Bowood House & Gardens Privacy Policy

Our Privacy Policy:

Last updated December 2024.

At Bowood we value your privacy. It is important that you read and understand the privacy policy as it will explain how we collect and use your personal information and why we do this. This policy relates to your use of this website and data gathered at Bowood House & Gardens and Bowood Hotel, Spa and Golf Resort. All personal information is kept on a secure server. If you are asked to provide information when contacting us and using our website, it will only be used in the ways described in this privacy policy. If you have any questions about this policy, please email marketing@bowood.org

Data Protection
For the purposes of data protection this policy refers to the EU General Data Protection Regulation (GDPR) or any subsequent, and successor, legislation.

The Bowood Estate is the ‘data controller’. This means that we are responsible for deciding how we hold and use personal information about you and explaining it clearly to you.

Who is The Bowood Estate?
The Bowood Estate trading activities also include Bowood House & Gardens and Bowood Hotel, Spa & Golf Resort.

VAT registration number: 139173755

The trading address is: The Bowood Estate Office, Bowood, Calne, Wiltshire, SN11 0LZ. Further details can be found via the business website: https://www.bowood.org.

The Bowood Estate is registered with the UK Information Commissioner’s Office with registration number Z7143254.

Bowood’s Privacy Policy FAQ’s

What is personal information?
Personal information, or personal data, refers to any information about an individual from which that person can be identified. It does not refer to anonymous data. Anonymous data is information where any personal identifiers have been removed.

What information do we collect?

• When you purchase from us at bowood.org or become a member at Bowood we can ask for, and collect, personal information such as your name, billing and delivery address, telephone number, email address, date of birth and gender (where necessary), items ordered and payment details.
• If you set up an account with us, we will also store your password.
• If you sign up to receive our email newsletters, we will request and store your first name, last name and email address.
• Bowood may also collect information regarding your visit to bowood.org. This may include where you are geographically, how you were referred to us (e.g. search engines or email marketing, etc.), your browser and device type, the pages you viewed, the duration of your visit and any search terms used. This information may be collected even if you do not register an account with us.

How do we use your personal information?
We use this information to make your experience as easy and enjoyable as possible.

• To process your order including delivery and payment.
• Online account holders require an email address and password to access their account.
• To send you special offers and promotions that may be of interest if you have consented for us to do so or we believe may be of interest to you. You may opt-out of receiving these messages at any time by clicking the UNSUBSCRIBE button on the bottom of all our emails.
• Any information we collect about customers’ browsing and buying habits is used for internal reporting and statistical analysis and to continuously improve the Bowood website and the products and services offered to our customers.
• To assist in the detection and prevention of fraud.

Why do we contact you?

• If you have signed up for our newsletters, we contact you to update you about exciting new promotions, events, special offers, sales and offers which are exclusive to our contact list. You can opt out of marketing emails at any time – see below for more details. 
• When you make a purchase online, we will contact you by email to confirm the order and notify you of updates to your order.
• We may also contact you about leaving a review. The reviews are requested via email with a link to surveymonkey and they are hosted and stored securely on their site. Survey Monkey have their own privacy policy – to view this please visit https://www.surveymonkey.co.uk/mp/legal/privacy-policy/
• If successful when entering any of our competitions or prize draws, we will contact you by email to notify you.
• We will contact you by telephone if there is a problem with your order or if we need to get in touch about your booking.
• Where you contact us via social media to make an enquiry, we will respond via the email address you have provided in the enquiry.

What are your rights?
Right of access – You have the right to obtain confirmation that your data is being processed and request access to your personal data. You can make a request by email to marketing@bowood.org or in writing to:

Data Protection Officer – Marketing Department
Bowood
Calne

Wiltshire
SN11 OLZ

In the first instance we will provide a copy of the information free of charge. However, we may charge a reasonable administration fee when a request is manifestly unfounded or excessive, or to comply with requests for further copies of the same information although this does not mean that we will charge for all subsequent access requests.

We will without delay and within one month of your request (subject to extensions in some cases):

• confirm what personal data we hold about you;
• provide a copy of the data in commonly used electronic format if the request is made electronically;
• provide any supporting explanatory materials.

We can extend the time to respond by a further two months where requests are complex or numerous. If this is the case, we will inform you of this within one month of the receipt of the request and explain why the extension is necessary.

Data portability – in addition to your access right you can require us to provide a copy of your information that we hold in a commonly used machine-readable format.

Rights of Rectification and Erasure (the right to be forgotten) – you may ask us to correct or remove information you think is inaccurate or no longer necessary.

Marketing communications
You can sign up to receive marketing communications through our online website sign up form, when you create an account or during the checkout process. Simply tick the opt-in box at any of these stages. Marketing communications may be sent by either electronically via email or physically through the post.

How to unsubscribe from marketing communications?
All Bowood customers have the choice to refine or opt out of receiving marketing communications from us. If you do not wish to continue to receive marketing communications from us, you can easily click on the ‘Unsubscribe’ link at the bottom of all email communications. Please note that if you opt-out of receiving marketing communications, we may still store data relating to you and any purchases you made and may contact you directly about your bookings and purchases.

Ticket Sales and Gift Vouchers 
All Bowood House & Gardens Tickets are processed and fulfilled via our partners at DigiTickets. Please read their Privacy Policy here.

Gift Voucher purchases for the House & Gardens are processed and fulfilled via our partner DigiTickets. Gift Voucher purchases for Bowood Hotel, Spa and Golf Resort are processed and fulfilled via Gifted. 

The things we cannot control…
Third party sites: Our site may contain links to and from the websites of our partner networks and other third parties. If you follow a link to any of these websites, please note that they have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

We will use cookies (electronic tags) to monitor your browsing and purchasing habits on our site, for example, which pages are visited, and whether they are purchased from. If you have registered with us, then your computer will store an identifying cookie which will save you time each time you revisit www.bowood.org by remembering your email address for you. You can change the settings on your browser to prevent cookies being stored on your computer without your explicit consent. Please see our cookie policy for full details.

SSL and encryption
We use the latest secure server technology to ensure your information is protected to the highest standards. We use encryption to safeguard your personal information and only accept orders from web browsers that permit communication through Secure Socket Layer (SSL) technology – this means you cannot inadvertently place an order through an unsecured connection. Most web browsers above version three support this security. This encryption makes it virtually impossible for unauthorised parties to read any information that you send us. The encryption technique we use is the highest standard available for e-commerce.

Any questions?
If you have questions about your personal data or our privacy policy, please contact our Marketing Department – marketing@bowood.org or phone: 01249 822 228.
Alternatively, you can write to us at:

Data Protection Officer – Marketing Department
Bowood
Calne

Wiltshire
SN11 9PQ

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

DigiTickets

Examples include:

• dtAnonymousID

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie, not your name or contact details.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 25 August 2026