We will need to collect personal data in some cases to carry out a service with you; in other cases, we will tell you if providing personal data is optional.
We will ask for your consent to collect your personal information for the following:
We will collect your personal information to perform a contract with you for the following services:
We will collect your personal information to comply with a legal obligation, such as:
Personal information we collect may include:
When we ask you to provide your personal information we will let you know why we are asking, and how we will use your data, and direct you towards this notice for more information.
We collect information about you when you make a gift to the Museum’s collections, or indicate a future bequest. This information is used to verify the provenance and copyright of the item and to provide an audit of ownership. This information will not normally be made publicly available; consent will be sought from the donor if an occasion arises in which the donor’s name is required to be linked to an item on display.
We collect information about you in order to fulfil our public task and provide you with the service you have requested. Depending on your relationship with the Museum, and the preferences you have indicated, data we hold may be used by us for the following purposes:
If you consent we well send you information about activities and services of the National Army Museum group that may be of interest to you, by post, telephone or email. If you have consented to receive marketing and later change your mind, you may opt out at a later date by emailing firstname.lastname@example.org or using the contact details below.
Marketing communications may include:
There are some Membership and donation communications that we are required to send regardless of your contact preferences. These are essential communications, deemed necessary to fulfill our contractual obligations to you. This would include Direct Debit confirmations, thank you and renewal letters, Member benefits, and queries regarding returned mail or bounced payments.
We will not sell your details to any third parties, nor disclose personal data to any third parties or external organisations, other than trusted data processors and service providers carrying out work on our behalf. Examples of data processors would be mailing houses and bulk email distribution services. We do comprehensive checks on any companies working on our behalf before we work with them, and put a contract in place that sets out our expectations and requirements, especially regarding how they manage the personal data they collect or have access to in line with the 2018 Data Protection Act and the General Data Protection Regulations.
We will apply for your explicit and informed consent in the event that we require to share your data in any other way that is not covered in this policy.
The National Army Museum has implemented security procedures and rules to protect the personal data under our control from unauthorised access, improper use or disclosure, or unauthorised modification. All employees and data processors are obliged to respect the confidentiality of the personal data of our visitors and supporters.
You have the right to request a copy of the information that we hold about you: this is called a Subject Access Request. If you would like a copy of some or all of your information, please email or write to us at the address below.
We fully comply with the terms of the Data Protection Act (2018) and the General Data Protection Regulations (2018), and will respond to any requests to remove, change or provide any personal details you have given us under the terms of the Act and Regulations, including the right to be forgotten.
Your information will be retained within the Museum’s secure systems for as long as you continue to engage with the Museum’s services and events.
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This is used to track visitor use of the website and to compile statistical reports on website activity.
CCTV is used extensively throughout the Museum and its outstations to monitor the activities of individuals. The Museum abides by the CCTV Code of Practice in the management of information recorded and retained by surveillance equipment.
Filming and photography may take place within the Museum during special events and other occasions, and visitors will be notified of this through the use of posters and verbal instructions.
Visitors will be asked to sign a consent form if they are to feature prominently in any recording made, and these consent forms will be retained according to the Museum’s retention schedule in a secure environment.
The designated Data Controllers for the National Army Museum group are:
You have a right at any time to stop us from contacting you for marketing or any other purpose.
By post: National Army Museum, Royal Hospital Road, Chelsea, London, SW3 4HT
By telephone: 020 7730 0717
By email: email@example.com