Introduction
The Invercauld Estate takes your privacy very seriously.
This privacy policy provides you with information about how the Invercauld Estate collects and processes your personal data through your use of this website, including any data you may provide through this website, when you contact us and submit an enquiry or when you visit and take part in activities on the Invercauld Estate.
In this policy when we say “we”, “us” or “our”, we are referring to the Invercauld Estate. Our use of your personal data is subject to your instructions, the Data Protection Act 2018, the UK General Data Protection Regulation.
Contact information for all privacy matters is the Estates Office and the contact details are set out below in section entitled “Complaints” below.

The data we collect from you
We may collect information from you in the course of our operation of the Invercauld Estate, including when you take part in activities or other services, when you contact or request information from us, when you use our website or as a result of your relationship with one or more of our staff. The personal information we may collect about you includes:

• Contact/identity information such as your name, title, address (business and/or home), telephone number, mobile phone number, job title, gender.
• Business information provided in the course of the client, business or contractual relationship between you or your organisation.
• Technical Information about your use of our IT, communication and other systems including about your use of our website.
• Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, bank and building society details.
• Information about your visits to our premises and/or provided to us for the purposes of attending meetings and events, including information about access or dietary requirements.
• Marketing information including information regarding your preferences where it is relevant.

How we use your personal data
We may use the information collected from you when you submit an enquiry, make telephone contact and/or to email you in response to your enquiry. We will only use your personal data when the law allows us to. Most commonly, we will use your personal your personal data in the following circumstances:
• Where we need to perform the contract we are about to enter into or have entered into with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.

Some personal data may be collected about you from the forms and surveys you complete, from records of our correspondence and phone calls and details of your visits to our website, including but not limited to personally identifying information like Internet Protocol (IP) addresses. We may from time to time use such information to collect statistics about the behaviour of visitors to our website.

We do not intentionally collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

Purposes for which we will use your personal data
Under data protection law, we can only use your personal data if we have a proper reason for doing so. This will be for one of the following reasons:

• For the performance of our contract with you or to take steps at your request before entering into a contract, for example because processing is necessary for the performance of a client instruction;
• To comply with our legal and regulatory obligations;
• For our legitimate interests or those of a third party;
• For the establishment, exercise or defence of legal claims or proceedings; or
• Where you have given consent.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own.

Marketing
We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising.
Generally, we do not rely on consent as a legal basis for processing your personal data although we may obtain your consent before sending third party direct marketing communications to you either via telephone or email. If you opt in to receive marketing information, we shall maintain a marketing dialogue with you until you either opt out (which you can do at any stage) or we decide to desist in promoting our services.

Disclosure
Invercauld Estate may on occasions pass your personal data to third parties exclusively to perform work on its behalf. Invercauld Estate requires these parties to agree to process this information based on our instructions and requirements consistent with this Privacy Notice and applicable data protection laws.
We may disclose your personal data to meet legal obligations, regulations or valid governmental request. We may also enforce our Terms and Conditions, including investigating potential violations of our Terms and Conditions to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of Invercauld Estate, our clients and/or the wider community.

Retention Policy
We will process personal data during the duration of any contract and will continue to store only the personal data needed by law for seven years after the contract has expired to meet any legal obligations. After seven years any personal data not needed, will be deleted.

Data security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Data storage
Data is held in The United Kingdom using different (multiple) servers. Invercauld Estate may sometimes as part of normal website hosting processes store personal data outside of the UK and the European Economic Area (EEA).

Your rights as a data subject
At any point whilst Invercauld Estate is in possession of or processing your personal data, all data subjects have the following rights:

• Right of access – you have the right to request a copy of the information that we hold about you.
• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
• Right to restriction of processing – where certain conditions apply you have a right to restrict the processing of your personal information.
• Right of portability – you have the right to have the data we hold about you transferred to another organisation.
• Right to object – you have the right to object to certain types of processing such as direct marketing.
• Right to object to automated processing, including profiling – you also have the right not to be subject to the legal effects of automated processing or profiling.

In the event that Invercauld Estate refuses your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge.

You can request the following information:
• Contact details of the data protection officer, where applicable.
• The purpose of the processing as well as the legal basis for processing.
• If the processing is based on the legitimate interests of Invercauld Estate or a third party such as one of its clients, information about those interests.
• The categories of personal data collected, stored and processed.
• Recipient(s) or categories of recipients that the data is/will be disclosed to.
• How long the data will be stored.
• Details of your rights to correct, erase, restrict or object to such processing.
• Information about your right to withdraw consent at any time.
• How to lodge a complaint with the UK regulator for data protection issues (Information Commissioner’s Office (ICO)).
• Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether you are obliged to provide the personal data and the possible consequences of failing to provide such data.
• The source of personal data if it wasn’t collected directly from you.
• Any details and information of automated decision making, such as profiling, and any meaningful information about the logic involved, as well as the significance and expected consequences of such processing.

Identification will be required to access what personal data is held about you.
Invercauld Estate will accept the following forms of ID when information on your personal data is requested: a copy of your national ID card, driving license, passport, birth certificate and a utility bill not older than three months. A minimum of one piece of photographic ID listed above and a supporting document is required. If Cawdor Estate is dissatisfied with the quality, further information may be sought before personal data can be released.
All requests should be made to office@invercauld.estate or by phoning +44 (0) 13397 41224 or writing to us at the address further below.

Complaints
In the event that you wish to make a complaint about how your personal data is being processed by Invercauld Estate or its partners, please contact our Estate Office using the contact details noted below. You also have the right to make a complaint at any time to the ICO (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.

The details for each of these contacts are:

The Estate Office
4 The Keiloch
Invercauld
BRAEMAR
Ballater
Aberdeenshire
AB35 5TW
Telephone +44 (0) 13397 41224
or email office@invercauld.estate

Data Protection Regulator
Information Commissioner’s Office
Wycliffe House,
Water Ln
Wilmslow
SK9 5AF
Tel: 0030 123 1113

External links
External links are provided as a convenience and for informational purposes only; they do not constitute an endorsement or an approval by Invercauld Estate of any of the products, services or opinions of the corporation or organisation or individual. Invercauld Estate bears no responsibility for the accuracy, legality or content of the external site or for that of subsequent links. Contact the external site for answers to questions regarding its content.

Photography and Video
The photography and videos used on this website include images from the media libraries of Visit Scotland, Adobe and Pixabay. The photographers retain the copyright of these images.
Where appropriate, photographers are identified in the Alt Tags of the individual photos. Videos are embedded and remain at their sites of origin, which are Youtube and Vimeo.
Should the licence conditions change, or if you are a photographer or videographer and wish for your images to be removed from this website, please contact us at office@invercauld.estate, and they will be deleted.

Cookies
Invercauld Estate's websites use cookies, which is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns. We may use both “session” cookies and “persistent” cookies on the website. We will use the session cookies to: keep track of you whilst you navigate the website. We will use the persistent cookies to: enable our website to recognise you when you visit. Session cookies will be deleted from your computer when you close your browser. Persistent cookies will remain stored on your computer until deleted or until they reach a specified expiry date.

We use Google Analytics to analyse the use of this website. Google Analytics generates statistical and other information about website use by means of cookies, which are stored on users’ computers. The information generated relating to our website is used to create reports about the use of the website. Google will store this information. Google’s privacy policy is available at: https://www.google.com/privacypolicy.html.

Any information Invercauld Estate holds about you and your business encompasses all the details we hold about you and any sales transactions including any third-party information we have obtained about you from public sources and our own suppliers such as credit referencing agencies.
We will only collect the information needed so that it can provide you with marketing and consulting services, where you have opted-in. We do not sell or broker your data.

Last updated in September 2022