Telephone: 01728 832189
Email: info@longshopmuseum.co.uk

Data Privacy Notice

Contents

1.  General information
2.  If you visit our museum, exhibitions or events
3.  If you are a Gift Shop or online Shopping Customer
4.  If you are an E-newsletter subscriber
5.  If you make a financial donation to The Long Shop Museum
6.  If you enter a competition
7. If you belong to our 100 Club
8.  If you volunteer with us

9.  Managing our collections
10.  Sharing information
11.  Legitimate interests
12. How we keep your information secure
13. Your Data Protection Rights
14. Changes to this privacy policy
15. How to contact us


1.  General information

The Long Shop Museum is an accredited independent museum in Leiston, Suffolk. The museum has a collection of over 5,000 items, the majority of which are related to the history of the Garrett Works, including buildings, tools, products, photographs and publicity literature.

This Privacy Policy sets out how and why we use the personal data you provide to us, which will differ depending on how you interact with us.  Please read the sections that apply to you.

Who are we?

The Long Shop Museum
Main Street
Leiston
Suffolk
IP16 4ES

We are registered as a Charity, our registration number is: 1167945.

Our Charitable Statement of Purpose

To preserve, restore and maintain heritage buildings of the former Richard Garrett Town Works, that are of special architectural and historical interest, as a museum showcasing Leiston’s unique engineering and social history for the education and benefit of the public.

Retention periods

We will only ever collect the information we need.  When we ask you to provide your personal information we will let you know why we are asking and how we will use your data, by directing you towards this notice.

We hold your information only as long as necessary for the purpose it was collected. If you decide not to support The Long Shop any more, or request that we have no further contact with you, we will keep some basic information in order to avoid sending you unwanted communications in the future.

2.  If you visit our museum, exhibitions or events

What we collect… Why Legal Bases
We may collect your name, postal address, email address and phone number If you sign up to Gift Aid we are required by HMRC to obtain your name and postal address It is a legal requirement for this process.
To send you your tickets This is required for the contract (sale of the product or service)
We may need to contact you if there is a change to an activity you have booked for This is required for the contract (sale of the product or service)
We would like to keep you up to date with news about our work, events, products, special offers and ways of supporting The Long Shop Museum. We will only send you these communications via email if we have your consent to do so
Bank card details To buy an admission or event ticket we require these details to process the sale.

We do not receive or retain these details if you pay online or via our front desk.

This is required for the contract (sale of the product or service)

3.  If you are a Gift Shop or online Shopping Customer

What we collect… Why Legal Bases
We may collect your name, postal address, email address and phone number To provide you with the products you purchase This is required for the contract (sale of the product or service)
Bank card details We require these details to process the sale.

We do not receive or retain these details if you pay online or via our front desk. Any information you provide to us over the phone will be securely destroyed.

This is required for the contract (sale of the product or service)
We would like to keep you up to date with news about our work, events, products, special offers and ways of supporting The Long Shop Museum We will only send you these communications via email if we have your consent to do so

4.  If you are an E-newsletter subscriber

What we collect… Why Legal Bases
We may collect your email address and communication preferences To send you news about our work, products, special offers and ways of supporting The Long Shop Museum. We will only send you these communications via email if we have your consent to do so

If you consent to receive information by email, your email address and communication preferences are held by us in MailChimp, a commercial email service we use to send out our e-newsletters; they are used only for the purpose of sending you these communications.

You can choose to opt out of these marketing communications at any time by contacting us at info@longshopmuseum.co.ukor by using the unsubscribe link at the bottom of every e-newsletter.

5.  If you make a financial donation to The Long Shop Museum

What we collect… Why Legal Bases
We may collect your name, postal address, email address and phone number If you sign up to Gift Aid we are required by HMRC to obtain your name and postal address It is a legal requirement for this process.
We would like to keep you up to date with news about our work, events, products, special offers and ways of supporting The Long Shop Museum. We will only send you these communications via email if we have your consent to do so.
Bank card details To allow us to process your payment. This is required for the contract (sale of the product or service)

6.  If you enter a competition

What we collect… Why Legal Bases
We may collect your name, postal address, email address and phone number To contact you if you win On the Bases of legitimate interests – to contact you if you win.

We will destroy your personal data after the competition has closed unless you have expressly chosen to opt-in to our email list. See Section 5.

7.  If you belong to our 100 Club

What we collect… Why Legal Bases
We will collect your name, postal address, email address and phone number To contact you if you win On the Bases of legitimate interests – to contact you if you win.

We will destroy your personal data when you withdraw from the 100 Club unless you have expressly chosen to opt-in to our email list.

8.  If you volunteer with us

What we collect… Why Legal Bases
We will collect your name, postal address, email address and phone number To contact you regarding volunteering matters On the Bases of legitimate interests – to contact you as a volunteer
We will record your areas of interest in volunteering To enable us to offer you appropriate volunteering opportunities On the Bases of legitimate interests – to contact you as a volunteer
We may collect your next of kin information To enable us to contact someone on your behalf in the event of an emergency On the Bases of legitimate interests – to contact your next of kin in an emergency
We will collect your date of birth if you are under 18 when you join us To enable us to apply appropriate age related safeguarding measures when you volunteer with us Appropriate safeguarding is a legal requirement
We may request information about learning difficulties or other disabilities To help ensure your health, safety and welfare when you volunteer with us and/or to enable us to make reasonable adjustments to accommodate your needs at the Museum On the bases of our legal obligation to comply with relevant legislation

We will delete your personal data when you inform us that you no longer wish to volunteer with us

9.  Managing our collections

We hold personal data in order to manage the collections of The Long Shop Museum.

What we collect… Why Legal Bases
We may collect your name, postal address, email address, phone number and date of birth. To record the details of disposals from and gifts, purchases and loans to our collections It is a legal requirement for this process.
To enable us to lend items to other institutions or researchers It is a legal requirement for this process.
To ensure that we comply with copyright legislation when providing copies of items in our collections It is a legal requirement for this process

10.  Sharing information

We do not disclose personal data to any third parties or external organisations.

11.  Legitimate interests

We have a number of legal bases that mean we can use (or ‘process’) your personal information. One Bases ‘Legitimate Interests’, which means we can process your personal information if:

  • We have a genuine and legitimate reason
    and
  • We are not harming any of your rights and interests.

The following are some examples of when and why we would use this approach in our work:

  • Direct Marketing: We may send postal marketing and fundraising requests which further the aims and objectives of The Long Shop Museum.
  • Research, to help us understand our donors and potential donors, including gathering information from publicly available resources to give an insight into your philanthropic interests and ability to support The Long Shop Museum.

When we process your personal information for our legitimate interests, we will consider and balance any potential impact on you and your rights under data protection and any other relevant law. Our legitimate business interests do not automatically override your interests.

12. How we keep your information secure

We have implemented security procedures, rules and technical measures to protect the personal data that we have under our control from:

  • Unauthorised access
  • Improper use or disclosure
  • Unauthorised modification.

Our employees and volunteers who have access to and are associated with the processing of personal data, are legally obliged to respect the confidentiality of our visitors’ and supporters’ personal data.

13. Your Data Protection Rights

Under new data protection laws taking effect in May 2018, you have certain further rights in relation to your personal data. These rights are:

  • The right of access: you have the right to know whether we are processing any of your personal data. If we are, you have the right to access the data and certain information, such as why we are processing the data
  • The right of rectification: you have the right to ensure that we correct inaccuracies in your personal data that we are processing
  • The right of erasure(the ‘right to be forgotten’): in certain situations you have the right to ensure that we erase your personal data
  • The right to restrictionof processing: in certain situations you have the right to ensure that we restrict our processing of your personal data
  • The right of data portability: in certain situations you have the right to receive personal data that you provided to us in a structured, commonly used and machine-readable format
  • The right to object: in certain situations you have the right to object to our processing of your personal data and we are normally obliged to stop processing your data when requested. This right includes the right to object to our processing of your personal data for the purposes of direct marketing
  • The right to complain: you have the right to make a complaint to the UK Information Commissioner’s Office(ICO) about our processing of your data, the exercise of your rights, and other data protection matters
  • The right to withdraw consent: you have the right at any time to withdraw your consent for us to process your personal data.

These rights are not absolute and may not apply in all situations or in relation to all processing activities.

Requests to exercise any of these rights should be sent to:

Data Protection
The Long Shop Museum
Main Street
Leiston
Suffolk
IP16 4ES

Email: info@longshopmuseum.co.uk

At any time you may request that we delete or correct your personal information by simply contacting info@longshopmuseum.co.uk

14. Changes to this privacy policy

We regularly review our privacy notice, and may make changes time to time. Any changes made will be posted to this page, and will apply from the time we post them. This privacy notice was last changed on 23 May 2018.

15. How to contact us

If you have any comments on our Privacy Policy, or information we hold about you please write to us:

Data Protection
The Long Shop Museum
Main Street
Leiston
Suffolk
IP16 4ES

or

Email info@longshopmuseum.co.uk

You have the right to make a complaint directly to the UK Information Commissioner’s Office(ICO), which is the data protection supervisory authority in the UK.