Privacy Policy/Notice
Who are we?
Arundel Castle Trustees Ltd (the ‘Company’), including our subsidiary Arundel Castle Enterprises Ltd (‘ACE’), is fully committed to the protection of your rights and your privacy. The Company (registered number 1269400) is a registered Charity (number 271833) and our subsidiary ACE is a limited company (registered number 01521264).
Our approach to Privacy
We are committed to protecting the privacy of our visitors, staff, contractors, neighbours and all who legitimately access our site. We take your privacy seriously and treat all the information you give us with the greatest care and:
- Are clear why we need to collect your personal information and what we are going to use it for.
- Only collect the information we need to in order to provide the best service
- Undertake never to sell your personal information or share it with other organisations for their own marketing purposes
- Undertake to take good care of your personal information, whether it is held in paper or electronic records and to make sure it is up to date, safe and secure at all times
- Require the same high standards from any suppliers/partners who need to handle your personal information (eg credit card processing, IT systems and software providers and those who host our website).
The information we collect
This includes information about visitors, website & social media visitors, staff, volunteers, contractors and other stakeholders. The Castle’s website automatically collects details about the pages that you visit.
In choosing to share your personal information with us you will be agreeing to our collection and use of your information as described in this document.
We use the information you share with us to:
- Undertake administration of visitor bookings and payments
- Manage the Castle and Gardens effectively
- Ensure the security of all who visit the Castle and gardens (including the use of CCTV which records to help protect and detect crime)
- Manage staff & volunteers who work at the Castle, including those who apply to work at the Castle
- Liaise with HMRC in order to process Gift Aid payments that visitors may choose to make
The overriding principle of why we collect your data is to provide a visitor service (necessary for contract), to comply with legal obligations and where it is necessary for our legitimate interests (or those of third parties) and where your interests and fundamental rights do not override those interests. In limited situations information may be use to protect you or someone else’s vital interests or in the public interest (eg to protect a young person).
How do we keep your information safe?
We apply the same principles to the storage of paper and electronic personal information. This includes ensuring that it is securely stored with controlled access. Any personal data that is transferred (eg payment information) is done so securely. Personal data is not kept longer than is necessary for the purposes for which it was processed, in accordance with our statutory and other duties. Information that is disposed of, is always done securely. Our Ticket Office and other staff who interact with visitors who have reserved tickets will not divulge your personal information beyond what is needed operationally.
Other information
Some of our Historical Archive information is available as detailed on the Castle’s website. Information is restricted and for example is not available/accessible to researchers during a person’s lifetime, but the records will be maintained.
You have the right (but with some statutory exemptions) to understand the information we hold about you, to correct information held and in many circumstances to have information removed. Please contact the Company Secretary at Arundel Castle, Arundel, West Sussex BN18 9AB or email visits@arundelcastle.org for further information on your rights or if you wish to exercise them. In the UK the Information Commissioner’s Office regulates data protection and advice can be found at www.ico.org.uk.
This policy is updated from time to time in order to make sure that we are providing the latest information relating to your personal information. The policy was last reviewed in February 2026.
