Introduction

This privacy policy is issued by the British Motor Industry Heritage Trust (BMIHT). Registered in England and Wales No. 1690117. Registered office British Motor Museum, Banbury Road, Gaydon, Warwickshire CV35 0BJ and;

The British Motor Industry Heritage Centre Limited (BMIHC). Registered in England and Wales No. 02262284. Registered office British Motor Museum, Banbury Road, Gaydon, Warwickshire CV35 0BJ

BMIHT and BMIHC are Joint Data Controllers of all data referred to in this policy.

We will only use your personal information in a way that is fair to you. We will only collect information where it is necessary for us to do so and we will only collect information if it is relevant to our dealings with you. We have implemented appropriate technology and policies to safeguard your data from unauthorised access and improper use.

This website's Privacy Policy explains how and for what purposes we use the information collected about you. We are committed to protecting the privacy and the confidentiality of the personal information of visitors to our website.

We undertake to ensure that all personal information in our possession is processed in accordance with the requirements of the European General Data Protection Regulation ('GDPR') and Data Protection Act ('DPA').

We may update this Policy from time to time.

Collection and Use of Information

We collect your personal information when you interact with us in the following ways:

  • Request information from us
  • Contact us
  • Purchase items from us, including merchandise, Memberships and tickets for Museum visits as well as shows or other events
  • Make a donation to us
  • Make a booking with us. A booking with us could include; Museum visits, school visits, group, car club or community visits or venue hire (including conferences, weddings and other events)
  • Visit our premises

 

This personal information can include:

  • Identity information such as your title, first name and last name
  • Contact details such as billing address, delivery address, email address and telephone number
  • Financial data such as bank account and payment card details as well as records of payments made to and from you
  • Gift Aid declaration, if Gift Aid is applicable
  • Profile data such as products and services you have purchased from us or orders made by you, your interests, preferences and feedback
  • Usage data such as how you use our website, products and services
  • Correspondence records
  • Marketing and communications data, which includes your preferences in receiving marketing from us and our third parties and your communication preferences
  • Your image when you visit our premises, as we operate CCTV

 

We collect this personal information for the following reasons:

  • To carry out our obligations arising from any contracts entered into between you and us, to process your bookings and to provide you with the information, products and services that you request from us
  • To provide you with information about other goods and services we offer that are similar to those that you have already purchased or enquired about
  • To provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you.  We will only share your data with third parties in this way if you consent to this
  • To process Gift Aid declarations, if applicable 
  • To notify you about changes to our services
  • To ensure content from our site is presented in the most effective manner for you and for your computer
  • To administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes
  • To allow you to participate in interactive features of our service, when you choose to do so
  • As part of our efforts to keep our site safe and secure
  • To measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you 
  • To make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them
  • To ensure the security of all who visit or work at our premises

We will update your information whenever we get the opportunity to keep it current, accurate and complete. We will only keep your information for as long as we are either required to by law or as is relevant for the purposes for which it was collected. We maintain a data retention policy to meet our GDPR obligations in this respect.

 

Any information you provide when booking with us or buying products from us will be used for BMIHC and BMIHT purposes only. The credit card information you give for any online transaction is used solely for the purpose of processing that transaction.

From time to time we may send you information about other organisations which we think may be of interest to you. We may disclose your information to companies who act as 'data processors' on our behalf, some of whom may be outside the UK/EEA. However we do not sell, rent or otherwise distribute any personal information to third parties.

You may indicate your preference for receiving direct marketing by email, from us or any partner organisations with whom we may work. You will be given the opportunity on every communication we send you to indicate that you no longer wish to receive our direct marketing material. Once properly notified by you, we will stop using your information in this way.

Your rights

We operate under GDPR and DPA. We ensure lawful processing of personal data by obtaining your consent; or where there is a contractual obligation to do so in providing appropriate products and services; or where processing the data is necessary for the purposes of our legitimate interests in providing appropriate products and services. 

To meet our data protection obligations, we have established comprehensive and proportionate governance measures.

The DPA and GDPR apply to 'personal data' we process and the data protection principles set out the main responsibilities we are responsible for.

We must ensure that personal data shall be:

a. processed lawfully, fairly and in a transparent manner;

b. collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes;

c. adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed;

d. accurate and where necessary kept up to date;

e. kept for no longer than is necessary for the purposes for which the personal data are processed.   

We only retain personal data for the purposes for which it was collected and for a reasonable period thereafter where there is a legitimate business need or legal obligation to do so. For details of our current retention policy contact our Privacy Officer at; privacy@britishmotormuseum.co.uk

f. processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

We use up-to-date industry procedures to protect your personal information. We have appropriate security measures in place to protect against the loss, misuse or alteration of information that we have collected from you via our websites. However please be aware that the internet is not a 100% secure medium of communication. The BMIHT and BMIHC cannot therefore guarantee the security of any information you input on the website or send to us on the internet. The BMIHT and BMIHC are not, and will not be, responsible for any damages you or others may suffer as a result of the loss of confidentiality of any such information.

Under GDPR you have the following specific rights in respect of the personal data we process:

1. The right to be informed about how we use personal data. 

2. This Privacy Policy explains who we are; the purposes for which we process personal data and our legitimate interests in so doing; the categories of data we process; third party disclosures; and details of any transfers of personal data outside the UK.

3. The right of access to the personal data we hold. In most cases this will be free of charge and will be provided within one month of receipt.  

To obtain a copy of the personal information we hold on you, please write to us and provide us with your details or email; privacy@britishmotormuseum.co.uk.

4. The right to rectification where data is inaccurate or incomplete. In such cases we shall make any amendments or additions within one month of your request.

The right to erasure of personal data, but only in very specific circumstances, typically where the personal data is no longer necessary in relation to the purpose for which it was originally collected or processed; or, in certain cases where we have relied on consent to process the data, when that consent is withdrawn and there is no other legitimate reason for continuing to process that data; or when the individual objects to the processing and there is no overriding legitimate interest for continuing the processing.

5. The right to restrict processing, for example while we are reviewing the accuracy or completeness of data, or deciding on whether any request for erasure is valid. In such cases we shall continue to store the data, but will not further process it until such time as we have resolved the issue.

6. The right to data portability which, subject to a number of qualifying conditions, allows individuals to obtain and reuse their personal data for their own purposes across different services.

7. The right to object in cases where processing is based on legitimate interests, where our requirement to process the data is overridden by the rights of the individual concerned; or for the purposes of direct marketing (including profiling); or for processing for purposes of scientific / historical research and statistics, unless this is necessary for the performance of a public interest task.

8. Rights in relation to automated decision making and profiling.

Please contact our Privacy Officer privacy@britishmotormuseum.co.uk for more information about the GDPR and your rights under data protection law or if you have a complaint about data protection at the BMIHT or BMIHC.

Our supervisory authority for data protection compliance is the Information Commissioner ( www.ico.org.uk):

Information Commissioner's Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Our use of cookies

By using our websites you are agreeing to the use of cookies as described. Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

We use cookies for a number of reasons:

1. For statistical purposes to track how many individual unique users we have and how often they visit our websites. We collect data that lists which of our pages are most frequently visited and by which types of users and from which countries.

2. Our marketing emails may contain a single, campaign-unique "web beacon pixel" to tell us whether our emails are opened and verify any clicks through to links within the email. We may use this information for determining which of our emails are more interesting to users in order to improve the content of our emails over time.

3. Third parties, including Google Analytics and Meta, may use cookies, web beacons and other storage technologies to collect or receive information from our websites (and elsewhere on the Internet):

a. Google Analytics collects anonymous user information. We use this to make sure we are meeting the users' needs and to understand how we could do it better. To learn more about how we use this service click here.

b. Information collected and recieved by Meta is used to provide measurement services, to target and to deliver ads. You can opt out of the collection and use of information for ad targeting. To manage your ad choices click here.

c. Hotjar uses cookies and other technologies to collect data on user behavior and devices. This includes a device's IP address (processed during a session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details click here.

4. When you visit the British Motor Museum websites you may notice some cookies that are not related to the British Motor Museum. When you visit one of our pages that contains embedded content, for example if you’d like to watch a video hosted on YouTube, you may be sent cookies from these websites. We have no control over the setting of these cookies. If cookies concern you, we would recommend you check the third-party websites for more information about their cookies and how to manage them.

5. We use Cloudflare to distribute our website. They set two cookies which are strictly necessary for the website to function. More information can be found here https://www.cloudflare.com/en-gb/cookie-policy/

For more information about cookies and managing them, please visit;  www.allaboutcookies.org

Last updated 9 October 2024