Old Thorns processes personal data as the data controller, as defined in the General Data Protection Regulation (GDPR).

Visitors To Our Website

Legal Basis for Processing: Consent
Retention Period: No more than 36 months

When someone visits www.oldthorns.com we use a third-party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to monitor and track trends such as visitors to the site, so we can make improvements. This information is anonymous.

We also use cookies on our website. Cookies are small data files which the website places on your computer or mobile device when you first visit the website. They can help us analyse how well our website is performing so we can make improvements. They can also improve your browsing experience by suggesting recommendations based on your browsing history. You can control, manage, disable and delete cookies in your browser’s settings.

When You Make An Enquiry

Legal Basis for Processing: Legitimate Interest
Retention Period: As long as strictly necessary for the purpose in which it was collected.

If you make an enquiry on our website, we will collect and process your data to respond to your enquiry. This is likely to include your name and contact information. Your data may be shared between departments at Old Thorns to ensure your enquiry is responded to accurately. You will have the option to opt-in to additional marketing communications. If you do so, your data will be retained for this purpose (please see email newsletters and offers below).

E-mail Newsletters and Offers

Legal Basis for Processing: Consent
Retention Period: While you are a registered subscriber – you can unsubscribe and remove your data at any time.

Subscription to our email newsletters and offers is completely optional. We never place you on an email list automatically – instead you will need to opt in to receive these communications, either by filling in our newsletter form or checking an opt-in box on an enquiry, booking or competition form. We use a third-party provider, Revinate, to deliver our email newsletters and offer details. We gather statistics about email opening and clicks using industry standard technologies to help us monitor and improve our emails. For more information, please see Revinate’s Privacy Policy.

Online Shop Purchases

Legal Basis for Processing: Contract
Retention Period: As long as strictly necessary for the purpose in which it was collected.

We use a third-party provider, Lightspeed, to process and manage online product sales. We use your personal information such as email, phone and address to process your purchases. Payments are handled by Lightspeed and Old Thorns do not have access to any payment information within the Lightspeed system. Your personal data such as name, email and address are held within the Lightspeed system to process your sale. Please refer to Lightspeed's Privacy Policy for further information.

Information from 3rd parties

Legal Basis for Processing: Contract
Retention Period: As long as strictly necessary for the purpose in which it was collected.

If you book your stay with us through a 3rd party such as an online travel agent, golf company, spa company they will pass on your details to us so that we can perform the contract. Your details will only be used to carry out the request/booking unless you have opted in to receive additional marketing communications.

Other Uses of Your Data

Legal Basis for processing: Legitimate Interest
Retention Period: As long as strictly necessary for the purpose in which it was collected.

We may process personal information for certain legitimate business purposes, which include some or all of the following:

• Where the processing enables us to enhance, modify, personalise or otherwise improve our services/communications for the benefit of our customers
• to identify and prevent fraud
• to understand how people interact with our websites
• to determine the effectiveness of promotional campaigns advertising

Whenever we process data for these purposes we will ensure that we always keep your personal data rights in high regard and take account of these rights at all times.