This Policy explains when and why Menai Heritage collect personal information about people who visit our exhibition, website, or otherwise use our services, how we use it, the conditions under which we may disclose it to others and how we keep it secure. Any questions regarding this Policy and our privacy practices should be sent by email to firstname.lastname@example.org or by writing to us at:
Thomas Telford Centre
Menai Bridge, Isle of Anglesey, LL59 5EA
Alternatively, you can telephone 01248 715046.
1. How do we collect information from you?
We hold data on people who do, or might do, the following:
- visit the museum
- buy tickets for and/or attend exhibitions and events
- take part in our programme of events and activities
- buy goods or services from us
- contribute items to the museum collections
- contribute to research on our collections and exhibitions
- volunteer at the museum
- support the museum financially and in other ways
- visit our website
- subscribe to our newsletters or sign-up to receive regular updates
2. What type of information is collected from you?
The personal information we collect might include your name, address, email address, IP address, and information regarding what website pages on our web site are accessed and when. If you make a donation online or purchase a product from us, your card information is not held by us, it is collected by our third party payment processors, who specialise in the secure online capture and processing of credit/debit card transactions, as explained below.
3. How is your information used?
We may use your information to:
- send information to you about the Museum
- help manage and develop the museum collections
- provide tickets for events requiring them
- administer donations (including Gift Aid)
- administer membership scheme(s)
- administer volunteering opportunities and programmes
- build financial and volunteer support for the Museum through various fundraising and marketing activities
- operate a museum shop
- promote the aims and objectives of the Museum through any other activities not specifically mentioned
We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations (for example the collection of Gift Aid). We will hold your personal information on our systems for as long as is necessary for the relevant activity, or as long as is set out in any relevant contract you hold with us.
4. Who has access to your information?
We will not sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.
Third Party Service Providers working on our behalf: We may pass your information to our third party service providers, agents, subcontractors and other associated organisations for the purposes of completing tasks and providing services to you on our behalf (for example to process donations and send you mailings). However, when we use third party service providers, we disclose only the personal information that is necessary to deliver the service and we have a contract in place that requires them to keep your information secure and not to use it for their own direct marketing purposes. Please be reassured that we will not release your information to third parties outside Menai Heritage for any other purpose, unless you have requested us to do so, or we are required to do so by law, for example, by a court order or for the purposes of prevention of fraud or other crime.
When you are using our secure online donation pages or purchase items in our online shop, your payment is processed by a third party payment processor, who specialises in the secure online capture and processing of credit/debit card transactions.
5. How you can access and update your information
The accuracy of your information is important to us. If you change email address, or any of the other information we hold is inaccurate or out of date, or you wish to have your data deleted, please contact us at the address given at the start of this document.
You have the right to ask for a copy of the information we hold about you, which we will provide within a month. An administrative charge may be applied for excessive requests.
6. How long do we keep your data?
We will keep data for as long as is needed to complete the task for which it was collected. Relationships between donors or volunteers and a museum are often long term ones, and so we expect to keep your data for as long as that relationship exists, or until we no longer need it. We keep data on those who lend or give us items for the collection for so long as the item remains in the collection.
7. How we keep your information secure
We have implemented security procedures, rules and technical measures to protect the personal data that we have under our control from:
- unauthorised access
- improper use or disclosure
- unauthorised modification
All our employees and data processors, who have access to, and are associated with the processing of personal data, are legally obliged to respect the confidentiality of our visitors’ and supporters’ personal data.
We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you when it is available from external sources to help us do this effectively. We may also use your personal information to detect and reduce fraud and credit risk.
9. Use of ‘cookies’
The web site also has widgets in the sidebar that allows visitors to like/follow our social media accounts or see our latest TripAdvisor reviews. These also set their own cookies, which are covered by the privacy policies of the related companies (e.g. Twitter, Facebook, TripAdvisor).
When you first visit this site you can choose to accept or reject the storage of cookies. By accepting, you consent to the processing of data about you by the above mentioned companies in the manner and for the purposes set out above.
10. Links to other websites
In addition, if you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.
11. 16 or Under
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
12. Transferring your information outside of Europe
As part of the services offered to you through this website, the information which you provide to us may be transferred to countries outside the European Union (“EU”). By way of example, this may happen if any of our servers are from time to time located in a country outside of the EU. These countries may not have similar data protection laws to the UK. By submitting your personal data, you’re agreeing to this transfer, storing or processing. If we transfer your information outside of the EU in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this Policy.
If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.
13. Review of this Policy
We keep this Policy under regular review. This Policy was last updated in April 2018.