Privacy Policy

Amberley Museum & Heritage Centre Privacy Policy

DATA PROTECTION & PRIVACY POLICY

This policy explains when and why Amberley Museum & Heritage Centre (“the Museum” or “we” or “us”) collect personal information about our members, visitors to the Museum and visitors to our website, how we use it and how we keep it secure and your rights in relation to it. The Museum may collect, use, and store your personal data, as described in this Data Protection and Privacy Policy, and as described when we collect data from you.

The Museum reserves the right to amend this Policy from time to time without prior notice. You are advised to check our website (www.amberleymuseum.co.uk) regularly for any amendments (but amendments will not be made retrospectively).

The Museum will always comply with the General Data Protection Regulations (GDPR) when dealing with your personal data. Further details on the GDPR can be found at the website for the Information Commissioner (www.ico.gov.uk ). For the purposes of GDPR, The Museum will be the “controller” of all personal data we hold about you, and our Director is our Data Protection Officer.

1. Who are we?

We are Amberley Museum & Heritage Centre. We can be contacted at:

New Barn Road, Amberley, Nr. Arundel, West Sussex, BN18 9LT

Tel No. 01798 831370
Email: office@amberleymuseum.co.uk

2. What information we collect and why.

Personal information we collect may include: The Museum processes personal data to provide the service that you have requested and bought. We confirm that any personal information which you provide to us and any user information, from which we can identify you, is held in accordance with the registration we have with the Information Commissioner’s Office.

3. How we collect your information

We may collect your information in several different ways:

Most of the information we hold is provided directly by you. For example, you may give us your information to purchase a ticket or to sign up for one of our events, request our newsletter, donate, or purchase something from our online shop. We will also collect your information if you email, phone, or write to us.

You may also have provided us with your information if you are a volunteer, trustee, patron, member of staff any other type of supporter or member. Depending on your privacy settings, we may also collect information about you from your interaction on one of the Social Media platforms we use; for example, if you post on our Facebook or Twitter pages or visit our YouTube channel.

When you access our website, the Museum will collect the following kinds of information from visitors:

· Your details through registration and site usage information, using “cookies” and page tagging techniques. Cookies enable our system to recognise your computer and allow us to see how you use the website.

· When you register on this website, we will ask you to input and will collect personal information from you such as your name, e-mail address, billing address, delivery address, membership forms, fundraising responses, telephone number, product selections, card or other payment information and a password.

· We may also collect information about where you are on the internet (e.g., the URL you came from, IP address, domain types such as.” .co.uk” and “.com”), your browser type, the country you accessed the site from, the pages of our website that were viewed during your visit and any search terms that you entered on our website (“User Information”). We may collect this information even if you do not register with us.

On some occasions, we may also collect publicly available information about you. You can read more about this in section 5 below.

4. How we use your personal information

The Museum is the sole owner of the information collected on our website (www.amberleymuseum.co.uk).

The Museum uses your personal information in the following ways:

to administer and fulfil your ticket order, online purchases, or donations, including processing Gift Aid;

to maintain an accurate record of your relationship with us and manage your contact preferences;

to administer, operate and improve our events, exhibitions, and fundraising activities; and

where you have agreed, to send you information about the Museum

for statistical purposes to improve this website and its services to you;

to service website content;

to administer this website;

to administer of membership(s);

for in-house research and statistical analysis;

to communicate about conservation, membership, fundraising and other activities

Processing personal data for the above purposes may entail sharing the information with employees, contractors, agents and professional advisors of The Museum and other carefully selected organisations.

If you have agreed to receive our newsletter, we will send you regular updates that will include information about the Museum’s work, as well as our events, special offers and fundraising activities. If you attend a specific event, we may contact you afterwards to obtain your feedback or invite you to future events.

There are some membership and donation communications that we are required to send regardless of your contact preferences. These are essential communications, deemed necessary to fulfil our contractual obligations to you. These may include Direct Debit confirmations and advanced notices, thank you letters, renewal of membership cards and renewal reminders, Gift Aid confirmation letters and querying returned mail or bounced Direct Debit payments with you.

You also may decide to send us personally-identifying information, for example, in an electronic mail message containing a question or comment. We use personally identifying information from email primarily to respond to your requests. We may forward your email to other employees who are better able to answer your questions. We may also use your email to contact you in the future about our organisation or to contact you when necessary. Emails and telephone calls will be used for the purposes outlined at the time of collection or registration by the preferences you express.

5. Supporter profiles and targeting communications

Sometimes we may combine your personal information with information available from other publicly available sources.

We do this for several reasons; for example, so that we can send better communications more likely to interest you - or to provide an improved Museum experience for our supporters and visitors. It also helps us to build a better long-term relationship with all the people who support us currently - or who may do so in the future. Importantly, it enables us to raise more funds more quickly and supports the wide and varied work at the Museum.

We may analyse geographic, demographic, and other information relating to you and we may use additional information from third party sources when it is available. Such information is only compiled using publicly available information about you. Occasionally the Museum may use aggregated, depersonalised information to carry out other research and analysis. Examples may include looking at which geographic areas our visitors travel from, or which age groups visit us. Individuals cannot be identified using this data.

The Museum does not undertake any profiling or make other decisions or assumptions about you based solely on the use of automated systems, databases, or computer applications.

6. How we protect your personal data

The Museum will not transfer your data outside the EEA without your consent.

The Museum has implemented generally accepted standards of technology and operational security to protect personal data from loss, misuse, or unauthorised alteration or destruction. Please note however that where you are transmitting information to The Museum over the internet this can never be guaranteed to be 100% secure.

For any payments which the Museum takes from you online, we will use a recognised online secure payment system. The Museum will notify you promptly in the event of any breach of your data that might expose you to serious risk.

7. Who else has access to the information you provide us?

The Museum will never sell your data. We will not share your data with any third parties without your prior consent (which you are free to withhold) except where required to do so by law.

In some circumstances, disclosures of personal information to the police (and other law enforcement agencies) are permitted by data protection legislation, if they relate to the prevention or detection of crime and/or the apprehension or prosecution of offenders. Before any such disclosure takes place, the police are required to demonstrate that the personal information concerned is necessary for them to carry out a proper investigation. Each police request received by the Museum is dealt with on a strictly case-by-case basis to ensure that any such disclosure is lawful and carried out by relevant guidance issued by the Information Commissioner's Office.

If you have made a Gift Aid declaration, we may disclose the information you provided to HMRC to reclaim Gift Aid on your donation(s).

The Museum may pass your data to third parties who are Museum representatives, service providers, agents, and subcontractors to us to complete tasks and provide services to you on our behalf (e.g., to print newsletters and send you mailings). However, we disclose only the personal data necessary for the third party to deliver the service. We have a contract in place that requires them to keep your information secure and not to use it for their purposes.

8. Use of data for direct marketing by email, post, and telephone

At each point of data collection or registration, you will be asked for your consent to receive future direct marketing material from the Museum or other carefully selected organisations. Your consent will be recorded and as a result, the Museum may send you information on its operations, events, membership, fundraising and other activities and those of other carefully selected organisations.

If at any time you no longer wish to receive any communications or wish to have your personal information removed from our records, please contact us to make this request at office@amberleymuseum.co.uk. If you would like to unsubscribe from our newsletters or other updates you receive from us, please use the link we include at the end of every email. You can also update your contact preferences at any time by contacting us.

9. Site usage – cookies

A cookie is a small text file that identifies users’ computers to the Museum’s server. Cookies enhance a website’s performance in several ways including providing a secure way to measure the use of the website including the number of visitors, how frequently pages are viewed, shopping, and the city and country of origin of users. This helps to determine what is popular and can influence the future content and development of our website.

Cookies in themselves do not identify individual users but identify only the computer used.

Users are advised that if they wish to deny the use and saving of cookies from this website onto their computer hard drive, they should take necessary steps within their web browsers security settings to block all cookies from the website and its external serving vendors.

The software will save a cookie to your computer’s hard drive to track and monitor your engagement and usage of the website, but will not store, save, or collect personal information.

Other cookies may be stored on your computer’s hard drive by external vendors when this website uses referral programmes, sponsored links, or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. No personal information is stored, saved, or collected.

10. Links to third party websites

To provide increased value to our users, we may provide links to other websites or resources for you to access at your sole discretion. This policy applies solely to the personal data collected by The Museum and does not apply to any third-party websites.

The Museum is not responsible for the privacy policies, content or the use to which others make of these websites and advise users to read the privacy policies of other websites before registering any personal data.

11. How long do we keep your information?

The Museum will hold personal data on our systems for as long as necessary to fulfil the purpose for which it was processed and for as long afterwards as is necessary to comply with our legal obligations. Every year, we will review personal data to establish whether we are still entitled to process it.

If we decide that we are not entitled to do so, we will stop processing your data except that we will retain your data in an archived form to be able to comply with future legal obligations e.g., compliance with tax requirements and exemptions, and the establishment exercise or defence of legal claims.

The Museum will securely destroy all financial information once we have used it and no longer need it.

12. CCTV

We operate CCTV cameras throughout the Museum. We use it for three main purposes:

· Protecting the health and safety of employees and visitors

· Protecting our collections; and

· Preventing and detecting crime and antisocial behaviour

We retain CCTV for a maximum period of 15 days before it is automatically deleted.

13. Legal Disclaimer

The Museum will take all reasonable care, in so far as it is in our power to do so, to keep the details of your order and payment secure, but in the absence of negligence on our part, we cannot be held liable for any loss you may suffer if a third party procures unauthorised access to any data you provide when accessing or ordering from this website.

14. Your rights

You have rights under the GDPR:

(a) to access your data

(b) to be provided with information about how your data is processed

(d) to have your data erased in certain circumstances

(e) to object to or restrict how your data is processed

(f) to have your data transferred to yourself or another business in certain circumstances.

You have the right to take any complaints about how we process your data to the Information Commissioner:

https://ico.org.uk/concerns/
0303 123 1113.
Information Commissioner's Office Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

For more details, please address any questions, comments and requests regarding our data processing practices to our Data Protection Officer at New Barn Road, Amberley, Nr. Arundel, West Sussex, BN18 9LT or office@amberleymuseum.co.uk.

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

Name
Postal address
Email address
Telephone number
Purchase and booking information
Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

IP address
Browser type and version
Device information
Screen resolution
Operating system
Referral source
Pages visited and actions taken on the Website
Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

To provide products and services you request
To process transactions and fulfil orders
To provide customer support and after-sales services
To manage bookings and accounts
To improve our Website, products, and services
To ensure Website security and prevent fraud
To comply with legal and regulatory obligations
To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Performance of a contract: to provide goods or services you have requested.
Legal obligation: where processing is necessary to comply with legal requirements.
Legitimate interests: to manage and improve our business, Website security, and customer experience.
Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

Payment processors
Hosting and IT service providers
Delivery and fulfilment partners
Marketing and communications providers
Analytics and Website performance providers
Professional advisers and auditors
Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

Transfers to countries deemed to provide an adequate level of protection; or
Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

_ga
_ga<container-id>
_gid
_gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

_clck
_clsk
CLID
ANONCHK
MR
MUID
SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

Accept all cookies
Reject non-essential cookies
Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

Access your personal information
Correct inaccurate information
Request deletion of your information
Restrict processing
Object to processing
Request portability of your data
Withdraw consent where processing is based on consent
Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026