Privacy Notice

This privacy notice sets out how we use, or “process”, any personal information we collect from you. It is produced in compliance with the General Data Protection Regulations (GDPR) and the Data Protection Act 2018 which is due to be implemented from 25 May 2018.

The GDPR states that personal data can only be processed if there is a legal ground to do so. The GDPR provides six legal grounds under which personal information can be processed lawfully and stipulates that an organisation’s privacy notice must include reference to this.

Tickets for Events and Exhibitions

We will retain your information for 2 years and process it on the basis of your consent and that it is necessary for the purposes of a contract that you have entered into in purchasing tickets from us. After this period we will delete your information from our records.

Archives and Collections

If you make an enquiry about our archives or collections, we will ask you for your contact details in order to report back to you. We will keep your details on record until you enquiry has been completed, at which point we will destroy your information. You may ask for your information to be retained by us in relation to an archive or collection and we will agree with you how long your information may be held for that purpose. We will not use your information for any other purposes. We will only process your information with your consent.

Similarly, if you make a deposit, donation or loan, we will ask you for your details and keep these on record for the duration of the deposit, donation or loan at which point we will destroy your information unless it is necessary to retain this information as part of our archive, in which case, we will advise you of this. We will not use your information for any other purposes. We will only process your information with your consent.

Outreach

If you want to know more about our community engagement outreach programmes, we will ask you to provide personal details in order to contact you. We will ask you to confirm you are happy for us to send you information about our future events, activities and relevant projects.

We will retain your information for 3 years and process it on the basis of your consent, or that it is necessary in order to provide a service that we have agreed with you. We will contact you roughly every three years to check whether you still wish to be contacted about our outreach programmes. If you do not re-consent to being contacted at that stage we will delete your information from our records.

Photographs, Video or Audio recordings

Sometimes we will ask for permission to take photographs, video or audio recordings of individuals to use as part of our programmes and exhibitions, or to help promote our services. We will always ask for your consent before we do this and ask you to complete the relevant forms authorising us to proceed.

We retain the images and recordings for three years from date of consent. After three years we will either ask you if you are willing to extend your consent for their continued use, or we will delete them. The processing is on the basis of your consent.