The Belper North Mill Trust
This Policy explains when and why the Belper North Mill Trust may collect personal information about our visitors, our website users and anyone who contacts us by phone, e-mail or through our website and how we use this information and keep it secure.
By using our website, you are agreeing to be bound by this Policy.
The Belper North Mill Trust is committed to protecting your personal information and being open about what information we hold.
Who we are
The Belper North Mill Trust is a Registered Charity (No. 1068485) and a Company Limited by Guarantee (No. 3509183).
The objects of the Trust are:
(1) To advance the education of the public into the industrial heritage of the Derwent Valley with particular reference to Belper North Mill;
(2) The conservation, maintenance and protection for the public benefit of the historical, architectural, archaeological and industrial heritage of the Derwent Valley.
The Trust runs the Derwent Valley Visitor Centre and a small, independent museum within the North Mill in Belper, Derbyshire, a former cotton-spinning mill that is part of the Derwent Valley Mills World Heritage Site. In 2004 the Trust adopted ‘Strutt’s North Mill’ as the operational name for the museum, to highlight the importance of the Strutt family in the history of Belper.
Our registered office is
The Derwent Valley Visitor Centre, Bridge Foot, Belper, Derbyshire, DE56 1YD
Some basic definitions concerning your privacy
- The General Data Protection Regulation, which came into force on 25 May 2018, applies to data processing by individuals and organisations operating within the European Union. It will continue to apply to the United Kingdom after we leave the EU. The GDPR enhances your rights in the processing of your personal data and this policy has been written in response to this new Regulation;
- The Trust is a data ‘controller’ under the General Data Protection Regulation;
- Personal data is information relating to a living individual who can be identified from that data, or from that data when combined with other information held by a data controller or processor. It relates to an individual’s private, profession or public life and includes any expression of opinion about an individual;
- Personal data which is classified as ‘sensitive’ relates to an individual’s private life and includes: racial or ethnic origin; political opinions; religious beliefs; trade union activities; physical or mental health; sexual life; and details of criminal offences.
How do we collect information from you?
We may obtain information about you when you visit the museum, for example, when you fill in a visitor survey, make a donation, Gift Aid your museum entrance fee, ask to be kept informed of future events, or participate in a special event or activity or when you contact us or use our website.
Aged 16 or Under
If you are aged 16 or under‚ please get your parent or guardian’s permission before you provide us with any personal information.
Using our website
When you use this website, the Belper North Mill Trust may collect certain technical and routing information about your computer to facilitate your use of the site and its services. For example, we may log environmental variables, such as browser type, operating system, CPU speed and the Internet Protocol (“IP”) address of your computer. We use these environmental variables to facilitate and track your use of the site and its services. The Trust also uses such environmental variables to collect information about the use of the website, such as the types of services used and how many users we receive daily. This information is collected in aggregate form, without identifying any user individually. The Trust may use this aggregate, non-identifying statistical data for statistical analysis, marketing, or similar promotional purposes.
Use of ‘cookies’
Links to other websites
Our website may contain links to websites run by other organisations. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.
If you linked to our website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.
What type of information do we collect?
When you visit the museum or contact us, the personal information we collect may include your name, address, postcode, phone number(s), e-mail address, occupation, age and Gift Aid status.
How is your information used?
We may use your information to:
- process and record a donation;
- process Gift Aid;
- manage bookings for events;
- fulfil any contractual obligations we may have with you;
- ask for your views or comments on what we do;
- send you information that may be of interest to you.
We will only hold your personal information for as long as is necessary for the relevant purpose, or as set out in any contract you hold with us. We are however required to hold some types of information for specific lengths of time in order to fulfil our statutory obligations (for example the collection of Gift Aid).
Who has access to your information?
We do not share with, or sell your personal data to, any other person or organisation except where obliged to do so to fulfil the legal and regulatory requirements of our business, for example with HMRC in relation to Gift Aid.
How do we use your data?
Your data is used by the Belper North Mill Trust to manage and run our business, Strutt’s North Mill and the Derwent Valley Visitor Centre, and their associated activities.
Communications to you may be sent by post, telephone or electronic means (but are principally by e-mail), depending on the contact details we hold for you and what you have told us about your preferred method of communication.
In some cases we may pass on information to you that we think you will find of interest, for example from our partners in the Derwent Valley Mills World Heritage Site or from other organisations and professional bodies with whom we work, but we do not make your data available to these bodies.
How do we keep your information secure?
We have implemented security procedures, rules and technical measures to protect the personal data that we have under our control from:
- unauthorised access;
- improper disclosure;
- unauthorised modification.
Staff, trustees and volunteers who have access to and are associated with, processing personal data, are legally obliged to respect your confidentiality.
Payments by credit card
When you visit the museum and make a payment by credit card (including contactless cards) for example a donation, your museum entrance fee, or a purchase in our shop, your credit card information is not recorded by us. This is collected by WorldPay, our third party payment processor, a company that specialises in the secure processing of credit and debit card transactions and we adhere to their code of practice.
You have the right to:
- ask us for access to, rectification or erasure of your data
- restrict processing (pending correction or deletion)
- object to communications or advertising from us
You have the right to lodge a complaint with the Information Commissioner’s Office.
The legal basis for processing your personal data for the interdependent purposes set out above is that it is necessary for the pursuit of our legitimate interests. We will always handle your personal data securely and minimise its use.
The controller for your personal data is the Belper North Mill Trust and we can be contacted, in the first instance, through our Administrative Officer firstname.lastname@example.org
How to access your personal data
You can ask to see a copy of the personal data that we hold for you. This is called a Subject Access Request and applications should be made in writing to:
The Company Secretary, Belper North Mill Trust, Derwent Valley Visitor Centre, Bridge Foot, Belper DE56 1YD.
Please contact us if you have any concerns or questions about this Policy or if you wish to ask us not to process your personal data for particular purposes. Where you have specific requests relating to how we manage your data, we will endeavour to resolve these, but please note that there may be circumstances where we cannot comply with these.
7 May 2018