The information below is a general description of how the Trust processes personal data in pursuit of its charitable objects. Details specific to particular activities that require the processing of personal data will be described in separate privacy notices issued to the affected data subjects where possible.
Data Subject Rights
Under the Data Protection Act 2018 and the General Directive on Data Protection Regulation (GDPR), data subjects have several rights in relation to the processing of their personal data. This includes the right to object to processing.
If you wish to object to the Trust’s use of your personal information or wish to exert your other rights as a data subject, please use the enquiry form below.
You also have a right to lodge a complaint with a supervisory body. In the UK this is the Information Commissioner’s Office (ICO).
Most of the personal data collected and processed by the Trust is stored for limited time periods. The length of the period is determined by the lawful basis for processing, legal obligations, and recognised good practice in the museum sector.
Where possible, we will advise you of the retention period for your data at the point of collection.
If you would like more information on how long we hold personal data, please use the enquiry form below stating the type of personal information you are interested in.
Please also note that as a museum that is committed to the long-term preservation of its collections and their accompanying information, personal data related to our collections is often held permanently.
RPMT Enterprises Ltd
Retail and other commercial activity is managed by RPMT Enterprises Ltd, the trading arm of the Royal Pavilion & Museums Trust. Where personal data is processed for the purpose of fulfilling these contractual arrangements, it is managed by RPMT Enterprises Ltd under a dual controller relationship with the Royal Pavilion & Museums Trust. The Trust takes primary responsibility for responding to enquiries and managing data subjects’ rights.
RPMT Enterprises shares a registered business address and Data Protection Officer with the Royal Pavilion & Museums Trust.
Royal Pavilion & Museums Trust
4/5 Pavilion Buildings
Registered charity: 1186986
Company registration: 11774969
Data protection registration: ZA791555
Data Protection Officer
Kevin Bacon, Digital Manager.
Messages can be sent using the form below.
Where possible, privacy notices are issued at the pont that data is collected for processing. The information below provides an overview of how we manage specfic business activities.
Bookings and online shop
When you book tickets with us or make a purchase on our online shop, we will ask you for information specific to that order, including your billing address, shipping address, credit card information and email address. The information that you provide is used to process and send your orders. We also use the information to contact you if there is a problem with your order, such as a cancelled event. Unless you opt in to our mailing list at the time of your booking or purchase, we will not use your personal data for any other purpose.
This information is stored in a password protected database on a secure server. Access is limited to trained and authorised staff. Third parties may have occasional access to the data for the sole purpose of upgrading and maintaining our systems, but this will be governed by a data processing agreement.
Payment transaction information is encrypted before it is transmitted across the internet.
We operate several mailing lists for marketing purposes. If you make a booking by telephone or online, you will be invited to sign up to one or more e-newsletters with clearly defined purposes. You can unsubscribe from the list at any time, either using the controls in the newsletter or by completing the contact form below.
We use Mailchimp for collecting data and sending the newsletter. Mailchimp uses secure servers in the United States, but these are certified compliant with the EU-US Privacy Shield.
We also operate smaller mailing lists for users with specialist interests, such as school teachers and youth workers. In these cases, the contact list is maintained by the member of staff who works in this area. Subscribers to these lists can opt out at any time by contacting the member of staff who manages the list or by using the form below.
We occasionally conduct surveys of our visitors, both in our buildings, online and at other sites. This is so that we can understand how people are using our services and measuring the success of our work.
These surveys may contain demographic information relating to gender, ethnicity and other details which are considered Special Category Data. This information is collected solely for statistical and reporting purposes, so we can understand the diversity of our audience.
This data is often shared with funders, researchers and other stakeholders, but only in an anonymised form.
CCTV & BWV
The sites we operate are all protected by CCTV. Some security staff and contractors may also use Body Worn Video (BWV). This is to prevent crime and ensure the safety of our visitors.
The images captured by these devices will be kept for no longer than 30 days unless they are required as evidence of criminal activity. The Royal Pavilion & Museums Trust is the data controller for all such images. Where contracted security staff use BWV, this is managed under a data processing agreement on behalf of RPMT.
See our Cookie Notice for more information on these.