Castle Field

Privacy notice

What happens to the details you send us, in plain English.

Last updated:

Who we are

This website belongs to Castle Field Stud Farm, a family-run farm at Ballymagill, Tullogher, Co. Kilkenny. For data protection purposes, the data controller is:

We're a small business and don't need a Data Protection Officer, but any of the above will reach the person responsible for your data.

What we collect and why

The only personal information this website collects is what you type into the contact form, plus the basic technical records every web server keeps.

Information we collect
WhatWhyKept for
Your name, email address and message To read your enquiry and reply to you 12 months after our last contact, unless your horse comes to board with us
Your phone number (optional) To ring you back, only if you give it to us As above
What your message is about So we can answer the right question As above
That you ticked the consent box, and when To show we had your agreement As long as we keep the enquiry
The spam check on the contact form: your IP address and basic browser details To tell real people from automated spam bots We don't keep this. Cloudflare checks it at the time and handles it under its own Turnstile privacy notice
Technical records: IP address, browser type, pages requested, time To keep the website running and protect it from attacks We don't keep server logs ourselves. Our hosting provider, Cloudflare, keeps short-lived security records as part of running its network

We don't use your details for marketing, we don't add you to a mailing list, and we never sell them. Please don't send us sensitive information, such as health details about yourself, through the form.

If your horse does come to board with us, the details we need to look after them (and to stay in touch with you) are covered by the written boarding agreement, not this notice.

Our legal basis

Under the General Data Protection Regulation (GDPR), we have to have a legal reason to use your information:

  • Contact form: your consent, which you give by ticking the box on the form (Article 6(1)(a)). Where you're asking about boarding, it's also a step you've asked us to take before possibly entering a contract with you (Article 6(1)(b)).
  • Spam check and technical records: our legitimate interest in keeping the website secure, working and free of spam (Article 6(1)(f)).

You can withdraw your consent at any time by contacting us. That won't affect anything we did before you withdrew it.

How long we keep it

We keep enquiries for 12 months after our last contact with you, so we can pick up the conversation if you get back in touch. After that we delete them. If you'd like your enquiry deleted sooner, just ask.

We don't keep server logs or spam-check data. The website's contact form doesn't store your message anywhere: it goes straight to our inbox by email.

Who we share it with

We don't share your details with anyone for their own use. A couple of service providers handle them on our behalf, under contracts that require them to keep the data safe and use it only for us:

  • Cloudflare, Inc. hosts this website, runs the contact form and its spam check (Cloudflare Turnstile), and forwards your message to our inbox
  • Microsoft provides our email inbox (Outlook.com), where your message is kept

Both companies are based in the United States and may handle your details outside the European Economic Area. Both are certified under the EU-US Data Privacy Framework, which the European Commission recognises as giving your data adequate protection. Cloudflare also uses the EU's Standard Contractual Clauses.

We'd only pass your details to anyone else if the law required us to, for example to the Gardaí with a valid request.

Your rights

You have the right to:

  • see the information we hold about you and get a copy of it
  • correct anything that's wrong
  • have it deleted
  • restrict or object to how we use it
  • get it in a format you can give to someone else (data portability)
  • withdraw your consent at any time

To use any of these rights, contact us using the details under Who we are. It's free, and we'll reply within one month. We may need to check it's really you before handing over any information.

We don't make any automated decisions or build profiles about you.

Making a complaint

If you're unhappy with how we've handled your information, please tell us first and we'll try to put it right. You also have the right to complain to the Data Protection Commission, Ireland's data protection regulator:

  • Website: www.dataprotection.ie
  • Post: Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28

Cookies and tracking

This website doesn't use analytics, advertising trackers, social media plugins or embedded maps, and doesn't set any cookies of its own. Our fonts and images are all served from our own website, so visiting it doesn't send your details to Google or anyone else. That's why there's no cookie banner.

The one outside service is the spam check on the contact page, Cloudflare Turnstile. It looks at technical details from your browser, like your IP address, to tell people from bots. Cloudflare says it doesn't use these details to identify, profile or target anyone. It only loads on the contact page.

The Google Maps links on the contact page only take you to Google if you click them. Google's own privacy policy applies from then on.

Keeping your details safe

The whole site runs over an encrypted (HTTPS) connection, so what you type into the form can't be read on the way to us. We limit who can see enquiries to the people who need to answer them, and we protect our email account with a strong password and two-step verification.

Changes to this notice

If we change how we use your information, we'll update this page and the date at the top.