Privacy Policy

Privacy is a very important issue for everyone and is a subject we consider to be a priority. We take the issue of data protection very seriously, including compliance with the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 and all other relevant data protection legislation in force and as amended or replaced from time to time. This Privacy Notice outlines how we process your personal data, if you are a guest, member, supplier or one of our booking partners, so you can be confident it’s safe and secure with us, and to understand how we use it to give you a better experience as a member of, or visitor to, our club. We have tried to keep this privacy notice as easy to read as possible, but if you have any questions, you can contact us using the details in the queries section at the bottom of this notice.

Our companies comprise the following entities:

Taymouth Holdings Ltd (Information Commissioner (ICO) Registration No: ZB508365)

River Tay Developments Ltd (ICO registration Number : ZB508356)

The River Tay Castle LLP (ICO Registration Number: ZB508359)

Taymouth Club Ltd (ICO Registration Number: ZB508346) – the Data Controller of personal data of Club Members, their guests, and visitors to the premises.

Taymouth Management Ltd (ICO Registration Number: ZB508353

Discovery Taymouth Manco Limited (ICO Registration Number: ZB834207) - ) – the data controller for personal data of our employees and contractors

Our parent company is Discovery Land Company based in the United States of America with their headquarters at:

257 N. Cannon Dr
Beverly Hills
CA 90210

We have a separate Privacy Notice for our employees and contractors.

Collectively, we are Taymouth Castle Club (referred to in this notice as “we” or “us”).  Our registered office in the UK is:

C/O Alter Domus (UK) Limited
10th Floor
30 St Mary Axe
London
United Kingdom

We obtain information about you in the following ways:

Information you give us directly

We collect information from you:

1. when you make a booking with us, buy our products/services, when you make an enquiry via phone or via our website form, or otherwise provide us with your personal details;
2. from your arrangements to make payment to us (such as bank details, payment card numbers);
3. during visits to our premises;
4. when you use our website, through the use of Cookies on our website;
5. when you enter information on our website or attend an online virtual meeting in platforms such as Zoom and Teams;
6. from your use of any of our other online services, website, social media, etc.
7. when you subscribe to receive newsletters
8. when you register and take part any outdoor activities that we provide
9. when your children take part in any activities
10. when you arrange a wedding or event at our premises
11. when you lease a properties from us
12. when you make any complaints our facilities or the service you have received
13. when you have been involved in any accidents or incidents at our premises
14. when we call or visit you to progress any agreements or contracts to supply us with good or servicesWhen you use our WiFi services
15. If you apply for a job with us, we collect information about you from your job application.  If you are successful in joining our team, we will also collect information from you in relation to your employment.
16. We will also collect contact details from our business partners, suppliers and contractors when we begin our business relationship with you.
17. Information we received regarding you indirectly
18. Your information may be shared with us by third parties, which might include subcontractors acting on our behalf who provide us with technical, payment or other services and our business partners.
19. we may collect your image and audio from our CCTV cameras which are located on our premises.
20. when you visit our website, we place Cookies on your device to run the website. For more information about Cookies and how we use them please see our Cookies policy.
21. when you interact with us on social media platforms such as Facebook, Twitter, Instagram or Vimeo, we may obtain information about you (for example, when you like or post on our Facebook page). The information we receive will depend on the privacy preferences you have set on those types of platforms. You should check any privacy policy/notice provided to you where you give your data to a third party, for example, when you post to our Facebook page.

The data we hold and process for you will depend on our relationship with you, the enquiries you have made with us, or the bookings and services you have requested from us. When you register for any of our services, request information, online or by telephone or, in a limited way, browse our websites, we will collect and store your information as required:

1. Your personal details, including your email address (personal or business), current postal address and phone number
2. Where applicable, your account login details e.g. your username and password
3. Where applicable, guest information, such as passport details, date of birth and signature
4. Where applicable and with explicit consent, special requests such as, but not limited to, dietary and disability requirements
5. Details of any relevant health and ability information when applying for membership, registering to use our spa or activity facilities
6. Consent information for children, including names, ages, date of birth, emergency contact numbers, medical conditions or allergies
7. Details of any future booking(s) you may have made with us
8. Details of the services, facilities or activities that you may have taken part in or used when you visited us
9. Audio recordings of your voice when you make a telephone call to us and when we call you
10. Payment details
11. Company name and nature of your business where applicable
12. Information about your browsing behaviour on our websites and mobile apps
13. Information about your purchases or registrations, including what you bought or have requested, when and how you made the purchase or requests
14. Information on how you access our digital services, including IP address, browser and operating system
15. Information on your browsing preferences in relation to our website through use of cookies. 
16. Images and video recordings

When you contact us or we contact you or you take part in competitions, surveys or questionnaires about our services, we collect:

1. The personal data you provide when you connect with us, through email, post, phone or social media, such as your name, username and contact details.
2. Confirmation that you have opened or interacted with emails and other digital communications we send to you.
3. Your feedback and contributions to customer surveys and questionnaires.
4. Other sources of personal data we use
5. Specialist companies that supply information, and trusted partners
6. We use CCTV images collected in or around our premises, including where publicly accessible footpaths cross our property.
7. Personal data you provide about other individuals
8. Personal data about other individuals, such as those people on your booking, including group bookings.
9. By providing other people’s personal data, you must be sure that they agree to this, and you are allowed to provide it. You should also ensure that, where appropriate, they understand how their personal data is used by us.
10. Should the other person not agree with you having access to their data, they will have to contact us directly to manage their part of any group booking.

To provide the products and services you request 

1. We need to process your personal data so that we can provide you with services that you have requested from us so as to provide you with the products and services you want, such as brochures, and to manage your booking.  If you do not provide us with your personal data, this is likely to affect our ability to provide these services to you.
2. To keep your information up to date we will use a third-party to check your data, for instance in the event of a person being deceased, or if you have moved postal address.

To manage and improve our products, services and day-to-day operations 

1. We use personal data to manage and improve our products, websites, mobile apps, operations and other services. 
2. We use personal data to respond to and to manage security operations, accidents or other similar incidents, including for medical and insurance purposes.  
3. We use CCTV images to help maintain the health and safety of anyone working in or visiting our premises, and for the prevention, detection and prosecution of criminal offences. We may rely on the images to establish, exercise or defend our legal rights. 
4. We use recordings of telephone conversations with you for staff training purposes and to improve our service and to manage and respond to any complaints.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information

To make contact and interact with you 

1. In the event you contact us, for example by email, post, telephone or via social media, we use personal data to provide clarification or assistance to you. 
2. We process your personal data so that we can manage any competitions you choose to enter. For example, if you win a prize. 
3. From time to time, we invite our loyal customers to take part in surveys, questionnaires and other market research activities carried out by us or by other organisations on our behalf and we will process your personal data in order to improve the service we provide to you. 
4. We combine the personal data we collect across different sources, digital and offline, in order to provide you with relevant service and marketing communications (including online advertising relevant to your interests)

Marketing information and business to business activities

1. With your permission or based on a valid soft opt-in legitimate interest assessment, we may send you relevant information from time to time about our products and services, such as new product launches. This includes our email newsletter.  We will also keep you informed by post by using our legitimate business interest.
2. When you request information from us, make a purchase, or create an account with us we will ask if you would like to receive marketing communications. You can change your contact preferences at any time by email, phone, in writing or by clicking the unsubscribe link that you will find on all our emails. This is entirely your choice, but this will prevent you from receiving content or marketing information that we hope is of interest to you.  You may still receive service-related communications from us that provide important information about the use of our products and service, e.g., booking confirmations.
3. So that we can improve our products and services, we like to hear your views, so from time to time we will contact you for market research purposes. You always have the choice about whether to take part in our market research. 
4. To change your contact preferences please contact us at:

Elizabeth Knox, eknox@taymouthcastleclub.com

International data transfers

1. We will only carry out international data transfers of your personal data to a country outside of the UK where the recipient is compliant with UK data protection legislation and the means of transfer provides adequate safeguards in relation to your data, for example:
2. by way of data transfer agreement, incorporating the international data transfer agreements / addendums (as appropriate), current standard contractual clauses adopted by the European Commission for the transfer of personal data
3. Such other international transfer safeguard mechanism as detailed within the UK General Data Protection Regulation
4. Where a derogation applies, such as where the transfer is necessary for the performance of a contract between us

 We may also undertake a transfer to any of our employees, officers, contractors, insurers, professional advisors (including legal advisers and our Data Protection Officer), agents, suppliers or subcontractors, selected third parties, government agencies and regulators and healthcare providers for the purposes set out in this notice, or for purposes approved by you, including the following:

1. where it is necessary for the conclusion or performance of a contract between us and a third party and the transfer is in your interests for the purposes of that contract
2. between our subsidiary companies for the performance of our contract with you
3. with carefully selected suppliers that we work with who carry out certain functions on our behalf. For example, companies that help us with IT services, storing and combining data, marketing, market research, processing payments and delivering products and services.
4. On occasion, to establish, exercise or defend our legal rights; this includes providing personal data to others for the purposes of preventing fraud and reducing credit risk.
5. In the event that we enter into negotiations to sell or transfer any of our businesses or any of our rights or obligations under any agreement we have with you we will share your personal data with that organisation as necessary. If the transfer or sale goes ahead, the organisation receiving your personal data can use your data in the same way as us.
6. If required by law, we will disclose your information to statutory bodies such as auditors or solicitors

When we share personal data with other reputable service providers it is conducted under contractual agreements where we require them to keep it safe, and we do not allow them to use your personal data for their own purposes including marketing.

We only share the minimum personal data that enable our suppliers and partners to provide their services to you and us. 

Where you have entered into a contract with us, failure to provide personal data may mean that we are unable to properly implement the contract and that you are unable to exercise certain contractual rights.

We will only collect and use your personal data if at least one of the following conditions applies:

• We have your consent, e.g. you have opted in to marketing when purchasing our services, which you can withdraw at any time
• It is necessary for a contract with you or to take steps at your request prior to entering into a contract, e.g. to complete a purchase
• It is necessary for us to comply with a legal obligation
• It is necessary to protect the vital interests of you or another individual, e.g. the exchange of personal data with medical staff in an emergency situation
• It is in the public interest, or we have official authority, e.g. to respond to and manage security operations
• Where we have a legitimate interest, including
  • better understanding your interests, so that we can predict which other products and services might be of most interest to you and for staff training and complaint management purposes.  This ensures we can tailor our communications to be more relevant for you. This would include direct marketing offers, digital feedback (for instance Reevoo, Trustpilot, Feefo), surveys, telephone call recordings, marketing profiling.
  • Protecting our staff and customers and assisting with the preventing and detection of crime through the use of CCTV recordings.
  • Enhancing, modifying, personalising or otherwise improving our services/communications for the benefit of our customers, including the use of telephone recordings
  • Sending you a survey 

Where we need to process special categories of personal data, for example health data for medical reasons, we will only do so if this complies with data protection law. This will include but is not limited to:

1. We have your explicit consent
2. It is necessary to protect the vital interests of you or another individual and you are physically or legally incapable of giving consent
3. It is necessary to establish, exercise or defend legal claims
4. It is necessary for reasons of substantial public interest

We take our responsibility to protect and manage your personal data very seriously and we use appropriate technical tools to manage and secure your personal data. All data is held in accordance with Taymouth’s data protection policies and procedures.

1. Technical measures
2. We take appropriate security measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access when it is being transmitted, stored or otherwise processed.  
3. Use of cookies - Cookies are small text files that are stored on your computer or mobile device. They can’t harm your computer and don’t store personally identifiable information such as credit card details but help us to provide features and functionality on our websites and mobile apps that we use to improve your customer experience. Please see our cookie notice for further information.
4. Use of Analytics - When you visit our website, we use a third-party service, Google Analytics, to collect information and details of user browsing patterns and habits. We do this to monitor visits to various areas of our website. We also use this software to assign a unique Google Analytics ID to each user to provide a more personalised experience on our website. This software enables us to link your IP address to your browsing on our website and to tailor your browsing experience. Please see Google’s privacy policy for further information on Google Analytics.
5. Links from our website to other organisations, and social media - Our websites or mobile apps contain links to websites operated by other organisations. They will have their own privacy notices so please make sure you read their privacy notice carefully before providing any personal data as we do not accept any responsibility or liability for websites of other organisations. Our websites or mobile apps contain social media features such as Trip Advisor, Facebook and Twitter that have their own privacy notices. Please make sure you read their privacy notices carefully before providing any personal data as we do not accept any responsibility or liability for these features.  

We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law, as recorded in our Data Retention schedule, after this period, we will securely erase personal data or take appropriate measures to anonymise it.  

Your personal data will only be stored within the United Kingdom except where international transfers are authorised by law.

Under UK data protection law, you have certain rights over the personal information that we hold about you.

Right of access

You have a right to request access to the personal data that we hold about you and to request a copy of it, and we will provide you with this unless legal exceptions apply.  If you want to access your information, please send a description of the information you would like to see to the contact details above. We may ask for proof of your identity before proceeding with your request.

Right to have your inaccurate personal information corrected

You have the right to have inaccurate or incomplete information we hold about you corrected.

Right to restrict use

You have a right to ask us to restrict the processing of some or all of your personal information if there is a disagreement about its accuracy, or we're not lawfully allowed to use it.

Right of erasure

You may ask us to delete some or all of your personal information and in certain cases, and subject to certain exceptions; we will do so as far as we are required to.

Right for your personal information to be portable

If we are processing your personal information (1) based on your consent, or in order to enter into or carry out a contract with you, and (2) the processing is being done by automated means, for example, via you completing a form on our website, you may ask us to provide it to you or to another service provider in a machine-readable format.

Right to object

You have the right to object to processing where we are using your personal information (1) based on legitimate interests, (2) for direct marketing or (3) for statistical/research purposes.

If you want to exercise any of the above rights, please contact our Data Protection Lead at the details above.  We may be required to ask for further information and/or evidence of identity.  We will endeavour to respond fully to all requests within one month of receipt of your request, however if we are unable to do so we will contact you with reasons for the delay.

Please note that exceptions apply to a number of these rights, and not all rights will be applicable in all circumstances.  For more details we recommend you consult the guidance published by the UK’s Information Commissioner’s Office.

If you would like to make a request, please email or write to: The Data Protection Officer

By Email: Info@rgdp.co.uk

By Post: Taymouth Castle Kenmore
Perthshire Scotland
United Kingdom
PH15 2EZ

We seek to directly resolve any queries or complaints about how we handle information and would request that you contact our Data Protection Officer who is provided by RGDP LLP and can be contacted either via

Email: info@rgdp.co.uk

Or

Telephone:  0131 222 3239

We aim to resolve all concerns and complaints but, if you are dissatisfied, you also have the right to complain to the Information Commissioner’s Office in relation to our use of your information.  The Information Commissioner’s contact details are noted below:

Telephone: 0303 123 1113 

Online: Make a complaint | ICO