Privacy Policy
This policy was made in light of the requirements set out by the General Data Protection Regulations (GDPR) 2018 in order to explain our data processing practices. It explains the basis on which we will process any personal data we collect from you, or that you provide to us.
This policy applies to the following:
- Individuals making a party/event booking or enquiry
- Individuals making a group booking such as a school or community group booking
- Individuals buying tickets online
- Individuals making a purchase via our Online Shop
- Subscribers to our mailing lists (following a mailing for a reason listed above)
- Individuals who make contact with us through another means
- Website or email enquiry
- One off shop order
Privacy Statement
The privacy and security of your personal information is extremely important to us. Here we explain how and why we use your personal data, to make sure you stay informed and can be confident about giving us your information, knowing we will take good care of it.
We’ll keep this policy updated to show you all the things we do you with your personal data.
You can be assured that we will never sell your personal data to anyone and at present, we are not in the practice of sharing information with any other organisation for any reason, but should that change we will advise you and seek your permission to do so.
Who are “we”?
Gary Hounsell - Data Protection Officer
The Data Protection Officer for all personal data relating to job applicants, employees, former employees, volunteers, interns, work experience students and contractors is the General Manager. We take great care to train our staff in their responsibilities with regard to data protection to keep you safe.
We are known as Jordans Mill. Under our company umbrella, we also have the following company identities:
- Holme Mills Heritage Centre Ltd (Company no. 07457482);
- The Jordan Trust (Registered charity no. 1131148, Company no. 06749627); and
- W Jordan & Son (Holdings) Ltd, (Company no. 00760976)
Holme Mills Heritage Centre Ltd is our main trading business and this is where your data is held. Our shop operates through the Jordan Trust. If you have any questions relating to this policy or our use of your personal data, it should be addressed for the attention of the Data Protection Officer at This email address is being protected from spambots. You need JavaScript enabled to view it. or sent to Data Protection Officer, Jordans Mill, Southill Rd, Broom, Biggleswade SG18 9JX.
What personal data do we collect?
"Personal data" is any information that relates to an individual who can be identified from that information.
We may collect a number of items of personal data in connection with specific activities such as reserving a table, booking an event, ordering tickets online and making a purchase via our online shop. Sometimes you’ll share your data when you make contact to ask us a specific question or we order something special for you in our shop and we take your details to call you when it’s arrived. The categories of data are explained in the table below.
Special Categories of personal data
We do not currently collect or retain any special categories of data relating to our members, guests or visitors. If that changes, our Privacy Policy will be updated and we explain what data we hold and why.
"Special categories of personal data" means information about an individual's racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sexual orientation and biometric data. It may also include "criminal records data" which means information about an individual's criminal convictions and offences, and information relating to criminal allegations and proceedings.
How do we use your personal data?
We’ll only use your personal data on relevant lawful grounds as permitted by the General Data Protection Regulation (effective 25th May 2018).
Personal data provided to us will be used for the purposes defined below.
|
Category |
What personal data do we collect |
How do we use your data? |
|
Event / Group Booking Customer |
Name, telephone number, address, email address
Details about your event / group and their contact details if different
|
We may use this information to contact the group organiser or the group itself to inform them of a specific offer tailored towards there last visit. If the event is an annual event we would like to contact to you find out if you would be interested in hiring our venue the following year.
We may also use your information for invoicing purposes.
Our Marketing Team would like the opportunity to be able to add you to the e-newsletter subscriber list in order to keep you informed of news, events and special promotions at Jordans Mill. You can unsubscribe from this list at any stage.
|
|
E-Newsletter Subscribers |
Name, email address, postcode, DOB
|
We may use postcode data to carry out geographically-related offers/promotions and may send you special offers to mark your birthday. However, you can opt out of this at any stage.
|
|
Online shop orders
|
Name, Address, Telephone Number, Email Address
|
Our Team would only make contact if a reason occurred where we had to query, discuss or confirm your order, or for refund purposes. Our Marketing Team would like the opportunity to be able to add you to the e-newsletter subscriber list in order to keep you informed of news, events and special promotions at Jordans Mill. You can unsubscribe from this list at any stage.
|
|
General paying visitor |
We may ask you if you’d like to sign up to our database to receive our e-newsletters.
|
If you opt in, you can unsubscribe at any stage. |
|
General non-paying visitor |
We may ask if you’d like to be added to our mailing list to receive our e-newsletters.
|
If you opt in, you can unsubscribe at any stage. |
Marketing Communications
Whilst we rely upon what we and the law calls our “legitimate purpose” to use your data as described in the table above, when it comes to Marketing to you, we need to ask your permission to send you things that you may consider outside of the scope of the permissions you have given to us above.
At every opportunity in our transactions with you, we will ask you to confirm to us if you wish to join our mailing list for broader marketing mailings and offers. Our marketing mailing list will never be shared with third parties or sold on and we will only send you information directly related to Jordans Mill.
If you have consented to join our marketing mailing list, you can easily opt out again at any point by unsubscribing on any of the e-newsletters you receive from us.
Profiling
We do use all categories of data collected to profile our visitors so that we are better able to tailor our offering to suit our wide range of visitors. We do not usually ask third parties to do this on our behalf, but if we do, we will ensure that they can satisfy us that they meet the stringent standards of the data protection legislation at all times and work within our own principles regarding the integrity of the data we hold about you.
Interacting with Our Website
For information on our cookies policy please visit the relevant pages within our website.
Where do we keep your information?
We use MailChimp as our e-newsletter processor which includes the collection (e.g., via sign-up forms) and storage of personal data (e.g., within our MailChimp account in order to allow us to create and use distribution lists and send marketing email campaigns) and the transfer of personal data to certain MailChimp’s sub-processors (who, as described in MailChimp’s Data Processing Agreement, perform some critical services, such as helping MailChimp prevent abuse and providing support to our customers).
Payment Card Security
We have an active PCI-DSS compliance programme in place. This is the international standard for safe card payment processes. As part of our compliance to this very stringent standard, we ensure that our IT systems do not directly collect or store payment card information; for example the full 16 digit number on the front of the card or the security code on the back.
Where card details are taken over the phone for payment of goods or services, details are securely destroyed immediately after the transaction has been processed. Our staff members who process card transactions receive appropriate training in handling card details as part of our policies.
Our online payment solutions are carried out using a 'payment gateway' through PayPal which is a direct connection to a payment service provided by a bank. This means that when you input card data into the payment page, you are communicating directly with the bank and the bank passes your payment to us, this means that your payment card information is handled by the bank and not processed or held by us.
CCTV
Across our site we have CCTV and you may be recorded when you are with us. This is to ensure the safety and security of you as our visitor and for our staff. CCTV is only ever viewed if there is a valid reason to do so, for example if we believe a crime has been committed or there has been an accident or incident that we need to investigate.
Subject Access Rights
You have the right at any time to ask to see the data we hold about you. To do this, please contact the Data Protection Officer at This email address is being protected from spambots. You need JavaScript enabled to view it. or sent to Data Protection Officer, Jordans Mill, Holme Mills, Southill Road, Broom, Bedfordshire, SG18 9JX. We will ask you for certain information to identify yourself so we can be certain we are giving your information only to you. We will respond to any request within one month, or if we are unable to do so, we will write to you within one month and explain any delay.
If you are not happy with what you find, you have the right to insist your data is amended or deleted from our systems.
You have the right to complain to the Information Commissioner’s Office (ICO) if you believe there is a problem with the way we are handling your information.
Changes to this Privacy Policy
We may need to amend this policy from time to time as systems and processes are updated or replaced. We will ensure that this policy is always available on our website and is always accurate and current.
This privacy policy was last updated on 17 June 2020.