Privacy Statement – Grantown Museum and Heritage Trust
What data we keep:
We will only store the following personal data:
- Names, addresses, phone numbers and emails of members;
- As above for volunteers;
- As above for 100 Club members;
- As above for enquiries;
- As above for those who have donated objects or money;
- Contact details for staff;
- Information relating to people who are interviewed for a job.
We store no information associated with the above about personal bank details.
The above personal information (ie contact details) may be on printed paper temporarily and will be destroyed once no longer needed in that form, but such data is not kept routinely in the form of printed lists. Any printed personal information will be kept in locked cabinets in the museum.
The basis of all our storage of Personal Data is consent, on the fact that individuals will wish to hear news about the Museum. That will include reminders about subscriptions, upcoming events, reports on activities at the museum, appeal for assistance. Our membership and other forms will make the need for consent clear.
We hold no special category data.
All the above contact details will be kept electronically on the Museum computer which is password protected. It can only be accessed by the Museum manager and a limited number of Museum Board directors. Most of the time the machine will be in the Museum building which is either manned, or when closed, is alarmed.
The main laptop may be taken out of the building by the Manager to enable work at home – in these circumstances it will remain password protected.
Personal Privacy/Individual Rights
An individual may ask at any time to know what data we store about them, and ask to have that data removed. At that point it will be explained what the consequences of that removal are.
We do not use third parties to process personal information, and we will not pass on personal data to a third party for any reason without consent of the owner of the information.
Audit and Review
We will review our data storage annually. Any data no longer justified for retention will be deleted.
Information on Website and Cookies
When we refer to Our website we are referring to any website in the domain grantownmuseum.co.uk and the website www.grantownmuseum.co.uk
What are cookies?
Cookies are one of the building blocks of most websites for enhancing the user experience of the website visitor. These small text files on users’ computers allow websites to store information.
Cookies can allow websites to remember that a user is logged in, what they have added to their shopping basket and the current ‘state’ of a webpage. They are also used to produce targeted advertising based on users’ behaviour and assist statistics packages such as Google Analytics.
They enable Us to generate statistics about the number of visitors We have and how they use Our websites and the internet – this allows Us to constantly improve Our website and services.
You can set your browser to reject Our cookies if you wish, but this might restrict your use of Our and other websites. For instructions on deleting or controlling cookies please consult your browser help section or see http://www.allaboutcookies.org.
Definition of cookies and their function
i. Session cookies
These are temporary cookie files, which are erased when you close your browser. They are used to store your browsing information while you are using Our websites and will be active until you leave the website and close your browser.
ii. Persistent cookies
Persistent cookies help Us remember your information and settings for any future visits. This results in faster and more convenient access. On your first visit, the website is presented in default mode. During your visit, you select your preferences and these preferences are remembered, through the use of the persistent cookie, for the next time you visit the website. A persistent cookie enables a website to remember you on subsequent visits, speeding up or enhancing your experience of services or functions offered.
iii. CMS specific – session cookies
iv. CMS specific – persistent cookies
These types of cookies are placed by content management software (CMS) to remember your display preferences.
v. Google Analytics (3rd party) cookies
These cookies are used to collect information about how visitors use Our websites. We use the information to compile reports and to help improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from and the pages they visited.
An overview of privacy at Google can be found here http://www.google.com/analytics/learn/privacy.html
vi. Google Ads
Google Ad Manager uses a cookie to be able to manage the frequency you see each advert.
viii. Third party cookies
To improve your experience of using Our website, We sometimes embed content or functionality from third party websites. Pages with this embedded content may present cookies from these websites. We do not control the dissemination of these cookies. You should check the relevant third party website for more information about these. Examples of such third party cookies are:
YouTube: Clicking on an embedded YouTube video may set a cookie on your computer, but YouTube will not store personally-identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. To find out more please visit YouTube’s embedding videos information page.
Cookies in use
Our website is built using WordPress
|wordpress_settings||Set by WordPress to identify a specific user and customise their view of the admin interface and main site interface|
|wordpress_logged_in||Set by WordPress – a cookie for a logged in user. It expires when user exits the browser|
|wp-settings-time||Set by WordPress to identify a specific user and customise their view of the admin interface and main site interface|
We have Google Analytics installed on Our website
|_gat||Cookies set by Google Analytics and is used to throttle requests and has an expiration of 1-minute|
|_ga||Cookie set by Google Analytics and is used to distinguish users and has an expiration of 2-years|
|_gid||Cookie set by Google Analytics and is used to distinguish users and has an expiration of 24-hours|
|_gac_<property-id>||Contains campaign related information for the user. If you have linked your Google Analytics and AdWords accounts, AdWords website conversion tags will read this cookie unless you opt-out|
Share This Widget – gives visitors to Our website the option to share the content to social media
|__uset||Set by the Share This widget – Determines whether a cookie has been set – expires 4hrs|
|__stid||Set by the Share This widget – Tracking for statistics – expires 1 year|
We are firmly committed to respecting your privacy and complying with applicable data protection and privacy laws.
We wish to help you make informed decisions, so please take a few moments to read the sections below and learn how We use your personal information.
Personal information collection
We endeavour to collect and use your personal information only with your knowledge and consent.
On Our website, We may collect your personal information for the following:
- General Enquiries
- Membership and Mailing List Sign-Ups
- Questionnaires or Surveys
The type of personal information We collect will include, for example, your name and postal address, date of birth, telephone number, email address. We do not collect financial or bank related data.
We will not process any personal data collected through the Website unless We have first told you that We are going to do so, and it is clear how We will use it.
Non-Personal Information Collection
We may collect information about the software on your computer (your browser version etc.) and your IP address (your connection with the internet) in order to improve your interaction with the Website. This may happen automatically without you being aware of it.
Cookies also enable Us to generate statistics about the number of visitors We have and how they use the Website and the internet to improve the service We provide. You can set your browser to reject Our cookies if you wish (you should consult your browser help section for details), but this might restrict your use of the Website and other websites. For more information about cookies, please see our cookies statement above.
From time to time, if you consented accordingly We may also store and use your information to contact you for market research and marketing purposes. We may contact you by email, phone or mail.
How will we use your information?
We use personal data for the following purposes:
- To respond to requests for information submitted by you on the website.
- To circulate information about the Museum and its services/events.
- For research purposes and to improve the services We offer.
- In order to comply with Our legal obligations.
If you have consented to receive details about the Museum and its events, or have signed up to Our newsletter, you can contact Us at any time to have your details removed from lists used by Us for any or all of those purposes.
To update your marketing preferences please email firstname.lastname@example.org using the email address you registered with and, if applicable, quote your account number in the body of the email and tell Us what you want Us to do – i.e. ‘I wish to opt out of receiving your newsletter’.
Disclosure of Your Personal Data
We will not sell or pass your personal information to third parties, unless you have given Us permission.
We may be obliged to disclose personal data to a third party if We have a legal or regulatory obligation to do so, for example to comply with a court order, or meet obligations in accordance with applicable law.
Social media, blogs, reviews
Any social media posts or comments you send to Us (on Our Facebook page, for instance) will be shared under the terms of the relevant social media platform (e.g. Facebook / Twitter) on which they are written and could be made public.
Other people, not Us, control these platforms. We are not responsible for this kind of sharing. We recommend you should review the terms and conditions and privacy policies of the social media platforms you use. That way, you will understand how they will use your information, what information relating to you they will place in the public domain, and how you can stop them from doing so if you are unhappy about it.
Any blog, review or other posts or comments you make about Us, Our products and services on any of Our blogs, reviews or user community services will be shared with all other members of that service and the public at large.
Any comments you make on these services and on social media in general must be not offensive, insulting or defamatory. You are responsible for ensuring that any comments you make comply with any relevant policy on acceptable use of those services.
How long do we keep your information for?
To make sure We meet Our legal data protection and privacy obligations, We only hold on to your information for as long as We actually need it for the purposes We acquired it for in the first place.
In most cases, this means We will keep your information for as long as you continue to use Our services and are deemed a client, and for a reasonable period of time afterwards if you stop doing so, to see if We can persuade you to come back to Us.
After that We will delete it other than where We lawfully can keep any data for audit or legal reasons.
We shall keep your personal information on Our database for not longer than  year/s from receipt, subject to an individual’s right to unsubscribe or be forgotten at any time.
Requesting removal of your information
You can write to Us at any time to request removal of the personal information We may hold about you. Please write to: Info@grantownmusuem.co.uk or the Data Protection Officer, Grantown Museum, Burnfield House, Grantown-on-Spey PH26 3HH
We will not make any charge for removing any personal information We hold about you.
We may take reasonable steps to confirm your identity before removing the personal information We may hold about you, this is for your security.
Access to your information
You can write to Us at any time to obtain details of the personal information We may hold about you. Please write to: Info@grantownmusuem.co.uk or the Data Protection Officer, Grantown Museum, Burnfield House, Grantown-on-Spey PH26 3HH
We will not make any charge for providing you with a copy of the personal information We hold about you.
We will take all reasonable steps to confirm your identity before providing you with details of any personal information We may hold about you.
We recognise that people are becoming increasingly concerned about how companies protect personal information from misuse and abuse and about privacy in general.
All personal data that you supply Us with from Our website is stored on servers provided by Our hosting provider. We understand that Our hosting provider www.names.co only employs servers sited in data centres that have the highest level of security accreditation at the time of implementation. For your protection, We never store any payment details.
Please also be aware that communications over the Internet, such as emails, are not secure unless they have been encrypted. Your communications may route through a number of countries before being delivered – this is the nature of the World Wide Web/Internet. We cannot accept responsibility for any unauthorised access or loss of personal information that is beyond Our control.
You can find out more about your rights from the Information Commissioner, who regulates data protection and privacy. The Information Commissioner’s website is https://ico.org.uk/.