Bram Stoker Estate privacy notice

We collect the name, email address, organisation and message you provide in an enquiry. Event submissions also include event details, submitted images, captions and permission confirmations. Newsletter sign-ups include your email address, a dated request and a record of the consent wording. A confirmation email asks you to confirm before a new subscription becomes active. We also process technical information needed to secure the website and limit abusive requests. Please avoid sending sensitive personal information unless it is necessary for your enquiry.

We rely on legitimate interests to answer enquiries, maintain relevant correspondence, review event submissions, record image permissions and protect the website from misuse. These interests are responding to people who contact the Estate, maintaining accurate listings and operating a secure service. Where we take steps at your request towards a contract, or perform a contract, we use the contractual lawful basis. We use consent to send Estate news: signing up is optional and separate from contacting us or submitting an event. You may withdraw newsletter consent at any time without affecting earlier lawful processing.

Supabase hosts the Estate’s contact, event and newsletter registers. The configured database region is Ireland (eu-west-1). Vercel hosts the website. Google provides Estate email and editor sign-in services. These providers handle information needed to provide their services; your private email address and correspondence are not published with an event listing.

The Estate may use ChatGPT (OpenAI) and Claude (Anthropic) to help staff draft or organise material. Correspondence is not automatically sent to either service when you submit a website form. Staff must minimise personal information included in assisted drafting and review the result. Resend delivers newsletter confirmation emails using its Ireland sending region (eu-west-1). It processes the recipient email address, confirmation message and delivery information. Marketing updates are separate from these requested confirmation messages.

Cloudflare Turnstile, when enabled on a form, checks technical signals to distinguish people from automated abuse. The check is used for website security, not advertising.

The Supabase database is hosted in Ireland, outside the UK. Other providers may process information or provide support from other countries, including the United States. Before a restricted transfer is enabled, the Estate must establish an applicable UK adequacy basis or appropriate contractual safeguards, with any required transfer assessment. Contact the Estate for information about the safeguards applicable to your information. We do not sell your details or share them for other organisations’ marketing.

Routine enquiries are kept for up to two years after the last substantive contact, unless an ongoing matter or legal obligation requires longer. Event information and image permissions are kept while the listing remains on the website or in its archive. Confirmation links expire after 48 hours. Unconfirmed requests do not join the active newsletter list. Newsletter details are kept while you subscribe; after withdrawal we retain only the consent and suppression information needed to respect your choice and demonstrate how it was handled. Security rate-limit records are short-lived operational records.

You can ask to access, correct or erase personal information, restrict its use, or object to processing based on legitimate interests. Data portability applies in the circumstances set out in data protection law. We do not make decisions about you solely through automated processing. You can unsubscribe from Estate news using your private subscription-management link or by emailing the Estate. These rights depend on the circumstances. You may complain to the Information Commissioner’s Office.

The website uses essential session technology for editor sign-in and security. The public website uses cookie-free Vercel Web Analytics to count visits and page views. It does not collect form contents or track the Estate dashboard or private event-editing or newsletter-confirmation pages; query strings and link fragments are removed from page addresses before recording. See Vercel’s analytics privacy information. The site does not use advertising cookies. External links and map tiles are supplied by other services and have their own privacy notices.