1. Introduction

Royal Norwich (“we”, “us”, “our”, “Royal Norwich”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website (www.royalnorwich.co.uk) (“Website”) and any associated services (e.g. membership forms, booking, enquiries, newsletters, events).

By using our Website, you accept the practices described in this policy. If you do not agree with any part of this, please do not access or use the Website.

2. Data We Collect

We may collect the following categories of personal data:

1. Contact / identity data

   • Name, title
   • Postal address
   • Email address
   • Telephone number
   • Any identity verification information (if needed)
2. Transactional data
   • Booking or membership details
   • Payment information (via third-party payment processors)
   • Purchase history, event registrations
3. Technical / usage data
   • IP address
   • Browser type and version
   • Operating system
   • Device identifiers
   • Pages visited on our Website, date/time of visits, referring website
   • Cookies and similar tracking technologies
4. Communications data
   • Your communications and correspondence with us (e.g. via email, contact forms)
   • Feedback, reviews, surveys
5. Marketing / preferences data
   • Your preferences in receiving marketing communications
   • Demographic information (age, gender, etc.), only if voluntarily provided

3. How We Use Your Data

We use personal data for the following purposes:

• To provide you with the services, bookings, memberships, events, offers, and support you request

• To process payments and manage transactions
• To communicate with you (e.g. confirmations, newsletters, updates, customer service)
• To administer and improve our Website (analytics, troubleshooting, performance)
• To personalise and tailor content and offers
• To comply with legal obligations (e.g. tax, reporting)
• For marketing purposes (where you have consented or where we have a legitimate interest)

We will only process your data when we have a lawful basis to do so (e.g. your consent, performance of a contract, legitimate interests, compliance with law).

4. Sharing and Disclosure

We may share personal data with:

• Service providers / processors (e.g. payment gateways, web hosting, email marketing platforms, analytics providers)

• Professional advisors and consultants
• Affiliate or group companies
• Authorities and regulators, when required by law or court order
• Other third parties with your consent or for legitimate business reasons

We will require that any third party handling your data implements appropriate technical and organisational security measures and only processes the data in accordance with our instructions.

5. International Transfers

If any of our service providers or partners are located outside the UK or EU, your personal data may be transferred internationally. We will ensure appropriate safeguards are in place (e.g. standard contractual clauses, adequacy decisions) to protect your data in such transfers.

6. Data Retention

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. After that, we will securely delete or anonymise the data.

In particular:

• Transactional and booking data may be retained for [X years] to comply with tax, accounting, or legal obligations
• Marketing data (where consented) is stored until you withdraw consent

7. Your Rights

Under UK data protection law, you have certain rights:

• The right to access the personal data we hold about you

• The right to correct inaccurate or incomplete data
• The right to erase (in some circumstances)
• The right to restrict processing
• The right to data portability
• The right to object to processing (e.g. for direct marketing)
• The right to withdraw consent where processing is based on consent
• The right to lodge a complaint with the Information Commissioner’s Office (ICO)

If you wish to exercise any of these rights, please contact us (see section 12 below).

8. Cookies and Tracking Technologies

We use cookies and similar technologies (see our Cookie Policy below) to collect usage data, remember preferences, and deliver relevant content and advertising.

9. Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, alteration, disclosure, or destruction. These measures are periodically reviewed and improved.

However, no method of electronic transmission or storage is entirely secure; we cannot guarantee absolute security.

10. Children

Our Website is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected personal data of a child under 16, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Website and indicate the “effective date.” Please check back periodically.

12. Contact Us

If you have any questions or requests about this policy or your personal data, please contact:

Royal Norwich
Address: The Weston Estate, Weston Hall Road, Norwich, NR9 5JE