Last Updated: August 2022
Your privacy is important to us. This privacy notice explains what personal data we collect from you and how we use it. We encourage you to read the information below to understand more about how providing your information may affect you.
This privacy notice applies to the Mary Rose Trust and the Mary Rose Trading Company inclusively (together “The Mary Rose”). This notice also applies to www.maryrose.org and the Mary Rose App (collectively “sites”). The Mary Rose online shop is hosted externally on Museumshops.uk and their privacy notice can be found here.For the purpose of the UK General Data Protection Regulation 2018 (and any resulting legislation as amended of superseded), the Mary Rose Trust is the data controller of any personal data processed under this privacy notice.
The Mary Rose Trust is registered as a data controller under the Data Protection Act 2018, and our Data Protection Register number is: ZA344694
We will update this privacy notice when necessary. When we post changes to this notice, we will revise the “last updated” date at the top of the notice and highlight what has changed. If there are any changes as to how The Mary Rose will use your personal data, we will notify you by directly sending you a notification. We encourage you to periodically review this privacy notice to learn how The Mary Rose is protecting your information.
The Mary Rose collects a small amount of data so that we can provide you with the best experience possible and to ensure we’re running our operations efficiently.
Most of the data collected will be provided by yourself on your terms, but in some cases, such as when using our sites, information from cookies and Google Analytics is sent to us.
Except as set out in this privacy notice, NO data that is collected, is given, shared or sold to any third parties.
We collect content of your files and communications when necessary to provide you with the products/services you use. For example, if you contact The Mary Rose by email, or by post, your data, such as email and/or postal address will be used to contact you regarding the reason as to which you contacted us with. Where appropriate, we may ask your permission to keep your data on a secure database, so as to keep you updated on events and news from The Mary Rose ONLY.
The transmission of information via the internet is not completely secure and we cannot guarantee the security of data while you are transmitting it. No data transmission can be 100% secure and any data you transmit is at your own risk.
We have procedures and security features in place to keep your data secure once we receive it. We won’t share your information with any other organisations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.
Any data we ask you for comes from:
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Personal information we collect about you might include:
Google Analytics, in conjunction with cookies, provides us with data regarding those who use www.maryrose.org, www.maryroseshop.org and our Mary Rose App.
Information collected in Google Analytics include the following:
Demographic data. Google Analytics collects and summarises your demographic data such as age, gender, country and preferred language through the use of cookies.
Usage data. Google Analytics collects and summarises data on how you interact with our website and app including:
Google Ads, in conjunction with cookies, provides us with anonymised data regarding the use of certain search terms and demographic information. This data is used to improve and personalise your experience by showing you adverts that may be of interest to you.
For information on Cookies and how we use them, please visit www.maryrose.org/cookie-policy and read the ‘Cookies’ section.
ALL data gathered from external sources are used for report purposes ONLY and allows us to ensure we are providing the right services and content needed for our users. We can’t personally identify you using your data as data from these external sources is anonymised.
The Mary Rose uses the data collected for the following purposes:
Providing and improving our products. We use anonymised data, to analyse use of our sites in our legitimate interests in order to provide and improve the products and services we offer. This includes operating, and maintaining the performance of, the products and services, including developing new features, research and providing support. Examples of such uses include the following:
Communications. We use data we collect to deliver and personalise our communications with you. For example, we may contact you by email or post to inform you when a membership is ending, in response to queries submitted to any of the sites, in regards to a purchase of a product or service, to inform you of any news or events about The Mary Rose ONLY. Additionally, there is the option to sign up for email subscriptions in which your data will only be used to send a newsletter to you regarding any updates about The Mary Rose. Where you have previously purchased a product or service from us, we may send you communications about further products or services from us that we think may be of interest to you or updates about The Mary Rose.
From September 2022 the Mary Rose Trust will operate under a new communications notice. While we continue to follow an opt-in approach for all email communications (referred to as ‘electronic direct marketing’ under the UK Data Protection Act) we will use ‘legitimate interest’ as the basis for our remaining direct marketing by post and phone. This means we will not seek opt-in consent to communicate with you by post or phone, and each communication will provide an opportunity to opt-out of future communications of this type. Supporters who have previously opted in (to any communication channel) will have their preferences respected as before. Where existing supporters re-engage with us, they will be presented with the new marketing permissions statement, and we will respect their latest instruction. You can change your marketing preferences at any time by emailing [email protected].
Opting Out. You can ask us to stop sending marketing messages at any time by clicking “unsubscribe” on the emails we send you or by contacting us at [email protected]. Where you opt out of receiving these marketing messages, this will not apply to personal data provided to us as a result of a product / service purchase.
Fundraising and campaigns. As a charity reliant on fundraised income, it is in our legitimate interests to carry out much of our fundraising activity. We will seek your specific consent to:
We have legal and contractual obligations to carry out the following activity:
We rely on our legitimate interests for the following activity:
If you would prefer us not to use your personal data in any of the ways described, please email us at [email protected] or call 02392 750 521.
The Mary Rose uses cookies (small text files placed on your device) on our sites to help collect data. We use analytical cookies so that our sites will remember you and how you’ve used the website or app, every time you return. Analytical cookies works in conjunction with Google Analytics and enables us to monitor the health of our website and which pages of our website are the most visited.
The data collected is anonymous and we’re unable to identify you personally.
You have the ability to disable any website using cookies via the settings on your browser, however this may limit what you might be able to see and use on our website. Unless you have adjusted your browser settings so that it will refuse cookies, our system will automatically issue cookies as soon as you visit any of our sites.
For more information on how to control cookies, please visit www.allaboutcookies.org.
You’ll find additional privacy information in this section which you may find important.
The Mary Rose has an obligation to protecting the security of your personal data. We use a variety of security procedures to help protect your personal data from unauthorized access, use or disclosure.
We store personal data you provide on computer systems that have limited access and are in controlled facilities. Most data is held in a database called Salesforce, for more information on their privacy notice please visit www.salesforce.com/uk/company/privacy.
Some data may also be processed by third party service providers such as payment processing providers and online ticket booking providers.
We take steps to ensure that the data we collect under this privacy notice is processed according to the provisions of this notice and the requirements of applicable law wherever the data is located.
The Mary Rose retains personal data for as long as necessary to provide the products and services and fulfil the transactions you have requested, or for other essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. When we no longer need to retain your information we will ensure it is securely disposed of, at the appropriate time. Some data, such as full name only, can be retained for all time, unless otherwise stated, due to archiving and charity records. For example, we keep records of names of divers on The Mary Rose, unless otherwise stated.
Your Rights
Where processing of your personal data is based on consent, you can withdraw that consent at any time.
You have the following rights. You can exercise these rights at any time by contacting us at [email protected]. You have the right:
In the event that you are unhappy with our processing of your personal data, you have the right to lodge a complaint with the relevant supervisory authority, which is the Information Commissioner’s Office (ICO) in the UK, at any time. The ICO’s contact details are available here: ico.org.uk/concerns.
For more information on Data Protection and your rights, please visit www.gov.uk.
Questions, comments and requests regarding this privacy notice are welcomed and should be addressed to:
Privacy Officer
The Mary Rose Trust
College Road
HM Naval Base
Portsmouth
PO1 3LX, UK
or sent to [email protected]