Bram Stoker Estate privacy notice

When you contact The Estate by using the website form or email, we use the name, email address, phone number, organisation and message you give us to respond and keep a record of our correspondence. Please do not include sensitive personal details. If you include an optional image attachment, we keep it with your enquiry and make it available only to authorised Estate staff.

We rely on our legitimate interest in answering enquiries and keeping relevant correspondence. If you ask us to take steps towards a contract, or we need your information to carry out a contract with you, we rely on that basis. We keep routine enquiries for up to two years after our last substantive contact, unless an ongoing matter or legal obligation requires us to retain them for longer.

We use the event details, images, captions and permissions you submit to review, publish and update listings. Please only submit images of identifiable people if you have their permission to share them. We do not publish your private email address and correspondence in the public listing of your event. We rely on our legitimate interest in keeping listings accurate and recording permission to use images. We keep event information and permissions while the listing is on the website or in the Estate’s archive, while a submitted image is used under the permission given, and for as long as reasonably needed to document that permission or handle a rights enquiry. For each submitted image, including an existing image confirmed with an organiser update, we record the submitter’s name and email address, the date and time, and the exact privacy and image permission wording accepted. Cancelling an event removes it from current public listings but retains the private Estate record. You can ask us through the Contact page to stop future use of an image.

If you sign up for news, we record your email address, the date of your request and the consent wording you saw. Your subscription starts when you confirm. Signing up is separate from sending an enquiry or submitting an event.

We send news with your consent. You can withdraw it at any time using your private subscription-management link or by contacting us. We keep your details while you subscribe. Afterwards, we retain only a minimal record (such as your email address on a suppression list and the date you unsubscribed) needed to honour your choice and show how we handled it. Withdrawal does not affect earlier lawful use.

Google provides our email and editor sign-in. Supabase hosts our contact, event and newsletter records in its Ireland database region. Vercel hosts the website. Cloudflare provides the Turnstile spam check on our forms. Resend delivers newsletter confirmation emails and processes the recipient address, message and delivery information.

The Estate may also use ChatGPT (provided by OpenAI), Claude (provided by Anthropic) or other AI for editorial assistance to help draft or improve a reply or listing. These tools can search public sources and receive relevant correspondence, contact and event details, Estate notes, and the sender’s name, organisation and project details to help draft wording and replies. These are then reviewed by a member of Bram’s family before sending. Submitting a form does not itself start an AI review. We rely on our legitimate interest in replying to you efficiently and accurately.

We use essential session technology for editor access and process technical information to protect the site and limit abusive requests. Security rate-limit records are kept for up to 24 hours. We use various techniques to deter vampires, AI bots and other undead. Garlic and crucifixes are traditional. For online forms, we use the more modern Cloudflare Turnstile where enabled. This checks signals from your browser to help distinguish people from automated submissions, usually without asking you to solve a puzzle or look for buses. We rely on our legitimate interest in running a secure website.

Our providers and their partners may process information in the UK, the EU, the United States and other countries where they operate. Our Ireland hosting or sending region does not cover every support or processing activity. Where information is transferred outside the UK, our providers rely on safeguards such as UK adequacy regulations (including the UK–US data bridge for certified providers) or standard contractual clauses with the UK addendum. Contact us for details relevant to your enquiry. We do not sell your details or share them for other organisations’ marketing.

You can ask for access, correction, erasure or restriction of your personal information. You can object to uses based on legitimate interests and, where applicable, ask for a portable copy. Where we rely on consent, you can withdraw it at any time. We do not make decisions about you solely by automated processing. You can complain to us, using the contact form above, or to the Information Commissioner’s Office.

Vercel Web Analytics counts public page views without analytics or advertising cookies. It may record the device, browser and approximate city or country inferred from the connection. A temporary visitor hash resets daily. We exclude form contents, dashboard pages, private event-editing pages and newsletter-confirmation pages, and strip query strings and fragments from page addresses. Infrastructure providers may keep separate operational or security logs. See Vercel’s analytics privacy information.

Optional statistics are on by default. Use statistics choices to switch off website analytics and walking-guide counts in this browser. We also respect Do Not Track and Global Privacy Control. A preference cookie remembers your choice for up to two years and contains no visitor identifier. Choose again if you change browser or clear cookies. All guide features remain available.

To improve the walking guides, we count guide and stop openings, pin selections, directions clicks, returns to the map, shorter-route choices, full-screen use, downloads and map errors. We count the browser’s preferred language separately for each walk to help plan translations. We never receive information on your location during the walking tours.

Supabase holds daily totals by walk, action and, where relevant, stop. Language totals use broad categories such as English. The totals contain no IP address, visitor identifier or individual activity history. Switching statistics off stops future counts. We cannot pick out an earlier contribution. Totals are automatically deleted after 24 months.

You can follow a walk without sharing your location. If you choose “Show my location” and give permission, the page uses your coordinates and estimated accuracy to show you a blue dot, identify the nearest stop and estimate straight-line distances. The Estate receives no GPS coordinates and keeps no journey history. Choose “Stop sharing location” or leave the page to end updates to you on your position. You can also change permission in your browser settings.

Your browser requests map tiles from OpenStreetMap and, on the various maps, OpenTopoMap. The provider receives your IP address and the map area you view. Centring the map on yourself can reveal an approximate area to these providers but we do not track this information. If you open directions in Apple Maps or Google Maps, that service’s location settings apply. See OpenStreetMap privacy policy.