We do: respect your privacy and work hard to ensure we meet strict regulatory requirements.
We don’t: sell your personal data to third parties.
We’ll always protect your personal data and, as part of this, we regularly review our privacy notice so that you can see how we use your data and what your options are. If there are any further changes to the ‘General Data Protection Regulation’ (or GDPR) or related laws, we may need to amend this statement in the future.
In this policy, whenever you see the words ‘we’, ‘us’, ‘our’ or it refers to The West Midlands Police Museum.
What personal data do we collect?
We will collect and use your personal data (this means any information which identifies you, or which can be identified as relating to you personally, such as your name, address, phone number or email address). We’ll only collect the personal data we need and we’ll make it clear at the point of collection why we are collecting it.
This personal data you give us may include your name, title, address, date of birth, age, gender, employment status, demographic information, email address, telephone numbers, personal description, photographs and CCTV images.
We may automatically collect information as you use our website. This may include the pages you have visited, information about the device or browser you are using, any errors you encountered and data relating to any online transactions such as ticket purchases, donations, and online shop purchases.
Our museum has Closed Circuit Television (CCTV) and you may be recorded when you visit us.
CCTV is used to provide security and protect both our visitors and the museum. CCTV will only be viewed when necessary (for example, to detect or prevent crime) and footage is stored for a set period of time, after which it is recorded over. The museum complies with the Information Commissioner’s Office CCTV Code of Practice and we put up notices so you know when CCTV is used.
We’ll only use your personal data on relevant lawful grounds as permitted by the EU General Data Protection Regulation and Privacy of Electronic Communication Regulation.
We will use your personal data for the purpose or purposes outlined at the time you gave it to us. This may have been during the course of a sale, signing up for a newsletter, completing a survey or when simply visiting our website.
We use this information to provide the service, product or essential information you expect from us, for example emailing you a ticket, asking for or thanking you for feedback or letting you know a shop order is on the way.
We may also need to provide your personal data if we’re asked by the police, or any other regulatory or government authority investigating suspected illegal activities.
You can find more information about cookies we use and how to change your settings on the below webpage:
Links to other websites
Our website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, they will have their own privacy policies for which we do not accept any responsibility or liability.
If you agree to receive marketing information from us you can always change your mind at a later date. You can opt out of marketing e-mails by clicking the link on the bottom of any of these e-mails, or e-mailing us directly at firstname.lastname@example.org.
West Midlands Police Museum does not store or have access to financial information of customers. This is held by our payment processing provider Square.
Disclosing and sharing information
We do not sell or share your personal information for other organisations to use.
We will only use and store your information for as long as it is required for the purposes it was collected for. How long it will be stored for depends on the information in question, what it is being used for and, sometimes, statutory legal requirements.
Your data protection rights
Individuals have certain rights over their personal data and data controllers are responsible for fulfilling these rights. Where we decide how and why personal data is processed, we are a data controller and have provided further information about the rights that individuals have and how to exercise them below.
Access to personal data
You have a right of access to personal data held by us as a data controller. This right may be exercised by emailing us at email@example.com
We will need you to confirm your identity. If we hold personal information about you, we will give you a copy of the information in an understandable format together with an explanation of why we hold and use it. We will aim to respond to any requests for information promptly, and in any event within the legally required time limits (30 days). This timeframe may be extended by up to two months if your request is particularly complex.
Withdrawal of consent
Where you have given consent for West Midlands Police Museum to use your personal data, you have the right to withdraw that consent at any time. You also have the right to ask us to stop using your personal data for direct marketing purposes. To stop receiving an email from us, please click on the unsubscribe link in the relevant email received from us or e-mail us at firstname.lastname@example.org
The verification, update or amendment of your personal data will take place within 30 days of receipt of your request.
What to do if you’re not happy
In the first instance, please talk directly to us, so we can learn from and resolve any problem or query. You can send an email with the details of any data protection complaint to email@example.com. We will respond to any complaints we receive.
You have the right to contact the Information Commissioner’s Office (“ICO”) (the UK data protection regulator). For further information on your rights and how to complain to the ICO, please refer to the ICO website.
This policy was last updated February 2023