Who we are
This is the privacy statement of The Conchra Charitable Trust & The Eilean Donan Castle Trading Company.
This privacy statement explains how we collect and use personal information about you.
What personal information we collect
In order to carry out the services as a visitor attraction and accommodation provider we collect information from you as follows:
- Through an email enquiry, from our website, we will store your email address
- Through an online shop or flag purchase we will store your contact details and address
- When booking our holiday cottage or an apartment we will store your contact details and address as well as any special requests you may have for us.
- When booking a wedding, we will store your contact details and address as well as select other information to help your wedding ceremony to run well (this includes the celebrants name, pipers/musicians name, photographers name, florists name and location of the reception).
Where we collect personal information from
We collect our information from our website for example when you make a purchase from our online shop, book an apartment or request information via the contact form on the website. We collect two kinds of information from visitors: your details (through making a purchase in the online shop & booking an apartment or submitting an enquiry through the contact us form) and site usage information, using cookies and page tagging techniques.
When conducting business with ourselves, we will collect your personal information as detailed below in order for us to provide the requested services. This data will be kept securely for a maximum period of 6 years once your business with us is concluded.
How we use your personal information
- Deliver the products or services requested by you, the customer
- Communication by post, email or telephone
- Understand needs and how they may be met
- Maintain records
- Process financial transactions
Who we share your personal information with
We do not share any personal information with any third parties with the exception of payment processing companies to allow them to process said transactions, however personal information will be transferred to, and stored at a destination outside the European Economic Area (EEA”). At present the personal data is being transferred, stored and processed in the United States of America or Canada. Different countries have different data protection laws, some of which provide more protection than others. Any information which is stored out with the EEA will be stored by a company which complies with GDPR regulations and in addition is registered and complies with the Privacy Shield scheme or equivalent. By providing us with your information you agree to such international data transfer and storage in accordance with the terms of this Policy.
How long we retain your personal information for
We will never keep your information for a period longer than 6 years after your business with ourselves is concluded
Access to your information – You have the right to request a copy of the personal information about you that we hold.
Correcting your information – We want to make sure that your personal information is accurate, complete and up to date and you may ask us to correct any personal information about you that you believe does not meet these standards.
Deletion of your information – You have the right to ask us to delete personal information about you where:
- You consider that we no longer require the information for the purposes for which it was obtained.
- We are using that information with your consent and you have withdrawn your consent – see Withdrawing consent to using your information below.
- You have validly objected to our use of your personal information – see Objecting to how we may use your information below.
- Our use of your personal information is contrary to law or our other legal obligations.
Objecting to how we may use your information – You have the right at any time to require us to stop using your personal information for our direct marketing purposes.
Restricting how we may use your information – In some cases, you may ask us to restrict how we use your personal information. This right might apply, for example where we are checking the accuracy of personal information about you that we hold or assessing the validity of any objection you have made to our use of your information. The right might also apply where this is no longer a basis for using your personal information but you don’t want us to delete the data. Where this right is validly exercised, we may only use the relevant personal information with your consent, for legal claims or where there are other public interest reasons to do so.
Automated processing – If we use our personal information on an automated basis to make decisions which significantly affect you, you have the right to ask that the decisions be reviewed by an individual to whom you may make representations and contest the decision. This right only applies where we use your information with your consent or as part of a contractual relationship with you.
Withdrawing consent to using your information – Where we use your personal information with your consent you may withdraw that consent at any time and we will stop using your personal information for the purpose for which consent was given.
Please contact us in any of the ways set out in the Contact information and further advice section if you wish to exercise any of these rights.
Though we make every effort to preserve user privacy, we may need to disclose personal information when required by law wherein we have a good-faith belief that such action is necessary to comply with a current judicial proceeding, a court order or legal process served on our website.
Third Party Intermediaries
We use an online payment processing company for online purchases from our shop which is fully compliant with GDPR. For our apartment bookings, we also use an online payment processing company which is GDPR compliant & a hotel booking service who are GDPR compliant and a registered member of Privacy Shield.
Changes to our privacy statement
We keep this privacy statement under regular review and will place any updates on this website. Paper copies of the privacy statement may also be obtained by writing to:
The Data Security Administrator,
Eilean Donan Castle
This privacy statement was last updated on 17 May 2018.
Contact information and further advice
For further information, please contact:
The Data Security Administrator,
Eilean Donan Castle
We seek to resolve directly all complaints about how we handle personal information, but you also have the right to lodge a complaint with the Information Commissioner’s Office, whose contact details are as follows:
Information Commissioner’s Office
Telephone – 0303 123 113 (local rate) or 01625 545 745
Website – https://ico.org.uk/concerns