The type of personal information we collect

We currently collect and process the following information:

• Personal identifiers and contact information
• Website user data. Please see our cookies page for more information.

How we get the personal information and why we have it

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• To contact you to respond to your enquiries (if you email us with a question, for example).
• To promote our work, trustee roles and news through email newsletters.
• To analyse and learn from website user behaviour to improve the website.

Why we are allowed to use your data
We have a lawful basis to collect, process, hold and share your personal information, as referenced in paragraphs 1 a) 1 b) and 1 c) of Article 6 of the UK GDPR, as detailed below:

a) The data subject has given consent to the processing of his or her personal data for one or more specific purposes;

b) Processing is necessary for the performance of a contract to which the data subject is party or to take steps at the request of the data subject prior to entering into a contract;

c) Processing is necessary for compliance with a legal obligation to which the controller is subject.

Whilst the majority of the information you provide to us is mandatory in order for us to provide a service, most of it is provided to us on a voluntary basis. In order to comply with data protection legislation, we will inform you whether you are required to provide certain information to us or if you have a choice in this.

How long will we keep your data
We will keep your data only for as long as necessary for business purposes or if we are required to keep it by law. Once it is no longer required, it will be disposed of securely and safely.

Who we can share your data with
We will only share your personal information where we are legally required to do so, or we have engaged a supplier or contractor to undertake services on our behalf, such as carrying out research and analysis.

Your information will only be accessible to relevant Leeds Museums & Galleries Development Trust staff, volunteers and contractors who are trained to use data appropriately in order for them to carry out their roles in line with our Privacy Policy.

We will never sell your information or let other organisations use it for their own purposes. We only work with trusted suppliers and contractors who have demonstrated to us that they comply with the General Data Protection Regulation and other relevant legislation.