Legal

Privacy Policy

This page explains what personal information we collect when you use this website or get in touch, how we use it, and the rights you have over it. It is maintained by Bredenbury Court Barns and reflects the practices currently in place on this site.

Last updated: 22 July 2026

Who we are

Bredenbury Court Barns is a wedding venue based at Bredenbury, Herefordshire, HR7 4TF. In this policy "we", "us" and "our" refer to Bredenbury Court Barns. We are the data controller for personal information you share with us through this website, email, phone or in person.

What we collect

We only collect information you actively give us, plus limited technical data needed to run the site.

  • Enquiry details: name, email, phone, wedding date or timing, guest numbers, and any notes you add when you request a brochure, arrange a viewing, use the pricing calculator or contact us.
  • Viewing portal activity: the name and password you enter to access the couples' viewing portal, so we can help you if you get stuck.
  • Technical data: IP address, device and browser type, referring site, pages viewed, clicks and scroll depth. Only recorded if you accept analytics cookies.
  • Correspondence: emails, messages and call notes so we can respond and keep a record of what was discussed.

We do not knowingly collect special-category data (health, religion, etc.). If you share this with us voluntarily, for example dietary or accessibility requirements, we use it only to plan your day.

How we use it

  • Send you the brochure, estimates and information you request.
  • Arrange and confirm viewings, follow-up calls and site visits.
  • Plan and deliver your wedding if you book with us.
  • Respond to questions and keep records of our conversations.
  • Understand how the site is used so we can improve it (analytics cookies only).
  • Protect the site and our couples from spam and abuse.

We do not sell your data. We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Lawful basis

Under UK GDPR we rely on the following bases:

  • Legitimate interests for responding to enquiries, sending requested information, safeguarding the site and understanding how it is used.
  • Contract for arrangements before and after a wedding booking.
  • Consent for analytics and marketing cookies. You can withdraw this at any time.
  • Legal obligation where we must keep records (for example, financial records).

Sharing and processors

We share limited personal information with trusted service providers who help us run the site and business. Each is bound by contract to only process data on our instructions.

  • Lovable Cloud (application hosting and database) - stores enquiries, brochure and viewing requests.
  • Cloudflare - content delivery, DNS and bot/abuse protection (Turnstile).
  • Resend - transactional email delivery for confirmations and internal notifications.
  • Google (Tag Manager, Analytics 4, Search Console) - website analytics, only when you accept analytics cookies.

We may also share information with our accountants, insurers or legal advisers where necessary, and with the authorities if required by law.

Some processors are based outside the UK. Where that is the case, transfers rely on UK-approved safeguards such as the UK International Data Transfer Addendum or equivalent Standard Contractual Clauses.

Cookies and analytics

When you first visit we ask for your cookie choice. Necessary cookies (site security, form submission, session handling) are always on. Analytics and marketing cookies only load if you accept them.

  • Necessary: Cloudflare security, Turnstile anti-spam and our own session/consent storage.
  • Analytics: Google Analytics 4 (via Google Tag Manager) and our own in-house pageview and click tracking, retained for 90 days.
  • Marketing: off if you have not opted in. If you opt in, we may measure ad performance using Google services.

You can change your choice at any time.

Retention

  • Enquiry and brochure records: kept while you are an active prospect and for up to 3 years after the last contact, then deleted or anonymised.
  • Booked wedding records: kept for 7 years after your wedding date to meet accounting and legal requirements.
  • Website analytics: retained for 90 days in our in-house analytics; Google Analytics uses its own retention setting.
  • Viewing portal login attempts: kept only while needed to help couples access the portal.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct anything that is wrong.
  • Ask us to delete data we no longer need.
  • Restrict or object to certain uses of your data.
  • Receive a copy of the data you gave us in a portable format.
  • Withdraw consent for cookies or marketing at any time.

To exercise any of these rights, email enquiries@bredenburycourt.co.uk. We will respond within one month.

If you are not happy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Security

The site is served over HTTPS. Form submissions are protected by Cloudflare Turnstile to reduce spam and abuse. Enquiry records are stored in a managed database with row-level security, and only authorised team members can access them through our internal admin. Access is protected by authentication and role checks. No online service can be guaranteed 100% secure, but we take reasonable steps to protect the information you share.

Children

This site is intended for adults planning a wedding. We do not knowingly collect data from anyone under 16. If you believe a child has provided information, please contact us and we will delete it.

Changes

We may update this policy from time to time. The date at the top of the page shows when it last changed. Material changes will be highlighted on the site.

Contact

Questions about this policy or the data we hold about you:

See also our contact page.