The Citadel is committed to protecting the information you share with us online and to explaining how we collect, process, and share that information. 
Summary of Key Issues

Collection: We collect Personal Information about you that you provide to us or that we obtain while you are using the Site.

Protection: We employ reasonable and current technical, administrative, and physical safeguards that are designed to prevent unauthorised access, maintain data accuracy, and ensure the correct use of Personal Information.

Use: We use Personal Information to provide you with services from our Site, to build features that will make the services available on the Site easier to use, to contact you about these services, and to send marketing communications, promotional material, or other offers that we think might be of interest to you.

Marketing and Choices: You have control over how we use Personal Information for marketing. You can exercise your control in any marketing communication.

Sharing: We may share limited information with trusted third-party service providers who help us operate our website, analyse website performance, provide advertising services, or comply with legal obligations. We do not sell your Personal Information to third parties. These service providers may include website hosting providers, analytics providers, advertising platforms, and technology partners

Cookies: Our Site uses cookies and other similar technologies.

Access and Data Subject Rights: We understand that you may want to change, access, or delete your Personal Information. You may do so by contacting us.

Children: We do not knowingly collect Personal Information from children under the age of 18.

Changes: We will provide notice of any material changes to this Privacy Policy by posting a prominent notice on our Site and/or emailing you.

Contact Us: Should you have any questions, concerns or comments, please contact us.

Scope and Information That This Policy Covers

This Privacy Policy applies to information collected on our websites, mobile applications, cloud-based services, or controlled widgets embedded in communication platforms with a link to this Privacy Policy (collectively, the “Site”). It covers how we collect, use, share, and otherwise process Personal Information as of the date that this Privacy Policy is posted. It does not apply to any other information we collect through other means. By “Personal Information,” we mean information that identifies or can identify you personally.

The Site may contain links to third-party websites. We do not own, operate or control the websites of those third parties. Accordingly, this Privacy Policy does not apply to any websites maintained or operated by unaffiliated third parties. When you click those links, you will go to a third-party website subject to that website’s privacy policy, which we encourage you to read. We are not responsible for the privacy practices of those other websites, and we expressly disclaim any liability for their actions, including actions relating to the use and disclosure of Personal Information.

Personal Information We Collect About You

We collect your Personal Information on the Site to enhance the services we offer you, maintain and improve the Site, protect the security of you and our Site, comply with legal obligations, and inform you about other services and products that may be available through us, our affiliated companies, or through our marketing alliances. We collect Personal Information about you when you interact with or utilise services offered on this Site, such as:

 ● Requesting information about our services;
 ● Submitting comments, reviews, or other user-generated content;
 ● Connecting or interacting with us through social networks.

 Personal Information includes:

 ● Name;
 ● Postal or billing address;
 ● E-mail address;
 ● Telephone or mobile number;
 ● Location via IP address;
 ● Device being used (for our mobile site);
 ● Cookies and similar technologies;
 ● Other relevant data.

Even if you do not provide us with any Personal Information, we collect certain non-personal information about how you use our Site. This information cannot identify you and is used for statistical purposes only.

Analytics, Tracking Technologies and Advertising

We use cookies, pixels, and similar technologies to improve the performance of our Site, understand how visitors use our Site, and measure the effectiveness of our marketing activities.

Google Analytics 4
We use Google Analytics 4 (“GA4”), a web analytics service provided by Google. GA4 helps us understand how visitors interact with our Site by collecting information such as pages visited, time spent on the Site, device information, browser type, approximate geographic location, and interactions with Site content.

GA4 may collect information, including IP addresses and online identifiers. Data collected through Google Analytics is used to analyse website traffic, improve user experience, and develop our services. Google may process this information on our behalf in accordance with its own privacy policies.

Google Search Console
We use Google Search Console to monitor and maintain our website’s presence in Google search results. Search Console provides aggregated information about how users find our Site through search engines, including search queries, click-through rates, and website performance data. This information does not typically identify individual users and is used solely to improve the visibility and performance of our Site.

Microsoft Clarity
We use Microsoft Clarity to better understand how visitors interact with our Site through behavioural analytics. Clarity may collect information about user interactions, such as mouse movements, scrolling activity, page navigation, device information, browser type, and general usage patterns.

This information helps us identify usability issues, improve website functionality, and enhance the user experience. Microsoft Clarity may use cookies and similar technologies to collect this information.

Meta Pixel
We use Meta Pixel, provided by Meta Platforms, Inc., to measure the effectiveness of our advertising campaigns and to better understand actions users take on our Site. 
Meta Pixel may collect information regarding website visits, pages viewed, actions performed on the Site, device information, browser information, and other online identifiers. This information may be used to measure advertising performance, create audiences for future advertising campaigns, and deliver more relevant advertisements on Meta platforms such as Facebook and Instagram.

Cookies and Consent
Where required by applicable law, we will obtain your consent before placing non-essential cookies or activating analytics and advertising technologies on your device. You may withdraw your consent at any time through our cookie preferences settings or by adjusting your browser settings.

For further information about the cookies and tracking technologies used on our Site, please refer to our Cookie Policy.

Use and sharing of Personal Information

We process your Personal Information only to the extent reasonably necessary to fulfil your requests, operate and improve our Site, analyse website performance, conduct marketing activities, comply with legal obligations and meet our legitimate business interests. We may share limited Personal Information with trusted third-party service providers who assist us in providing website hosting, analytics, advertising, technical support, security monitoring, and other business services. Where we disclose Personal Information to third parties acting on our behalf, we require them by contract to process that information only for authorised purposes and to maintain appropriate security measures.

 We generally process and may disclose your Personal Information to others to:

 ● Provide you with products and services, including authenticating authorised users, and marketing our products and services;
 ● Perform certain services or other transactions initiated by you;
 ● Respond to your questions, complaints, or reviews of our product or services;
 ● Send you communications about online transactions, product information, ads, and
 promotions, electronic newsletters, or other notices you requested or offers tailored to you;
 ● Enable our advertisers, where appropriate, to provide you with more personalised content,
 and track the effectiveness of certain advertising campaigns;
 ● Comply with applicable law, obey judicial orders, cooperate with law enforcement
 authorities, or prevent any suspected illegal activities;
 ● Help us run our business; or
 ● For any other everyday business purposes, such as product development and Site
 administration.

Processing Basis and Consequences
Certain jurisdictions, including those in Europe, require the identification of the legal grounds for the collection, use, sharing, and other processing of Personal Information. We rely on the following legal grounds for the collection, use, sharing, and other processing of Personal Information as described in this Privacy Policy:

 ● Necessary to provide information or otherwise carry out the performance of a contract with you as an individual;
 ● Our legitimate interests, including:

  ○ Customer relationship management and other forms of marketing and analytics;
 ○ Fraud prevention, misuse of company IT systems, or money laundering;
 ○ Physical, IT, and network perimeter security;
 ○ Internal investigations; and
 ○ Intended mergers and acquisitions.

 ● Compliance with legal obligations and/or defence against legal claims, including those in the
 area of labour law, social security, data protection, tax, and corporate compliance laws.
 ● Protection of the vital interests of any individual; and
 ● Consent, as permitted by applicable law.

Providing us with Personal Information is voluntary, but your refusal to provide Personal Information for the above-mentioned purposes may affect our ability to fulfil our contractual obligations.

Your Rights Concerning Your Personal Information 

You have the following choices regarding our use and disclosure of your Personal Information:

 ● Marketing Communications. If you no longer wish to receive any marketing communications, please email us.
 ● Cookies and Similar Technologies. Please review your browser or computer settings for specific cookies and see below to make choices regarding cookies.

You are not required to provide all Personal Information identified in this Privacy Policy to use our Site, but certain aspects of our Site may not be available to you. However, you can use our services without consenting to non-essential cookies or direct marketing emails; the only consequence is that we will communicate less to you regarding our services, we may not be able to provide the support you seek, and you may miss out on attractive promotions and news about services.

Europe and certain other non-US jurisdictions maintain local data protection regulations that confer certain data protection rights on individuals. If applicable, and you wish to exercise any of these rights, please contact us as set out below.

 ● Right of access: You have the right to obtain from us confirmation as to whether or not Personal Information concerning you is processed, and to request access to the Personal Information. The access information includes, among other things, the purposes of the processing, the categories of Personal Information concerned, and the recipients or categories of recipients to whom the Personal Information have been or will be disclosed. This is not, however, an absolute right, and the interests of other individuals may restrict your right of access. You may have the right to obtain a copy of your Personal Information undergoing processing.

  ● Right to rectification: You have the right to obtain from us the rectification of inaccurate Personal Information about you. Depending on the purposes of the processing, you have the right to have incomplete Personal Information completed, including by means of providing a supplementary statement.

 ● Right to erasure (right to be forgotten): Under certain circumstances, you have the right to obtain from us the erasure of Personal Information concerning you, and we may be obligated to erase that Personal Information.

 ● Right to restriction of processing: Under certain circumstances, you have the right to obtain from us restriction of processing your Personal Information. In that case, your data will be marked and may only be processed by us for certain limited purposes.

 ● Right to data portability: Under certain circumstances, you have the right to receive the Personal Information about you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that data to another entity without hindrance from us.

 ● Right to object: Under certain circumstances, and at any time, you have the right to object, on grounds relating to your particular situation, to the processing of your Personal Information by us, and we can be required to no longer process your Personal Information.

Where permitted by applicable law, you also have the right to lodge a complaint with a competent data protection supervisory authority. In the United Kingdom, the relevant supervisory authority is the Information Commissioner’s Office (ICO).

Security of Your Information

We maintain reasonable technical, electronic, and organisational security procedures to safeguard Personal Information against unauthorised or unlawful processing and/or accidental or unlawful loss, alteration, disclosure, or access. Our security procedures include contractual terms with any contractors, agents, or data processors that require them to protect the security and confidentiality of Personal Information in accordance with our standards. While we strive to protect your Personal Information, we cannot ensure the security of the information you transmit. It is your responsibility to safeguard any email or password that you have created or used in connection with any service or site and to notify us if you ever suspect that the security and confidentiality of such email or password has been compromised in any way.

Retention and Storage of Your Information

We will maintain Personal Information for as long as we are required to do so by applicable law(s), or for as long as necessary for the purpose(s) described above for which it is processed. We will delete Personal Information when it is no longer needed and/or take steps to properly anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject) and, in any case, upon expiration of the maximum storage term set forth by applicable law.

Children

We do not knowingly collect Personal Information from children under the age of 18, and users under the age of 18 should not submit any Personal Information to us. If we have actual knowledge that Personal Information about a child under 18 has been collected, we will take appropriate steps to delete it.

Changes To Our Privacy Policy

We may change this policy from time to time. If we make any material change in how we collect, use, disclose, or otherwise process Personal Information, we will prominently post notice of the change on our site for at least thirty (30) days before implementing the change. Where required to do so by law, we may seek your prior consent to any material changes we make to this Privacy Policy. Otherwise, your continued use of our site after we make changes to this policy is deemed acceptance of those changes. If any proposed change is unacceptable to you, you may request that we remove your Personal Information from our records, subject to any legal or regulatory obligations requiring us to retain certain information.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns regarding our privacy practices, please contact us as detailed below.

 Email: hello@thecitadelweston.co.uk
 Mailing Address:
The Citadel, Weston under Redcastle, Shrewsbury, Shropshire, SY4 5JY