Please note, this is a living document and is updated from time to time.
Visiting our website
When someone visits andrewloganmuseum.org, a third-party service, Google Analytics, collects standard internet log information and details of visitor behaviour patterns. From this, we can find out things such as the number of visitors to the various parts of site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Whilst Google Analytics information is available to us, we are not, at this present analysing any of the information collected. This may alter in the future. This applies to all Google Analytics information provided below.
Please see Google’s Privacy Policy for more information.
Google Analytics
We use Google Analytics to compile visitor statistics such as how many people have visited our website, what type of technology they are using (e.g. Mac or Windows which helps to identify when our site isn’t working as it should for particular technologies), how long they spend on the site, what page they look at etc.
This service also tells us how people reached this site (e.g. from a search engine) and whether they have been here before.
Use of cookies
Aside from those set by Google Analytics, our website does not store any information in cookies. Google Analytics uses cookies, which are text files placed on your computer, to help the us to analyse how visitors use the website.
The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity to be looked at by Ethical Consumer, and providing other services relating to website activity and internet usage.
Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
E-Newsletter
ALMoS’ infrequent e-newsletters tell you all about what’s going on at the Museum, occasionally what Andrew Logan is up to, and what events we have planned and how you can get tickets. If you are interested in becoming a volunteer, or joining our press list, we have separate lists for those. If you are interested in specifically helping out with our annual Jewellery Extravaganza, we have a special list just for that.
We use a third-party provider, Mailchimp, to deliver our e-newsletters. We gather statistics from them around email opening and clicks through using industry standard techniques. For more information, please see Mailchimp’s privacy notice.
You can opt-in to receive our e-newsletters by either: completing the relevant column in our visitor book, emailing the Museum directly from the email you wish to be subscribed, or entering your details into the ‘subscribe’ form on our website.
People who email us
We use Gmail for our email. Any emails we send or receive may not be protected in transit. Please see Google’s Privacy Policy for more information.
We monitor emails, including file attachments, for viruses and malicious software. Please be aware that you have a responsibility to ensure that any email you send is within the bounds of the law.
Carrying out our work
ALMoS is a company limited by guarantee, a charity and an Art Museum. In the course of our fundamental duty of care to the work in the Museum, and to extending the audience for it, we have to hold details of the people related to that work. However, we only use these details for the work being undertaken and for other closely related purposes. For example, we might use information about people we have worked with on a particular piece to let them know it is out on loan, or when we are carrying out a review on that particular piece or time period. If a person would like their details permanently deleted across all storage areas, they can request this providing there is not a legal obligation for us to keep the data for a specified period of time in a particular storage area, for example on accounts files for the 7 years we are required to by law. We use Dropbox to facilitate remote working on working projects. Please see Dropbox’s Privacy Statement for more information.
Customers
People may buy an item from our Museum shop or a ticket for an event online. All information regarding card sales made at our shop is kept only for our legal accounting obligations.
If someone buys a ticket online, we may have their details for processing the purchase and, again, only keep information for our legal accounting purposes and obligations. We use Shopify to process our online sales. Please see Shopify’s Privacy Statement for more information.
We will only send you further information if you opt-in to our e-newsletter.
Job Applicants / Employees / Contractors / Volunteers
All information provided to us during the process of applying is only used for that purpose, or to fulfil legal or regulatory requirements if necessary. We use your contact details to progress your application and other information provided to assess your suitability for the role / project you have applied for, or where there is some other legitimate interest, for example where you have volunteered with us for some time and we tell you about a paid post you might be interested in.
Children and Vulnerable Adults – Safeguarding
We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.
For further information, please ask to see our safeguarding policy.
General
We never sell or share information with any third parties for marketing purposes, without your explicit prior opt-in consent.
Information you provide will be held by us and / or our data processors (our third-parties) whether the information is in electronic or physical format.
We cleanse our data every 7 years, and securely destroy any personal confidential data at this time.
Your image or name may appear in our publicity. We keep archive publicity materials in our archive stores in perpetuity.
In many circumstances we will not disclose personal data without consent. However, when we investigate a complaint, for example, we will need to share personal information with the organisation concerned and with other relevant bodies.
When an individual objects to or requests restriction of, deletion of or alteration to data on them that we hold, we will respond to them within 1 month. We will take reasonable means to verify the identity of the person requesting.
Your rights
Under the Data Protection Act 1998 and the new General Data Protection Regulations, you have rights as an individual which you can exercise in relation to the information we hold about you.
You can read more about these rights here: https://ico.org.uk/for-the-public/is-my-information-being-handled-correctly/
Complaints or queries
We try to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.
This privacy notice was drafted with clarity and brevity in mind.
In the first instance, please contact us if you have a complaint about the way we have processed your personal information. You can also contact the Information Commissioners Office, the statuory body which oversees data protection law – www.ico.org/concerns
To make a request to us for any personal information we may hold, you need to put the request in writing, addressing it to our Data Protection Officer at the address below. In some instances, there may be a reasonable fee for this request, for instance where the request is excessive, unfounded or repetitive or for further copies of the information. We will provide the information requested in one calendar month.
If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.
If we do hold information about you, you can ask us to correct any mistakes by, once again, writing for the attention of the Data Protection Officer.
Changes to this privacy notice
We keep our policies under regular review. This privacy policy was last updated on 22 May 2018.
How to contact us
If you want to request information, you can email us or write to:
Andrew Logan Museum of Sculpture
Aqueduct Road
Berriew
Nr Welshpool
Powys
SY21 8AH
