Privacy Policy

1. Who We Are

Haunted Derbyshire is part of Matlock Ghost Emporium Ltd.

If you have any questions about this privacy policy, you can contact us via the contact page on the website.

2. What Information We Collect

Personal Information
If you contact us through a form or email, or create an account, we may collect your name, email address, chosen username, and any information you include in your message.

Technical Information
When you visit the website we may automatically collect certain technical data, including IP address, browser type, device information, pages visited, time spent on pages, and referring websites. This information helps us understand how visitors use the site.

3. How We Use Your Information

• To respond to enquiries or messages
• To operate and maintain the website
• To improve website content and user experience
• To monitor website performance and security
• To analyse website traffic
• To send transactional emails such as sign-in links and account notifications
• To moderate content and enforce our community guidelines

We do not sell or rent your personal data to third parties.

4. Cookies

Our website uses cookies to improve functionality and analyse visitor behaviour. Cookies are small files stored on your device that help websites remember information about your visit. You can control or disable cookies through your browser settings. For full details, see our Cookie Policy.

5. Third-Party Services

We use trusted third-party services to help operate the website, including:

• Supabase — database, authentication, and file storage
• Vercel — website hosting and deployment
• OpenStreetMap — map tiles (no personal data is shared)
• Website analytics tools may also be used to analyse traffic

These providers are required to protect your information and use it only for the services they provide.

6. Data Security

We take reasonable measures to protect your personal data from loss, misuse, unauthorised access, disclosure, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

7. How Long We Keep Your Data

We only keep personal data for as long as necessary for the purposes described in this policy. Contact enquiries may be retained for customer service purposes. Technical website data may be stored for analytics and security monitoring. If you delete your account, your personal information will be removed within 30 days.

8. Your Rights

Under UK data protection law, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Restrict how your data is used
• Object to certain uses of your data

If you wish to exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

9. External Links

Our website may contain links to external websites. We are not responsible for the privacy policies or practices of those websites.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page along with an updated Last Updated date.