises and business.
What Data Do We Collect?
Information you give us:
As a general policy, no personal information is automatically collected from visitors to our website. Depending upon your use of our website or services, we may collect some or all of the following personal and non-personal data:
- name
- age range
- address
- records of your purchases/ bookings with us (if you purchase something)
- records of your donations and gift (if you donate to us)
- contact information such as email addresses and telephone numbers
- financial information such as credit / debit card numbers
- IP address
- cookies (see below for further information)
- dietary/ accessibility/ mobility information (if provided)
- CCTV footage of those visiting our premises (see below for further information)
- photographs and images of individuals
- company name/ address
- educational institute name/ address
- job title
We may also collect data where it is appropriate and relevant, for example:
- for purely business-related reasons, including managing relationships with third party and partner organisations.
Cookies
Please review our Cookie Policy for further information.
CCTV monitoring
Some areas of Matlock Park Farm are equipped with Closed Circuit Television (CCTV). We may collect your personal data through the operation of the CCTV cameras.
It is in our legitimate interests to use the CCTV as follows:
- In the detection and prevention of crime
- To safeguard all those who access our premises and facilities
- To investigate security, health & safety incidents.
Recorded images are held for up to 48 days and then destroyed. Any CCTV footage identified as relevant to a formally reported incident may be retained for longer. Any CCTV footage identified as relevant to a formally reported incident involving a minor is retained for up to 18 years from the date of the reported incident (where an investigation or claim arising from such a reported incident takes longer than 18 years to be processed, the CCTV footage identified as relevant to that incident may be retained for longer than 18 years).
These records will not be shared with third parties unless there is suspicion of a crime, in which case we may be required to share your information to comply with our legal and regulatory obligations.
How Do We Use Your Data?
All personal data is processed and stored securely, for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under the GDPR at all times.
Our use of your personal data will always have a lawful basis as follows:
- You have provided your consent to us using your personal data for direct marketing (i.e. to receive our newsletter) or to share your data with a third party for purposes of processing donations.
- It is necessary for our performance of a contract with you (where you have purchased something from our website, donated online or other business arrangements)
- It is necessary for compliance with a legal obligation to which we are subject (for example, to manage health and safety)
- It is within our legitimate interests for the proper administration of Matlock Farm Park, and to manage our operations (for example, for the detection and prevention of crime and safeguarding all those who access our premises and facilities)
- the processing is necessary for reasons of public interest including in the area of public health
Specifically, we may use your data for the following purposes:
- Providing and managing your access to our website
- Supplying tickets, gifts, annual passes or options to donate to you
- Communication with you via email or any other method that you have opted into
- Arranging events for your organisation/ institution/ company and communicating these details to you
- Assist government bodies or other competent authorities relating to public health requirements
How and Where Do We Store Your Data?
We are committed to ensuring that there are appropriate technical controls in place to protect your personal data including protection from misuse and unauthorised access.
- Personal data is only stored for marketing purposes when the user has opted in to engage with marketing, however there are exceptions to this in the form of the government’s Test and Trace data collection requirements
- Our website does store basic analytical data but this is anonymous
- We do not use an email marketing solution
- Our new online ticketing system is managed by market leading provider Digitickets
- The social media platforms we use store data in accordance with their terms.
Do We Share Your Data?
We only engage with third parties to supply some services. These may be for:
- payment processing:
- delivery of goods
- ticket processing
- search engine facilities
- audit, legal and financial management
- insurance purposes
- Health & Safety
- donations
Any relevant staff, consultants and/or external third party service providers acting on our behalf to access and use your personal data do so under contractual agreement.
We have reviewed their privacy policies and security arrangements and conducted any necessary risk assessments. We also enter into a Data Processing Agreement to ensure that third parties are as committed to the security of your personal data as we are.
All data is stored inside of the European Economic Area (“the EEA”).
In certain circumstances, we may be legally required to share certain data held by us, which may include your personal data, for example, where we are involved in legal proceedings, to comply with legal requirements, public interests or public health grounds, a court order, or a governmental authority.
Your Rights
As a data subject, you have the following rights under the GDPR, which this Policy and Our use of personal data have been designed to uphold:
Right to be informed:
This privacy notice explains how we collect, use and store your personal data
Right to access:
You have the right to find out if we are holding personal data on you. To exercise this right, you can make a “Subject Access Request” by contacting us as above
Right to rectification:
You have the right to have inaccurate personal data changed or removed. It is important to us that the information that we hold about you is accurate and up to date. Please let us know if any of your details have changed.
Right to erasure (the right to be forgotten):
You have the right to ask for your personal data to be erased from our records. However, this right is not absolute, and we can refuse this request, if this is the case, we will explain our reasons for our decision.
Right to restrict processing:
You have the right to ask us to restrict the processing of your data. This is an alternative to erasure and usually a temporary measure to limit the way we use your data whilst another data related matter is being resolved.
Right to data portability:
This right allows you to obtain and reuse the data that we hold on you in a machine-readable format for transmission to another data controller.
Right to object:
You have the right to object to us processing your personal data in some circumstances where we process data based on a legitimate interest or in the public interest.
Rights with respect to automated decision making and profiling.
We do not process your data in this way.
All requests, if valid, will usually be processed within a month. If we need longer to process your request, we will inform you at the earliest opportunity and in any case within one month from receiving your request. Please contact us at: info@matlockfarmpark.co.uk on any of these rights.
Further information on your data privacy rights is available on the website of the Data Protection Commission www.dataprotection.ie.
Changes to Our Privacy Policy
We may change this Privacy Policy from time to time. We recommend that you check this page regularly to keep up-to-date.