This policy was last updated on 15 August 2025.
We are committed to safeguarding the privacy of our website visitors, subscribers to our newsletters, attendees at our events, and others whose data we hold. This policy outlines how we safeguard your information and respect your digital rights.
We currently collect and process the following information:
- Personal identifiers, contacts, and characteristics (including name, email address, phone number, postal address)
- Demographic information for equalities monitoring (e.g. gender, ethnicity, sexuality)
- Your opinion and feedback in relation to any surveys or questionnaires issued by the Women’s Museum that you complete, such as feedback on our activities and events. This data is anonymised unless otherwise agreed
Our use of your Personal Data will always have a lawful basis, either because it is necessary for Our performance of a contract with you, because you have consented to Our use of your Personal Data (e.g. by subscribing to our emails), or because it is in Our legitimate interests. Specifically, most of the personal information we process is provided to us directly by you for one of the following reasons:
- To register to attend one of our events
- To use our website
- To complete a survey
- To communicate with us
We may use the information that you have given us in order to:
- Send you communications, including:
Newsletter
Event invites
Occasional emails regarding important announcements at the Women’s Museum
- Send statements, invoices and payment reminders to you, and collect payments from you
- Process and respond to requests, enquires and complaints that we receive from you
- Keep our database up to date
- To contact you if we need to obtain or provide additional information
- Meet any statutory or regulatory compliance.
Box Office:
We use third party provider Eventbrite to manage our ticketing. We gather personal information that you provide to them, for example your name, your email address, your telephone number, address, and information about whether you have opted-in to receive our emails and third-party information. For more information, please see Eventbrite’s Privacy Notice.
E-Newsletter:
We use a third-party provider, Mailchimp, to deliver our e-newsletters. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter.
Emails are collected by signing up to our mailing list via our sign up forms, and embedded form on the website. Your email address, first name, surname, and postal address will be stored by MailChimp so that we can share our emails with you, and access analytics on our email audience.
By signing up to our email platform, you acknowledge that your information will be transferred to Mailchimp for processing. You can unsubscribe at any time by clicking the link in the footer of our emails.
For more information, please see Mailchimp’s privacy notice.
Social Media:
We use Instagram to share updates on our programme, stories connected to the Women’s Museum, and other digital content. We use analytics information on Instagram to gain further understanding of our audiences and the content you enjoy. For further information, please read Instagram’s privacy policy.
Dropbox:
We occasionally use Dropbox to store and share data between staff and external partners. For further information, please see Dropbox’s Privacy Policy.
Google Drive:
We occasionally use Google Drive to store and share data between staff and external partners. For further information, please see Google Drive’s Privacy Policy.
Your data security is fundamental to our operations and we make sure that appropriate physical, technical, and human controls are in place to ensure we take good care of your information, including:
However, the transition of information over the internet is never completely secure and as a result, while we strive to protect your personal information, the Women’s Museum cannot guarantee the security of any information you transmit to us, and you do at your own risk. Once we receive your data, we make every effort to try to ensure its security both on our systems and while in transit between our systems and our partners who work on our behalf.
We cannot be responsible for the privacy policies and practices of other websites, even if you access them using links from our website and recommend that you check the policy of each site that you visit.
How long we keep your information
We will hold your personal information on our systems for as long as is necessary for the relevant activity and meet any legal or regulatory requirement.
- This is so that we can provide the services, products, or information you have requested
- To administer your relationship with us
- To ensure we don’t communicate with you if you’ve asked us not to and to comply with the law
- To comply with local authority requests and the law, including for the period demanded by tax regulations
We will only disclose your personal information:
- If required to do so by law;
- In connection with any ongoing or prospective legal proceedings;
- In order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk)
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
(a) Your consent. We will only process personal data after being given express permission by you, after having explained what we will use the personal information for. You are able to remove your consent at any time. You can do this by contacting us at womensmuseum@lbbd.gov.uk or by writing to us at our postal address.
(b) We have a contractual obligation. We sometimes enter into contractual working agreements with individuals which require us to process personal data supplied by them.
(c) We have a legal obligation. This refers to our holding of data on our employees’ taxation and pensions, or we need to share the data to protect our users or our rights.
(d) We need it from service providers, such as email services or payment processes.
Your data protection rights
Under data protection law, you have legal rights over your personal information. For example, you can see it, amend it, ask us to change the way we handle it or have it removed from our records completely.
The rights under Data Protection law mean that you have a right to request:
- A copy of the information that is held about you (‘subject access request’ (SAR) in the GDPR)
- That anything inaccurate in your personal data is corrected (‘rectification’ in the GDPR)
- That the personal data be erased (‘right to erasure’ in the GDPR)
The DPA Data Protection Act 2018 stipulates statutory retention periods for some records that contain personal data. Other personal data will be held for as long as may be justifiable under the regulations after which all personal data will be securely deleted.
If you want to do any of these things, you can email womensmuseum@lbbd.gov.uk
We make changes to this Privacy Policy from time to time. We’ll notify you of these changes by creating a new Privacy Policy on this page and updating the “Last updated” date.
This policy is governed by and construed in accordance with English law.
Questions or concerns about our privacy policy? Reach out to us at: womensmuseum@lbbd.gov.uk