This policy applies to all employees, volunteers and trustees who process personal data.
Who we are
Tiverton Museum of Mid Devon Life
We are a registered charity 239531
Any electronic communications will be made in accordance with the Privacy and Electronic Communications Regulations (PECR)
What information do we collect about you?
We collect the personal data that you may volunteer as part of ticket bookings, online purchases, Membership or donation forms, e-newsletter sign-ups and visitor surveys.
We will also collect and hold information about any contact you have with us as a visitor, customer, supporter, volunteer or staff member of Tiverton Museum of Mid Devon Life, and may consist of details of:
When we ask you to provide your personal information we will let you know why we are asking, and how we will use your data, by directing you towards this notice.
What we do with your information
Depending on your relationship with Tiverton Museum of Mid Devon Life, and the preferences you have indicated, data we hold may be used by us for the following purposes:
You can opt out of any / all of our communications at any point simply by contacting firstname.lastname@example.org
There are some Membership and donation communications that we are required to send regardless of your contact preferences. These are essential communications, deemed necessary to fulfil our contractual obligations to you. This would include advanced notices, thank you letters, Member benefits, Membership cards, renewal reminders, Gift Aid confirmation letters and querying any returned mail.
Who we might share your information with
We do not disclose personal data to any third parties or external organisations, other than data processors carrying out work on our behalf.
Examples of such data processors would be mailing houses for the sending of bulk email distribution services, or wealth screening and data cleaning organisations.
Any such companies are acting as approved data processors for Tiverton Museum of Mid Devon Life, and we retain full responsibility for your personal data. Data processors will act only on our instructions.
We may occasionally need to transfer your personal information overseas, for instance to our bulk email distributor, MailChimp. Where this is necessary, this may be to countries or territories around the world.
We are required to ensure any transfers of data will be done securely, in accordance with best practice, and in compliance with the Data Protection Act 1998.
Your data will never be sold or passed to any third party for any other purpose.
How we keep your information secure
We have implemented security procedures, rules and technical measures to protect the personal data that we have under our control from:
All our employees and data processors, who have access to, and are associated with the processing of personal data, are legally obliged to respect the confidentiality
of our visitors’ and supporters’ personal data.
Data Security Summary
In respecting personal data for which it is responsible, the Trust expects staff, volunteers and trustees to ensure that:
Data and Document Retention
How can I access the information about me, and correction of information?
You can ask us if we are keeping any personal data about you and you can also request to receive a copy of that personal data – this is called a Subject Access Request.
To make a Subject Access Request you will need to provide adequate proof of identity such as a copy of your passport, birth certificate or driving licence before your request can be processed. There may also be a fee of up to £10 depending on the volume of work required.
Please try to be as clear as possible about the information you are seeking.
Once we have received your Subject Access Request, the agreed fee and proof of identity, you will receive a response from us within 40 days and you will be able to get copies of any information we hold on you. This includes whether any personal data is being processed; a description of the data; the reasons it is being processed and whether it will be shared; the source of the data. However, exemptions to disclosure may apply in some circumstances.
Subject Access Requests should be sent to:
Tiverton Museum of Mid Devon Life.
At any time you may request that we delete or correct your personal information. If you wish to correct any information on you held by Tiverton Museum of Mid Devon Life, simply contact email@example.com
Web Log Files
In line with common practise we automatically log certain information about every visit to this website. This includes information provided automatically by your web browser program and will consist of items such as your internet IP address, time and date of access, web pages and images viewed. This information does not allow us to identify you personally and is used only to monitor levels and patterns of use of our website.
Cookies and How We Use Them
Cookies are small text files sent over the internet and which are stored on your computer by your web browser. These files are then sent back to our servers each time you visit our website and allow us to provide continuity as you move from page to page, or return to our website in the future.
What If You Are Not Happy About Us Using Cookies?
If you wish to go ahead and reject cookies from our website, the following resources will tell you more about cookies and how to set up your web browser to suit your preferences:
Changes to our privacy notice
We regularly review our privacy notice, and may make changes time to time. Any changes made will be posted to this page, and will apply from the time we post them. This privacy notice was last changed on 18th April 2017.
How to contact us
If you have any comments on our privacy notice, or information we hold about you please contact us: