This privacy notice is intended for visitors to the Duchy of Lancaster website available at www.duchyoflancaster.co.uk and also for those individuals who are not employees, tenants or direct appointees of the Duchy but whose personal data may be processed by the Duchy (for example, in correspondence with the Duchy).
If you are an employee of the Duchy, a tenant of the Duchy or have otherwise been appointed directly by the Duchy, a separate privacy notice will be applicable. Please contact us using the contact details provided below should you require a copy of the applicable privacy notice.
We are committed to protecting your privacy and rights in connection with the personal information we hold about you. This Privacy Notice is to inform you of our obligations when processing your personal data, how we collect and use that data, and under what circumstances and with whom we may share it with or disclose it to.
Under data protection law the Duchy is a data controller and holds and processes personal data in accordance with data protection law.
We may collect, hold and process limited personal information provided by you in connection with your visit to the Website through the use of cookies (for more information on our use of cookies, please see our Cookies Notice at www.duchyoflancaster.co.uk/cookie-policy/). This will include your IP address and how you used the Website. The Duchy will not identify your name or address from your IP address; we process details on your IP address to distinguish you from other users of the Website.
We will process your personal information if you correspond with the Duchy (by post, email, telephone or other means). This information might include your name, address, contact details and the reason for your correspondence. We need this information in order to effectively and efficiently administer our responsibilities in connection with your enquiry.
There may also be other occasions where your personal information will be passed to the Duchy by third parties (for example, in respect of managing our properties and assets, and in performing our other duties).
We use this information about you in order to:
Under data protection law we must have a legal reason for holding and processing your personal data. The legal reason we hold your personal data is that we have a legitimate interest in holding this information for the purposes outlined above. In processing your personal information under this legal basis we will always take account of your interests and privacy rights.
We will hold your personal data for as long as it may be necessary in order to effectively and efficiently deal with the matter for which we received your personal information and to administer the duties of the Duchy of Lancaster. In some situations, depending on the precise circumstances for which we process your personal information, it may be necessary to retain your personal information indefinitely; for example, if your information forms part of the Duchy’s archive.
If you would like more specific information on how long we will retain your personal information, please contact us using the details below.
In respect of information gained through the use of cookies, your information will be processed by our website administrator. We will also share information with outsourced IT providers, such as our cloud storage provider.
We will share your personal information with third parties where it is necessary to deal with the particular matter for which we have obtained your information. In such instances we will take account of your interests and privacy rights prior to disclosing such information.
For the purposes of the administration of our historic records and archive we are likely to engage external consultants such as The National Archive.
We have no reason to transfer or process your personal data outside the European Union.
You have the right to know what personal data we hold about you and to ask us to rectify, erase, restrict or object to the processing of such data. You may address any such enquiries to us at The Duchy of Lancaster, Burleigh House, 355-359 Strand, London, WC2R 0HS or by email to our general enquiries address which is info@duchyoflancaster.co.uk More information about the GDPR and your rights can be found on the Information Commissioner’s Office Website at www.ico.gov.uk
We may need to change this notice in the future. If we do then we will inform you and notify you of the changes where it is practicable to do so.
We will not disclose or transfer your personal data to anyone for the purposes of marketing.
If you have any questions concerning this notice please contact The Duchy Solicitor at The Duchy of Lancaster, Burleigh House, 355-359 Strand, London, WC2R 0HS.
If you are dissatisfied with any aspect of our processing of your personal data you have the right to lodge a complaint with the Information Commissioner’s Office, the details of which can be found on the ICO Website referred to above.