Privacy Policy

Lyme Regis Museum Privacy Policy

Date of last revision: 2nd April 2024

 

Lyme Regis Museum Trust is committed to protecting and respecting your privacy. We want you to understand how we collect and use information about you.

 

The privacy policy explains to you:

  • who we are
  • what personal data we collect and store about you, and how we collect it
  • why we collect personal data and what we do with it
  • third parties with whom we may share your personal data
  • how we retain your information and keep it secure
  • your rights and how to exercise them
  • how to contact us

 

Who we are

For the purposes of data protection law, the “controller” is Lyme Regis Museum Trust, a company registered in England and Wales Company Registration No. 2855423, and Registered Charity No. 1041201. The registered office address is Bridge Street, Lyme Regis, DT7 3QA, United Kingdom (from now on referred to as “Lyme Regis Museum”, or as “we” and related words such as “us” and “our”). Our registered VAT number is GB634377135.

As controller we are responsible for, and control the processing of, your personal data. We are registered as a data controller with the Information Commissioner’s Office, which is the UK’s supervisory authority for data protection matters.

 

The personal data we collect

In the course of our business, which is the sale of museum admission, annual passes, walks, event tickets and shop merchandise, we collect the following personal data when you provide it to us:

  • personal details, such as your name and title
  • contact data, such as your billing address, email address or telephone number(s)
  • image data, namely photographs (if we are taking pictures during an event and you have not objected to us doing so)
  • biographical data from job applications and CVs, such as institutions attended, academic and other qualifications held, employment history, any other personal information you provide
  • payment card details
  • transaction data, such as details about payments to and from you
  • technical information such as internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website. Information about your visit including the URLs, clickstream to, through and from our site, pages you viewed or searched for, length of visits to certain pages, page interaction information (such as scrolling or clicking)
  • your email address for marketing purposes
  • your place of work and job title if you are a teacher or university lecturer making a booking on behalf of your organisation

We do not collect sensitive personal data (for example ethnic origin, political opinions, or sexual orientation) and ask that you do not provide such information to us.

 

How we collect your personal data

We obtain personal data from you when you:

  • Interact with us, for example when you buy museum admission, an annual pass, purchase an item from our online shop or book an event with us. If you provide another person’s details please ensure you have that person’s explicit consent to do so
  • Sign up to our mailing lists either online or in the museum
  • Request information or contact us via telephone, email, social media or in writing
  • Give us feedback or post comments or reviews
  • Apply for a job, voluntary position or to become a trustee, or send us a CV
  • Through cookies when you use our website. You can read our cookies policy here https://www.lymeregismuseum.co.uk/use-of-cookies/.

 

Why we collect your personal data

If you are our customer, volunteer, trustee or applying for a job with us, we will process your personal data for the following purposes, on the legal basis that it is necessary for us to do this to provide our products and services to you.  We collect personal data so that we can:

  • Identify you
  • Respond to your enquiries
  • Provide you with information you have requested
  • Provide our products and services, which may involve contacting you
  • Carry out billing and administration activities, including refunds and credits
  • Administer your job application, volunteer application or application to become a museum trustee and to evaluate your suitability for future opportunities if you have asked for this.

 

Do I have to give you my personal data?

You are not obliged to provide us with any of this information, but if you choose not to, we may be unable to provide the product or service that you have requested.

 

Use of your information for marketing purposes

We process your personal information for our legitimate business purposes so that we can let you know about our products, services, promotions or events that we consider may be of interest to you.

We do this only where you have provided us with an email address for this explicit purpose by subscribing to our e-newsletters online or in the museum.

You can opt out of receiving such marketing information with immediate effect by clicking the unsubscribe link in our emails.

 

Security of your personal data

All personal information you provide to us is stored on our secure servers. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

 

Sharing your personal data

If you choose to subscribe to our email newsletters, we will share your email address only with our email provider so that we can send you news and events as requested. Information is transferred securely, and we retain full responsibility for your personal data as the data controller. There are strict requirements on our email provider to keep your personal data secure, and you can view their own policy here http://weareintouch.co.uk/privacy-policy

We may also share your data with third parties where necessary for our legitimate business purposes, such as:

  • Service providers providing IT and systems administration processing, email delivery, auditing, and other services
  • To any court, regulator, law enforcement agency, government body or professional body, if we are obliged to disclose Personal Information under applicable law or regulation

 

How long will you keep my data?

We will not keep your information in a form that identifies you for longer than is necessary for the purposes set out in this Privacy Policy or as required by applicable law, and:

  • For only as long as you continue to subscribe to receive marketing information, or
  • For only as long as is necessary to enable us to contact you for customer service support, or
  • In the case of information related to a job application, volunteer application or application to become a trustee for two years.

 

How we keep your data secure

We take all reasonable steps to keep your data safe and secure and to ensure the data is accessed only by those who have a legitimate interest to do so. This includes

  • Restricted access to personal information among staff, volunteers and trustees
  • Use of secure technologies (SSL)

All Lyme Regis Museum employees, volunteers or trustees who have access to your personal data are required to adhere to the Lyme Regis Museum Privacy Policy.

Any information you give us relating to credit or debit card details is handled by a PCI DSS compliant third party and encrypted using secure server technology.

 

Your rights

We draw your attention to your following rights under data protection law:

  • The right to be informed about the collection and use of your personal data
  • The right of access to your personal data, and the right to request a copy of the information that we hold about you and supplementary details about that information
  • The right to have inaccurate personal data that we process about you rectified
  • The right of erasure
  • The right to object to, or restrict the processing of personal data for marketing use

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).

You may assert your rights by contacting us as set out under ‘Who we are’ above.

These rights are subject to certain limitations that exist in law. Further information about your information rights is available on the ICO’s website: https://ico.org.uk/.

 

Cookies

Our website uses cookies. This helps us to provide you with the best experience we can when you browse our website and allows us to improve our site. For more information please see our cookies notice https://www.lymeregismuseum.co.uk/use-of-cookies/.

 

How do I complain about use of my data?

We hope that if you have any complaint about the way we handle your personal data that you will contact us first so that we can put things right.

However, should you find it necessary, you have a right to raise your concern with the information regulator via the Information Commissioner’s Office: https://ico.org.uk/.

 

Changes to our Privacy Policy

We may make changes to this Privacy Policy from time to time. Please check our website to ensure you have read the most recent version.

 

© Lyme Regis Museum, 2016-23