Privacy Statement

Your privacy is important to us at The National Motor Museum Trust. We are committed to ensuring we meet our obligations under the UK General Data Protection Regulation (UK GDPR), tailored by the Data Protection Act 2018.

Who are we?

The following policy is issued by The National Motor Museum Trust Limited referred to as “The Trust”. Company No. 5316070. Registered Charity No. 1107656. Registered Office: The National Motor Museum Trust Limited, Beaulieu, New Forest, Hampshire, SO42 7ZN. We have notified the Information Commissioner’s Office of our data processing activities and our registered number is Z7132434.

For the purpose of the UK GDPR, the data controller is NMMT and our data protection representatives can be contacted directly here:

data.protection@beaulieu.co.uk

IT Operations Manager, John Montagu Building, Beaulieu, Hampshire, SO42 7ZN.

What personal data do we collect?

All personal data that we collect about you will be recorded, used, and protected by us in accordance with applicable data protection legislation and this privacy policy.

Identity Data includes title, first name, last name, and username.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes bank account and payment card details.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes your internet protocol (IP) address. We may collect information about your computer including where available your IP address, operating system and browser type for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns and does not identify any individual. Your IP address may also be used to diagnose problems with our server, monitor visitor traffic patterns and site usage to help us develop and improve our site further. We may also analyse which marketing activity led you to our website and resulting actions.
Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback, survey responses and date of birth for people under the age of 16.
Usage Data includes information about how you use our website, products and services.
Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.

Where do we collect your data?

We may collect and process personal data from you as follows:

Directly from yourself when you complete a form, use our website, use our onsite Wi-Fi, or send us correspondence by email, letter or over the telephone. This includes data when you:
- Purchase tickets for the attraction or events
- Subscribe to our marketing
- Enter a competition
- Participate in a survey
- Provide feedback on a service or experience
- Complete membership application forms
Online interactions. This data is automatically collected when you interact with our website. The data allows us to monitor and improve our online services. The data is collected using cookies and server logs. Please see our cookie policy for further details.
CCTV. We operate a number of CCTV cameras across our premises and at our events.
Publicly available information (for example, through social media, Companies House, Charity Commission, newspapers, magazines and trade publications).

How long do we hold your data?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Due to the nature of the activities of the Trust, some information collected may be retained in an archive if it is deemed by the Trust to be of public interest in the long term.

How do we use your personal data?

We will use your data in the following ways:

To meet our contractual obligations to you when you purchase attraction or event tickets either online or in person. This includes communicating with you about your purchase both before and after your visit.
To meet our contractual obligations to you when you purchase annual subscriptions, either online, through applications for membership or in person.
To update you on any products or events linked to (or similar to) your past purchases, as well as products or events you have expressed an interest in.
To send, with your consent, marketing communications regarding the Trust or other Beaulieu products and services. See further information below.
To notify you of opportunities to help us support the Trust and its work. See Fundraising below.
To notify you of the results of any competitions or raffles you have entered with us.
To keep records for accounting purposes and to process Gift Aid claims.
To carry out market research after your visit.
To respond to any correspondence you send to us.

Who do we share your data with, and why?

Please be assured that we will never sell your data to third party organisations. The nature of our business means that we work with carefully selected suppliers for services required to facilitate online purchases and staging of events. We may need to share your personal data with these third parties in relation to fulfilling our contractual obligations to you. They are obliged to keep your details securely and to only use them in relation to the service they provide to us. When they no longer need the data for the service, they will dispose of the details.

Data sharing with third parties
Third party service provider	Purpose
Beaulieu Enterprises Ltd	IT Infrastructure Provider
NetPay	Payment Processing
HM Revenue & Customs	Processing of Gift Aid Claims
The Access Group	Subscriptions System Support Provider
Surface Impression	Website Support Provider
Enhanced IT Solutions Limited	IT Infrastructure Support Provider
CPIO	Accounts System Software Support
Profile Productions	Conferencing/ Friends Evening Support
Leith’s at Beaulieu	Provision of Catering, Hospitality and Wedding Services
The Alarming Company Limited	CCTV Monitoring and Security Services
Mailchimp	Secure emails and newsletter broadcast platform

Marketing communications

We will only send you marketing communications with your consent, requested at the point of providing your data, and based on your preferences and interests. You may update your preferences or unsubscribe by following the links on any marketing message sent to you or emailing data.protection@beaulieu.co.uk at any time.

Fundraising communications

The National Motor Museum Trust is a registered charity (No. 1107656) and relies heavily on voluntary contributions from our supporters and visitors. To assist in our fundraising, we undertake research to understand our visitors and supporters better and the extent to which they may have potential interest in and ability to support us further. We also conduct research to find those with a shared interest in motoring who may wish to help. This research is conducted on the basis of “Legitimate Interest” under the terms of the UK General Data Protection Regulation (UK GDPR).

This research may include using publicly available information (for example, through social media, Companies House, Charity Commission, newspapers, magazines and trade publications). We may occasionally commission research from research specialists.

We may also conduct analysis of information that you give to us directly (for example, payment methods, postcodes, contact details, events you have attended) to help with our fundraising initiatives.

We also undertake research to help us to meet our obligations to protect the charity from financial fraud and risk.

If you would prefer us not to use your data in this way, please email us at data.protection@beaulieu.co.uk.

How do we protect your information?

We understand the concerns you may have about giving your personal details over the internet so we are rigorous about our security procedures. We use up-to-date industry procedures to protect your personal information. We have appropriate security measures in place in our physical facilities to protect against the loss, misuse or alteration of information that we have collected from you via our websites.

Please be aware however that the internet is not a 100% secure medium of communication. We cannot therefore guarantee the security of any information you input on the website or send to us on the internet.

Links to other websites

Our privacy policy does not cover the links within our site linking to other third party websites. We cannot be responsible for your protection and privacy when visiting such websites. We therefore encourage you to read the privacy statements on these websites before entering any personal information. Please refer to the liability section on the terms and conditions page for further information regarding links.

Your rights

Under the data protection laws, you have the following rights in relation to your personal data. If you wish to exercise any of them in relation to the personal data we hold about you, please contact data.protection@beaulieu.co.uk or write to the IT Operations Manager, Beaulieu Enterprises Ltd, John Montagu Building, Beaulieu, Hampshire, SO42 7ZN.

Panoramic view of the reading room with lady researching at desk

Right of access – you have the right to request a copy of the information that we hold about you.
Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
Right of portability – where relevant you have the right to have the data we hold about you transferred to another organisation.
Right to object – you have the right to object to certain types of processing such as direct marketing.
Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
Right to judicial review: in the event that we refuse your request under rights of access, we will provide you with a reason as to why.

Concerns and complaints

If you have any concerns or complaints regarding our data processing approach in relation to your own personal data, please contact data.protection@beaulieu.co.uk in the first instance. Your communication will be acknowledged and then responded to within 1 month.

If you are not satisfied with the outcome you can raise your concern with the Information Commissioner’s Office. For information on how to contact them, visit www.ico.org.uk/concerns, call 0303 123 1113 or write to: The ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.