Privacy Policy

1. Data Controller

The data controller responsible for your personal information is:

2. What Data We Collect

We may collect the following personal information:

• Contact information – name, email address, phone number, postal address
• Enquiry details – the content of messages submitted through our contact forms
• Permit application data – information provided when applying for horse riding permits, including rider details, vehicle registrations, and emergency contacts
• Booking and reservation data – information required to process accommodation or event bookings
• Technical data – IP address, browser type, device information, and pages visited (collected automatically)

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiries and provide information about the Estate
• To process permit applications and manage access to the Reserve
• To manage bookings and reservations
• To improve our website and services
• To comply with legal obligations

We process your data on the basis of legitimate interest (to respond to enquiries and manage the Estate), contractual necessity (to fulfil bookings and permits), and consent (where you have opted in to communications).

4. Cookies & Analytics

Our website may use cookies and similar technologies to improve your browsing experience and to understand how visitors use our site. These may include:

• Essential cookies – required for the website to function correctly
• Analytics cookies – help us understand how visitors interact with the website (e.g. pages visited, time spent)

You can control cookie settings through your browser. Disabling certain cookies may affect your experience on our website.

5. Data Sharing

We do not sell your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential. We may also disclose your data where required by law or to protect our rights.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is typically retained for up to 12 months. Permit application data is retained for the duration of the permit year and up to 12 months afterwards. Booking data is retained for as long as required for accounting and legal purposes.

7. Your Rights Under UK GDPR

Under the UK General Data Protection Regulation, you have the right to:

• Access – request a copy of the personal data we hold about you
• Rectification – request correction of inaccurate or incomplete data
• Erasure – request deletion of your data where there is no compelling reason for continued processing
• Restriction – request restriction of processing in certain circumstances
• Data portability – receive your data in a structured, commonly used format
• Objection – object to processing based on legitimate interest

To exercise any of these rights, please contact us at enquiries@merthyrmawr.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has not been handled correctly.

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.