Privacy Policy
Trowbridge Museum
1. Introduction & Scope
Trowbridge Museum collects and uses personal information so that we can operate the Museum, keep you informed about exhibitions and events, and provide related services.
When we collect, store, use, and delete personal data, we do so in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Notice applies only to personal data processed by Trowbridge Museum. It does not apply to other services delivered by Trowbridge Town Council, including Active Trowbridge or The Civic. Information about how those services process personal data is available via their respective websites or by asking a member of staff.
Trowbridge Town Council is the data controller for all personal data collected, stored, and processed by Trowbridge Museum. The Council is registered with the Information Commissioner’s Office (ICO) for the purposes of processing personal data.
This Privacy Notice explains what personal information we collect and how it is used.
2. Information We Collect
Depending on your interaction with the Museum, we may collect, store, and use the following categories of personal data:
• Name
• Postal address
• Telephone number
• Email address
• Bank or payment details
• CCTV footage
• Photographs and video recordings
• Anonymised technical data (including IP address and cookies)
Special Category and Criminal Data
In limited circumstances, we may also process more sensitive information, including:
• Medical information (for example, to support access needs or health and safety)
• Information relating to criminal matters (where required to meet legal or safeguarding obligations)
Such data is processed only where permitted by law and with appropriate safeguards in place.
3. How We Collect Your Data and the Purpose of Processing Your Data
We will only use personal data where the law allows us to and for the purpose for which it was collected. In some cases, more than one lawful basis may apply.
Activity | Purpose | Lawful basis |
Visiting the Museum website | Website operation and improvement | Consent; Legitimate interests |
Contacting the Museum (phone, email, website) | Responding to enquiries | Legitimate interests; Contract; Legal obligation |
Visiting the Museum in person | Visitor management and service delivery | Legitimate interests; Contract; Legal obligation |
Paying for services or tickets | Processing transactions | Contract |
CCTV footage | Safety, security, and incident management | See CCTV Policy |
Complaints, claims, or incidents | Investigation and compliance | Legal obligation; Legitimate interests |
Donating an object | Record-keeping and due diligence | Legal obligation |
Online shop purchases | Order fulfilment and payment | Contract |
Artists, contractors, consultants | Relationship management | Legitimate interests |
Supporters of the Museum | Managing supporter relationships | Contract |
Information requests | Responding to statutory or service requests | Legal obligation |
E-newsletters and updates | Marketing and communications | Consent |
Volunteers | Volunteer administration | Contract; Legal obligation |
Payments to individuals | Goods or services supplied | Contract |
Use of images for promotion | Marketing and publicity | Consent (recorded) |
4. Data Sharing and Transfers
Trowbridge Museum uses third-party processors to collect, process, and store personal data securely and in compliance with UK GDPR.
These may include providers such as:
• Brightside
• Google Analytics
• Rialtas
• Campaign Monitor (Marigold)
• Museum Shops
• TicketSource
• MODES
Each processor has its own privacy notice explaining how personal data is handled.
We may share information where required for the prevention or detection of crime, including with the police or other bodies with lawful authority.
Personal data may also be shared internally with the Community Engagement & Governance Manager, for example when handling complaints or requests to exercise data protection rights.
5. Retention
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements.
Retention periods are set out in the Council’s Retention Policy and Schedule, available via the Information Governance pages.
When determining retention periods, we consider:
• The amount, nature, and sensitivity of the data
• The risk of harm from unauthorised use or disclosure
• The purposes of processing and whether these can be achieved by other means
• Applicable legal and regulatory requirements
Where appropriate, personal data may be anonymised and retained for statistical or analytical purposes.
6. Social Media
Trowbridge Museum uses social media platforms to promote exhibitions and engage with audiences. Each platform acts as a separate data controller. Please refer to the relevant platform’s privacy notice:
• Facebook (Meta)
• Instagram
• YouTube
7. Your Rights
It is important that the personal information we hold about you is accurate and up to date.
You have the right to:
- Request access to your personal data (Subject Access Request)
- Request correction of inaccurate or incomplete data
- Request restriction of processing, including where records are approaching disposal under retention rules
- Request transfer of your personal data to another party
Requests relating to access, restriction, or transfer should be directed to the Community Engagement & Governance Manager. Requests to update routine contact details may be made directly to the Museum team.
There is no charge for exercising your rights. However, a reasonable fee may be charged for multiple copies of the same information.
Where processing is based on consent, you may withdraw that consent at any time. Once withdrawn, we will stop processing the data for that purpose unless another lawful basis applies.
8. Contact details
Community Engagement & Governance Manager
Trowbridge Town Council
St. Stephens Place
Trowbridge
BA14 8AH
01225 765072
informationgovernance@trowbridge.gov.uk
Data Protection Officer
One West
i-west@bathnes.gov.uk
01225 395959
You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. However, they would normally expect you to have raised your complaint with us in the first instance.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org.uk
0303 123 1113