Privacy Policy
Last updated: October 5, 2026
The short version
We publish castles and historic properties and do not require an account to browse. When you send an enquiry about a venue, we pass your message to that venue so it can reply. We do not sell your enquiry information.
We also test manually placed Google AdSense advertisements. Google and advertising partners receive browsing/device information under the purposes and choices managed by Google's certified CMP. You can refuse optional advertising and change your privacy choices from the footer or our Cookie Policy.
Who Is Responsible
The data controller for this website is:
For any question about how we handle your personal data, and to exercise any of the rights described below, write to [email protected]. It is the fastest route and it reaches the people who can act on it.
What We Collect
When you send an enquiry
The venue enquiry form asks for your name, email address, and your message. You may also provide a phone number, an event date and an approximate number of guests. You choose what to fill in beyond the required fields.
Together with that enquiry
To keep the form usable and to stop automated abuse, we also record the page you sent it from, the referring page, any campaign parameters in the link, your browser's user-agent string, how long you took to fill the form in, and the result of the Cloudflare Turnstile anti-spam check.
We do not store your IP address in readable form. It is converted into an irreversible hash with a secret value, which lets us detect repeated submissions from the same source without keeping the address itself.
When you browse
Pages viewed, approximate country, referring site, and general device and browser type. Optional cookie storage follows your privacy choices where consent is required. Cookieless measurements and security also process technical data, as explained in our Cookie Policy.
Advertising
Google AdSense and advertising partners may process your IP address, device/browser information, advertising identifiers, pages viewed and ad interactions for delivery, measurement, fraud prevention and, where permitted by your choices, personalisation. The CMP identifies partners and purposes. We do not send venue enquiry contents to AdSense.
If you claim a venue listing
If you represent a venue and claim its page, we record your email address, a hashed form of your IP address, and the time of the claim.
Why, and on What Legal Basis
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Passing your enquiry to the venue and replying to you | Steps taken at your request before entering a contract (Art. 6(1)(b)) |
| Spam and abuse prevention on the form | Legitimate interest in keeping the service usable (Art. 6(1)(f)) |
| Security, bot protection, delivering pages | Legitimate interest in a secure, working website (Art. 6(1)(f)) |
| Google Analytics, in the EEA, UK and Switzerland | Your consent (Art. 6(1)(a)), withdrawable at any time |
| Google Analytics, in countries with an opt-out regime | Legitimate interest in understanding site usage (Art. 6(1)(f)) |
| Optional advertising storage and personalisation where prior consent is required | Your consent (Art. 6(1)(a)), managed through the CMP and withdrawable at any time |
| Cookieless aggregate traffic counts | Legitimate interest in measuring reach (Art. 6(1)(f)) |
Who Receives Your Data
The venue you contacted
This is the most important one. When you send an enquiry, we forward your name, message and contact details to the venue it is addressed to, so that they can answer you. That venue is an independent data controller: once your message reaches them, how they handle it is governed by their own privacy practices, not ours. We keep a copy of the enquiry so we can follow up and resolve problems.
Service providers
- Cloudflare — delivers and protects the site, filters automated traffic, and runs the anti-spam check on the form
- ZeptoMail (Zoho) — delivers the enquiry emails
- Google — Google Analytics, where it is active; AdSense and consent management
- Grow (Mediavine) — audience measurement and the save/favourites features, loaded only with analytics permission
- Umami — cookieless traffic counts
Advertising partners
Google and the partners identified in the consent dialog may receive the advertising information described above. Depending on applicable US state law, advertising disclosures may count as sharing personal information. Use the CMP's "Do not sell or share" control to opt out. This experiment does not request ads when an applicable opt-out or Global Privacy Control signal is present.
Learn how Google uses information on partner sites at Google's partner-sites privacy information .
We may disclose data if the law obliges us to, or to establish or defend a legal claim. Enquiry contents are not used for advertising profiles.
Transfers Outside the EEA and UK
Some providers above are based in the United States or process data there. Those transfers rely on the safeguards those providers make available — the EU-US and UK-US Data Privacy Framework where they are certified, and the European Commission's Standard Contractual Clauses otherwise. You can ask us which mechanism applies to a specific provider.
How Long We Keep It
- Enquiries: up to 24 months from the last contact, so we can follow up and resolve disputes. You can ask for yours to be deleted sooner.
- Anti-spam metadata: kept with the enquiry it belongs to, and deleted with it.
- Google Analytics: 14 months, after which Google deletes the underlying event data.
- Advertising and CMP records: Google and partner retention periods depend on the cookies, purposes and choices involved. Provider information is available in the CMP and Cookie Policy.
- Server and security logs: short-term only, for diagnosing faults and abuse.
Your Rights
If you are in the EEA or the UK, you have the right to ask us for a copy of your data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time — for analytics and, when enabled, advertising, use the controls on the Cookie Policy page — and withdrawing it does not affect what happened before.
Write to [email protected]. We answer within one month. We do not charge for this, and we do not require an account.
If you think we have handled your data badly, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is the authority of the country where you live or work.
Children
This site is meant for adults dealing with property and event venues. We do not knowingly collect data from children. If you believe a child has sent us personal data, write to us and we will delete it.
Changes to This Policy
If we change how we handle personal data, we update this page and the date at the top. Where a change requires your consent, we ask for it again rather than assuming it.