The Chevening Estate Privacy Policy

The Board of Trustees of the Chevening Estate (defined as “the Chevening Estate” from hereon) is committed to protecting your privacy and developing technology that gives you the most powerful and safe online experience. This Privacy Policy applies to this Chevening Gardens site and governs data collection and usage. By using this Chevening Gardens site, you consent to the data practices described in this statement.

This Policy only applies to data collected and held by the Chevening Estate.  Data may also be collected by government or police owned equipment and held on government or police servers, in the interests of the security of the premises.  The Chevening Estate is unable to process any enquiry about data, servers or equipment falling into these categories.

Collection of your Personal Information

The Chevening Estate collects personally identifiable information, such as your email address, name, home or work address or telephone number.  The Chevening Estate may also collect anonymous demographic information which is not unique to you, such as your postcode, age, gender, preferences, interests, and favourites.

There is also information about your computer hardware and software that is automatically collected by the Chevening Estate. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used by the Chevening Estate for the operation of this service, to maintain quality of the service, and to provide general statistics regarding use of this Chevening Estate site.

The Chevening Estate encourages you to review the privacy statements of websites you choose to link to from the Chevening Estate so that you can understand how those websites collect, use and share your information. The Chevening Estate is not responsible for the privacy statements or other content on websites other than the Chevening Estate websites.

Use of your Personal Information

The Chevening Estate does not sell, rent or lease its customer lists to third parties. 

The Chevening Gardens website will disclose your personal information, without notice, only if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Chevening Estate or the site; (b) protect and defend the rights or property of the Chevening Estate; and, (c) act under exigent circumstances to protect the personal safety of users of the Chevening Estate, or the public.

Use of Cookies

The Chevening Estate website uses "cookies" to help personalise your online experience. A cookie is a text file that is placed on your hard disk by a webpage server. Cookies cannot be used to run programmes or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to experience fully the interactive features of the Chevening Estate services or websites you visit.

Security of your personal Information

The Chevening Estate secures your personal information from unauthorized access, use or disclosure. The Chevening Estate secures the personally identifiable information you provide on computer servers in a controlled, secure environment, protected from unauthorised access, use or disclosure. When personal information (such as a credit card number) is transmitted to other websites, it is protected through the use of encryption, such as the Secure Socket Layer (SSL) protocol.

Changes to this Policy

The Chevening Estate will occasionally update this Privacy Policy to reflect company and customer feedback. The Chevening Estate encourages you to review this Policy periodically in order to be informed of how the Chevening Estate is protecting your information.

Subject Access Requests

You have the right to request a copy of any information we currently hold about you.  To receive such information please send your contact details including address to:  The Estate Office, Chevening, Sevenoaks, TN14 6HG.  The Estate Office will first verify the identity of the person making the request, then inform the enquirer if there are any costs for finding out the relevant data information, then supply the requested details when they are available.

Contact Information

The Chevening Estate welcomes your comments regarding this Privacy Policy. If you believe that the Chevening Estate has not adhered to this Policy, please contact the Chevening Estate at info@cheveninghouse.com. We will use commercially reasonable efforts to determine and remedy the problem promptly.

 

DATA PROTECTION POLICY

Definitions

·       Data – information about an individual recorded on paper that is intended to go on a computer and electronic records stored on a computer.

·       Personal data – data from which a living individual can be identified, eg. name, address, email, telephone number, date of birth, driving licence number, NI number and passport number.

·       Confidential data – data given in confidence and not in the public domain, to be maintained within an agreed timescale, for instance financial information.

·       Data Controller – the person who determines the purpose, use and processing procedure of the data.

·       Data Subject – the individual who is the subject of the data.

·       Subject Access Rights – an individual has the right of access to data held about them.

·       Processing of data – the definition is broad and covers most aspects of data handling:

       i.       organisation, adaptation or alteration of the information or data,

      ii.        retrieval, consultation or use of the information or data,

     iii.        disclosure of the information or data by transmission, dissemination or otherwise making it available,

     iv.        alignment, combination, blocking, erasure or destruction of the information or data.

Principles of Data Protection

The Chevening Estate is committed to demonstrating that all personal data is:

-          Processed lawfully, fairly and transparently

-          Collected only for specific legitimate purposes

-          Adequate, relevant and limited to what is necessary

-          Accurate and, where necessary, kept up to date

-          Stored only as long as is necessary

-          Processed in a manner that ensures appropriate security, 

-          Action will be taken against unauthorised or unlawful use or against accidental loss, destruction or damage.

Collection of Personal Information

The Chevening Estate collects personally identifiable information, such as names, email addresses, addresses or telephone numbers.  This information is gathered through voluntary provision of data by visitors to the Gardens, through completion of forms for membership or providing information online through the website.

The Chevening Estate also collects anonymous demographic information, which is not unique to individuals, such as post codes, age, gender, preferences and interests. 

The Chevening Estate maintains a database of information on businesses, organisations, suppliers, contacts and other individuals with whom it does business. 

When collecting data, the Chevening Estate will inform individuals and companies of the purpose for which it is requesting information and will assure them that any data given will only be used for the purposes for which it is collected.

Subject Access Requests

You have the right to request a copy of any information we currently hold about you.  To receive such information please send your contact details including address to:  The Estate Office, Chevening, Sevenoaks, TN14 6HG.  The Estate Office will first verify the identity of the person making the request, then inform the enquirer if there are any costs for finding out the relevant data information, then supply the requested details when they are available.

Data Security

The Chevening Estate is committed to maintaining the security and confidentiality of any data it holds, and to putting in place measures to protect this data, both online and with hard copies of data held by the Chevening Estate office.  All staff will be vigilant in the use of data.

Where personal data is stored on paper, it will be kept in a secure place. When it is not being used, it will be locked away, or when it is no longer needed, it will be shredded and disposed of securely.

Where personal data is stored electronically, it will be stored securely. 

In the event of a security breach with data held by the Chevening Estate, the affected data subjects will be informed immediately and the breach rectified as soon as possible with processes put in place to prevent a recurrence.

If the Chevening Estate suffers from outside interference whereby hackers successfully gain access to sensitive data, then Chevening Estate will immediately inform those whose data has been accessed what has happened, in case there is any adverse impact from the incident.

 

 

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

DigiTickets

Examples include:

• dtAnonymousID

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie, not your name or contact details.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 25 August 2026