Last updated October 2018
How we use your personal information
Your information will be held by Lloyds Banking Group operating as Mus£um on the Mound in order to help us administer our schools service at the Museum on the Mound, and for statistical purposes only. This privacy notice is to let you know how we promise to look after your personal information. This includes what you tell us about yourself, what we learn by having you as a visitor. This notice also tells you about your privacy rights and how the law protects you.
Our Privacy Promise
We promise:
- To keep your data safe and private.
- Not to sell your data.
To give you ways to manage and review your marketing choices at any time.
Personal information and the law
Contacting us about data privacy
Please use these details to contact us about any of the topics set out in this Privacy notice.
If you have any questions, or want more details about how we use your personal information, please call us on 0800 072 3572 (+44 20 7626 1500
from outside the UK).
Calls may be monitored or recorded.
If you have a hearing or speech impairment you can also call us using the Next Generation Text (NGT) service. Simply dial 18001 and then the telephone number.
These are our main contact details. Some sections of this notice have special contact details that you can use instead.
If you are not satisfied with our response, you can contact our Group Data Protection Officer.
How the law protects you
This section sets out the legal reasons we rely on, for each of the ways we may use your personal information.
As well as our Privacy Promise, your privacy is protected by law. This section explains how that works.
Data Protection law says that we are allowed to use personal information only if we have a proper reason to do so. This includes sharing it outside Lloyds Banking Group. The law says we must have one or more of these reasons:
• To fulfill a contract we have with you, or
• When it is our legal duty, or
• When it is in our legitimate interest, or
• When you consent to it.
When we have a business or commercial reason of our own to use your information, this is called a ‘legitimate interest’. We will tell you what that is, if we are going to rely on it as the reason for using your data. Even then, it must not unfairly go against your interests.
The law and other regulations treat some types of sensitive personal information as special. This includes information about racial or ethnic origin, sexual orientation, religious beliefs, trade union membership, health data, and criminal records. We will not collect or use these types of data without your consent unless the law allows us to do so. If we do, it will only be when it is necessary:
• For reasons of substantial public interest, or
• To establish, exercise or defend legal claims.
Here is a list of all the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.
Where we collect personal information from
This section lists all the places where we get data that counts as part of your personal information.
We may collect personal information about you (or your business) from any of these sources:
Data you give to us
• When you apply to visit us or buy our products
• When you talk to us on the phone or in the Museum, including recorded calls and notes we make
• When you use our website
• In emails and letters
• In visitor surveys
• If you take part in our competitions or promotions
Data we collect when you use our services
• Payment and transaction data – this may include the amount, frequency, type, location, origin and recipients
Data from outside organisations
• Payment services providers (e.g. PayPal)
How long we keep your personal information
This section explains how long we may keep your information for and why.
We may keep your data for up to 10 years.
The reasons we may do this are:
• To respond to a question or complaint, or to show whether we gave you fair treatment.
• To study customer data as part of our own internal research.
• To obey rules that apply to us about keeping records.
We may also keep your data for longer than 10 years if we cannot delete it for legal, regulatory or technical reasons.
We will only use your personal information for those purposes and will make sure that your privacy is protected.
Cookies
This section contains a link to our Cookies Policy
Cookies are small computer files that get sent down to your PC, tablet or mobile phone by websites when you visit them. They stay on your device and get sent back to the website they came from, when you go there again. Cookies store information about your visits to that website, such as your choices and other details. Some of this data does not contain personal details about you or your business, but it is still protected by this Privacy notice.
To find out more about how we use cookies, please see our Cookies Policy.
The control you have
How to complain
This section gives details of how to contact us to make a complaint about data privacy. It also shows you where you can get in touch with the government regulator.
Please let us know if you are unhappy with how we have used your personal information.
You also have the right to complain to the regulator, and to lodge an appeal if you are not happy with the outcome of a complaint.
In the UK this is the Information Commissioner’s Office. Find out on their website how to report a concern.
How to get a copy of your personal information
This section tells you where to write to us to get a copy of your personal information, and how to ask for a digital file you can use yourself or share easily with others. You can do this by writing to us.
You can get a copy of all the personal information we hold about you by writing to us at this address:
The Curator
Museum on the Mound
The Mound
Edinburgh
EH1 1YZ
Your rights
What if you want us to stop using your personal information? This section explains about your right to object and other data privacy rights you have – as well as how to contact us about them.
You can object to us keeping or using your personal information. This is known as the ‘right to object’.
You can also ask us to delete, remove, or stop using your personal information if there is no need for us to keep it. This is known as the ‘right to erasure’ or the ‘right to be forgotten’.
There may be legal or other official reasons why we need to keep or use your data. But please tell us if you think that we should not be using it.
We may sometimes be able to restrict the use of your data. This means that it can only be used for certain things, such as legal claims or to exercise legal rights.
You can ask us to restrict the use of your personal information if:
• It is not accurate
• It has been used unlawfully but you don’t want us to delete it
• It is not relevant any more, but you want us to keep it for use in legal claims
• You have already asked us to stop using your data but you are waiting for us to tell you if we are allowed to keep on using it.
If we do restrict your information in this way, we will not use or share it in other ways while it is restricted.
If you want to object to how we use your data, or ask us to delete it or restrict how we use it or, please call us on 0800 072 3572 (+44 20 7626 1500 from outside the UK).
Calls may be monitored or recorded.
If you have a hearing or speech impairment you can also call us using the Next Generation Text (NGT) service. Simply dial 18001 and then the telephone number.