Sandringham Estate
Privacy Notice

This privacy notice tells you what to expect when the Sandringham Estate (“Sandringham”) collects personal information. It applies to information we collect about:
• People who visit our site, and attend our events
• People who have an accident
• People captured on CCTV
• People who purchase Sandringham merchandise
• Visitors to our website
• People who email us via the Sandringham website
• Researchers and people who make enquiries about Sandringham
• People associated with objects at Sandringham
• People who contact our office
Your privacy is extremely important to us. Any personal information we gather from you will be used in accordance with the Data Protection Act 2018.

People who visit our site and events
When people purchase tickets from us, we may collect the following personal information if bookings are made over the telephone or through our website: Name, address, telephone number and email address. This personal data is retained for six financial years in line with HMRC requirements on the retention of financial records, and taxation records where Gift Aid is provided.

We will use your email address to confirm the booking.

Where food and drink is offered during the visit, we may collect information about allergens; where visits require step free access; we may collect vehicle details (registration, make/model, colour, registered owner); and where there are visitors with special needs, we may be provided with those details (visitors are not identified by name). This information is held until the visit is complete and then destroyed.

On occasions, there may be a photographer at an event. We would always ask your permission before taking any photograph which included your image. We may ask you to sign a model release form to confirm your consent in such cases.

We collect the personal information of individuals who request our Group brochure. This brochure is updated and posted out annually. These individuals may request their details be deleted from our group mailing list at any time by contacting the Public Enterprises department at the Estate Office by telephone, email or post.

People who have an accident
If a person has an accident whilst visiting one of our sites, we may ask them to complete an Accident Form on which we ask for their name, contact details, and the nature of their injury. We are obliged to do this under Health and Safety Regulations. Depending on the nature of the accident, we may also have to report it to Government regulators. We will retain personal information securely in locked facilities for six years in order to comply with relevant legislation.

People captured on CCTV
There are CCTV cameras around the Royal Residences, galleries and shops which have been installed for the purpose of the prevention and detection of crime. These may collect images of members the general public. The footage may be shared with the police when they are investigating an incident. The footage is kept securely and access to the images is strictly limited. The footage is normally retained for 30 days and then recorded over.

People who purchase Sandringham merchandise
When people purchase Sandringham goods either over our website or in one of our stores, we use a third party provider to process credit or debit card purchases. Our provider adheres to the international security standards within the credit card industry.
The site uses cookies for session/basket management only. IP addresses of visitors are logged and stored in log files used by our third party provider's hosting system (as is standard) to log all requests to the site since they are required for the security of the site and to prevent denial of service attacks and other attackers from using the site inappropriately.

When people purchase goods over our website, or over the telephone using our home delivery service, we ask them to provide their name, email address, telephone number, billing address and delivery address. We do this in order to process their orders and maintain a record of correspondence.

We retain this information as part of our financial records according to legislative requirements (at least 7 years) and whilst the customer continues to use our service.

Visitors to our website
When someone visits the Sandringham Estate website (https://www.sandringhamestate.co.uk/), we use cookies to keep track of your current session to personalise your experience and so that you may retrieve selected images at any time. You may experience technical difficulties in using this website if you have disabled cookies.

We may also collect information about where you are on the internet (e.g. the URL you came from, IP addresses, domain types like .co.uk and .com), your browser type, the country and telephone area code where your computer is located, the pages of our website that were viewed during your visit, the advertisements you clicked on, and any search terms that you entered on our website ('User Information').

We collect this information for statistical or survey purposes to improve this website and its services to you and to recognise you when you return to our website; to serve website content to you; to administer this website and to notify you about changes to our service; and for the detection of fraud.

Your personal information collected from your browsing activities is kept by Google for 50 months.

Researchers and people who make enquiries about the Sandringham Estate
From time to time, people may write to us about objects at Sandringham. We may keep their name and address or email address on file together with their enquiry and our response should there be any follow up correspondence or as part of keeping a record of our research in answering the enquiry. Alternatively, the correspondence will be securely destroyed. We would not share your personal data with any organisation outside the Sandringham Estate or Royal Household without your explicit consent.

Who do we share your personal information with?
We work with our technology partners in maintaining and improving our Sandringham Estate website.

They also provide us with reporting statistics via Google Analytics, and the software they develop and configure will serve cookies on our behalf to enable any site personalisation, online shopping and log-in functionality.

We use a third party provider for processing online payments taken via the website or over the phone.

Our website has an online shop which uses cookies for the purposes of providing a quality online shopping experience.

Aside from our technology partners and, when required, government regulators, your Personal Information will not be disclosed to other businesses or third parties outside the Royal Household group.

How do we protect your personal data?
We keep your information on a secure server and we fully comply with all applicable UK data protection and consumer legislation.

What are your rights?
As a data subject, you have a number of rights ("Subject Rights"). You can:
• access and obtain a copy of your data on request;
• ask us to change incorrect or incomplete data;
• ask us to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and
• object to the processing of your data where we are relying on our legitimate interests as the legal ground for processing

You can at any time request a copy of personal information held about you, or exercise any of your other Subject Rights by contacting the Estate Office, Sandringham, Norfolk, PE35 6EN or sending an email to enquiries@sandringhamestate.co.uk.

Changes to this privacy notice
Please check back frequently to see any updates or changes to our privacy notice.

How to contact us
The Data Controller for the Sandringham Estate is the Land Agent.

If you have questions regarding our privacy notice, you can contact us at:
The Estate Office
Sandringham
Norfolk
PE35 6EN
enquiries@sandringhamestate.co.uk