Skip to main content
Photography by Dearly Photography

Policies

Privacy Policy

This policy explains how Broxmouth Courtyard handles personal information collected through this website and through direct contact with our team.

This policy is written for UK data protection requirements (UK GDPR and the Data Protection Act 2018).

This privacy policy explains how Broxmouth Courtyard collect, use, and protect your personal data when you visit this website.

What data we collect

When you use this website, we may collect the following types of personal data:

  • Information you provide directly — for example through contact forms, enquiries, or account registration: your name, email address, and any other details you choose to share. We use this to respond to your enquiries and provide the services you request.
  • Technical data collected automatically — including your IP address, browser type and version, device type, and operating system. We process this to deliver and secure the website.
  • Usage and performance data — such as pages visited, time spent on the site, and how you navigate between pages. This may include anonymised, aggregated statistics about site performance that cannot be used to identify you. We use this to understand how the site is used and to improve it.

Lawful basis for processing

Under UK GDPR we must have a lawful basis for processing your personal data. The bases we rely on are:

  • Contract — where processing is necessary to provide the website and the services you request, such as responding to your enquiries or managing your account.
  • Legitimate interests — where we process technical, usage, and performance data to operate, secure, and improve the site. You have the right to object to processing based on legitimate interests (see your rights below).

Where we use cookies or third-party embedded content that is not essential, we rely on your consent, which you give through the cookie preference centre and can withdraw at any time.

Third-party processors

This site may use third-party embedded content (such as video players, maps, and CDN services) that process personal data on our behalf. When you interact with these embeds, the third-party service may collect:

  • IP address and approximate location
  • Device type, browser, and operating system
  • Pages visited and interactions with embedded content
  • Cookies and similar tracking technologies set by the third party

We only permit third-party data collection once you have given your consent through the cookie preference centre.

Some of these processors are based outside the UK. Where personal data is transferred internationally, we rely on the safeguards shown below — such as an adequacy decision or standard contractual clauses — to keep your data protected. The processors we use, their location, and the transfer basis relied upon are:

Cloudflare

Cloudflare provides network infrastructure, content delivery, and security services. Cookies set by Cloudflare are strictly necessary for the site to function securely — they support bot protection, challenge verification, and network integrity. They do not track visitors across sites or serve advertising.

Lawful basis
Legitimate interests
Processor location
United States
Data transfer basis
Standard contractual clauses (SCCs)
Privacy policy(opens in new tab)

Matterport

Matterport provides immersive 3D virtual tour technology. When a Matterport tour is embedded it may set authentication cookies and use Google Analytics to measure tour engagement.

Lawful basis
Consent
Processor location
United States
Data transfer basis
Standard contractual clauses (SCCs)
Privacy policy(opens in new tab)

Google Maps

Google Maps provides interactive map embeds. It may set cookies to store user preferences, measure engagement, and serve personalised advertising through the Google advertising network.

Lawful basis
Consent
Processor location
United States
Data transfer basis
Standard contractual clauses (SCCs)
Privacy policy(opens in new tab)

Vimeo

Vimeo is a video hosting and playback platform. When embedded with the privacy-enhanced `dnt=1` parameter, Vimeo limits cookie use to functional cookies required for video playback and player preferences.

Lawful basis
Consent
Processor location
United States
Data transfer basis
Standard contractual clauses (SCCs)
Privacy policy(opens in new tab)

For the full list of cookies each processor sets, see our cookie policy.

Cookies

This website uses cookies — small text files stored on your device — to support core functionality and, where you have consented, to enable third-party embedded content.

For full details of the cookies we use, the third-party services that set them, and how to manage your preferences, please see our cookie policy.

Your rights under UK GDPR

Under UK data protection law you have the following rights. To exercise any of these rights, please contact us at events@broxmouth.com or via our contact page.

Right of access
You may request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data where there is no compelling reason for its continued processing.
Right to restriction of processing
You may ask us to restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy.
Right to data portability
Where processing is based on consent or a contract, you may request your data in a structured, commonly used, machine-readable format.
Right to object
You may object to processing based on legitimate interests. We will stop unless we can demonstrate compelling legitimate grounds that override your interests.
Rights related to automated decision-making
You have the right not to be subject to decisions based solely on automated processing — including profiling — that produce legal or similarly significant effects on you.
Right to withdraw consent
Where we rely on consent as the lawful basis, you may withdraw it at any time without affecting the lawfulness of prior processing. You can withdraw cookie consent via the cookie preference centre.

Right to complain to the ICO

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: ico.org.uk/make-a-complaint/.

Contact details

For data protection and privacy enquiries, please contact us using the details below.

Organisation: Broxmouth Courtyard

Data controller: Broxmouth Leisure Limited

Email: events@broxmouth.com

Contact page: Our contact page

Address: Broxmouth Courtyard, Broxmouth Park Estate, Dunbar, EH42 1QW

Phone: 01368 869 717

Last updated: 23 July 2026