Manchester Museum Privacy Notice
Manchester Museum is committed to looking after any information you make available to it in accordance with the UK General Data Protection Regulations and Data Protection Act 2018. This applies whether the information is obtained directly from individuals via our website, by completing online forms, by making online bookings, or by other means such as phone calls, e-mail, printed forms, or in person. It also applies to information obtained from publicly available sources.
Manchester Museum is part of The University of Manchester. The University of Manchester is the Data Controller and is responsible for any personal information we may collect about you. This policy outlines whose information Manchester Museum collects, what information it collects, how it collects it, and what it does with it.
Personal data
Whose information do we, Manchester Museum, collect?
We collect personal information about the following categories of people:
- Visitors to the Museum
- Audiences at our events
- Subscribers to our mailing list
- Supporters (such as visitors who donate using Gift Aid or make an online donation)
- Donors (such as those who have contributed to specific appeals, members of The Giving Collective and our Corporate Partners)
- Customers (including people who purchased items from our Shop)
- People hiring the building, or spaces within it
- Schools, groups and teachers who make bookings with us
- Media and press
- Participants in engagement, volunteering, work experience or community activities
- Other stakeholders
- Other enquirers
What information do we collect?
Depending on the nature of your relationship with Manchester Museum, we may collect some or all of the following information:
- Your name, title, birth date, age and gender;
- Your contact details including address, email address and phone number;
- Information about any event tickets you have bought (including free, bookable events);
- Information about the items you have purchased from our Shop;
- Your current interests and preferences;
- Access and dietary requirements (e.g. if attending a catered event);
- Medical information (e.g. for student placements);
- Occupation and professional activities;
- Film or photography of our events and activities which may include images of our visitors
- Records of donations or transactions (we may also collect and store bank or credit/debit card details, however, please note that the University is PCI-DSS compliant.);
- Attendance at events.
How do we collect the information?
Information is collected under the following circumstances:
- When you are booking tickets and buying merchandise online, in person or over the phone
- When you are booking a school or group visit
- When you are subscribing to our mailing lists or other marketing communications
- When you become a supporter by making a donation to Manchester Museum
- When you provide information via surveys and evaluation activities
- When you complete a photography or film consent form
- When you are taking part in a competition
- Through personal contact with a staff member
- When you enrol on an engagement, volunteering, work experience or community programme
What do we do with the information?
We use the information to help us to:
- Provide and manage our services, such as attendance at events or school bookings
- Inform our business decisions, such as how to manage stock for our Shop
- Manage contact with, and provide information to, our funders and supporters
- Communicate with our visitors and audiences about our news, and updates
- Administer payments and purchases
- Administer donations, including Gift Aid
- Understand who our audiences are to improve our services, or to provide information to funders or partners, and inform you of opportunities to support and engage with Manchester Museum and our charitable mission.
- Provide an appropriate environment, or level of support to participants in our engagement, volunteering, work experience or community programmes
- Keep donors up to date with information related to their gift and provide details of further opportunities to support.
- Carry out research to evaluate your interest in supporting Manchester Museum philanthropically. For this purpose, your data will be shared with the University’s Division of Development and Alumni Relations and stored in accordance with their privacy policy and processes (you can view here)
- Deliver benefits to members of The Giving Collective, such as invitations to events and behind- the-scenes information direct from the relationship manager within Manchester Museum.
We may use the information you provide to undertake analysis and evaluation projects. Sometimes this means gathering information from publicly available resources (e.g. the electoral register, press, the charity register) or it can mean using a third party to help us report on our visitors, audiences, stakeholders, donors, subscribers and supporters (such as where our audiences come from, or the demographic profiles of our event attendees).
We regularly communicate with our audiences via email. E-newsletters are sent to a list of people who have signed up to receive them. If, as a subscriber to our e-mailing list, you no longer want us to contact you, or you wish to amend the type of communications you receive, then you can opt out or change your preference at any time, either by contacting Manchester Museum, or via the unsubscribe link included in every email we send you.
Who will my information be shared with?
We only share anonymized, aggregated information with external parties for research and/or funding purposes with Trusts and Foundations and Sponsors.
We never share personally identifiable information with third party suppliers and list of our suppliers can be provided on request.
We may still use your personal information in the following situations, which are likely to be rare:
- Where we need to comply with a legal obligation
- Where we need to protect your interests (or someone else’s interests)
- Where it is needed in the public interest or for official
We will ensure that all personal data you supply is held safely and securely and in accordance with DPA 2018 and UK GDPR.
We do not sell personally identifiable information to any third parties.
We do not transfer personally identifiable information to any third parties unless you have consented to this or this is permitted by law.
We will keep your data in accordance with the University’s retention policy which can be viewed here: Retention of records | The University of Manchester
What are my rights in connection with my personal information?
Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it
- Request the transfer of your personal information to another party
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
More information about your right is available from The University of Manchester’s data protection website.
Who can I contact?
If you have any questions about how your personal information is used, or wish to exercise any of your rights, please contact the University’s Information Governance Office by email: dataprotection@manchester.ac.uk or you can write to The Information Governance Office, University of Manchester, Christie Building, Oxford Road, Manchester M13 9PL.
How do I complain?
If you are not happy with the way your information is being handled, or with the response received from us, you have the right to lodge a complaint with the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF, telephone 0303 123 1113, or visit the ICO website: https://ico.org.uk/
Are changes ever made to this notice?
This privacy notice was last updated in July 2024 and may be amended from time to time. If this privacy policy changes in any way, we will place an updated version on this page.
Related documents you may wish to view: