Activity-specific privacy notices
The information below provides an overview of how we manage specific business activities.
Bookings & ticketing privacy notice
When you book tickets and events with us, we will ask you for information specific to that order, including your billing address, shipping address, credit card information and email address. The information that you provide is used to process your orders and send tickets.
We will also use this information to contact you if there is a problem with your order, such as a cancelled event. We may also send a single follow up information asking for feedback about your visit.
Unless you opt in to our mailing lists at the time of your booking, we will not use your personal data for any other purpose.
Booking information is processed by Spektrix acting as a data processor on behalf of RPMT. Access to this information is limited to trained and authorised staff. Third parties may have occasional access to the data for the sole purpose of upgrading and maintaining our systems, but such work will be governed by a data processing agreement.
Payment transaction information is encrypted before it is transmitted across the internet.
Online shop privacy notice
When you purchase an item from our online shop, we will ask you for your name and address in order to despatch the order. We will also ask for either an email address or telephone number in case there are any issues with your order. You may also provide us with additional information when you make your order, such as if it is to be sent to a third party. You may also opt-in to our mailing list during the checkout process.
We use Shopify as our online retail platform. All payment transactions are securely carried out by Shopify and encrypted during transfer. You can read more about how Shopify handles personal data, including the web cookies it requires, on the privacy notice that accompanies our online shop.
Membership privacy notice
We use the personal data you provide as a member or patron to fulfil your membership. This includes sending regular newsletters and renewal information to annual members by mail and email. It’s also used to check who you are when you contact our Membership team.
Many Members choose to pay for their membership through a regular direct debit. These transactions are handled by The Access Group acting as a data processor on behalf of the Royal Pavilion & Museums Trust.
Fundraising privacy notice
Where we have your permission, If you have supported the museum or showed interest, we may invite you to support our work by making a donation, getting involved in fundraising activities or leaving a gift in your will. If you make a donation, we’ll use the personal information you have provided to record the nature and amount of your gift, make a Gift Aid claim if you have told us you’re eligible and thank you for your gift. If you interact or have a conversation with us, we’ll record relevant information and store this securely on our systems.
Sometimes we may invite supporters to attend events where they can find out more about how donations make a difference. We’ll keep a record of which events you are invited to and whether you were able to attend.
We may use information in our systems to help us understand the profile of supporters, so that we can target our communications more effectively in future and use our resources as cost effectively as possible.
Mailing lists & marketing privacy notice
We operate several mailing lists for marketing and fundraising purposes. If you make a booking by telephone or online, you will be invited to opt in to these. You can unsubscribe from these lists at any time, either using the links in the newsletter, emailing info@rpmt.org.uk or calling 0300 0290900.
We use DotDigital for collecting data and sending the newsletters.
We also operate smaller mailing lists for users with specialist interests. In these cases, the contact list is maintained by the member of staff who works in this area. Subscribers to these lists can opt out at any time by contacting the member of staff who manages the list.
Surveys & research privacy notice
We regularly ask our visitors for information in the form of surveys, both in our museums, and online. This is so that we can measure whether we are reaching a diverse audience and evaluate the success of our work.
These surveys may contain information relating to gender, ethnicity and other demographic details which are considered Special Category Data. This information is collected solely for statistical and reporting purposes using forms which are designed to ensure the anonymity of those who complete them. Survey data is often shared with funders, researchers and other stakeholders, but only in an anonymised or pseudonymised form.
In some cases, we may conduct detailed research which requires us to process Special Category Data in a manner which cannot be anonymised. In these cases, we will always obtain explicit consent from the data subjects before proceeding. Where such research takes place in collaboration with a university or other academic partner, we will always follow that organisation’s ethical research policy.
CCTV & security privacy notice
The sites we operate are all protected by Closed Circuit Television (CCTV). Some security staff and contractors may also use Body Worn Video (BWV). This is to prevent crime and ensure the safety of our visitors.
The images captured by these devices will be kept for no longer than 30 days unless they are required as evidence of criminal activity. The Royal Pavilion & Museums Trust is the data controller for all such images. Where contracted security staff use BWV, this is managed under a data processing agreement on behalf of RPMT.
Images may also be shared with members of the Brighton & Hove Business Crime Reduction Partnership under the terms of RPMT’s data sharing agreement as a member.
Brighton Crime Reduction Partnership
Contact details
Royal Pavilion & Museums Trust
Royal Pavilion Gardens
Brighton
BN1 1FN
Registered charity: 1186986
Company registration: 11774969
Data protection registration: ZA791555