Privacy policy

This privacy policy will explain how our organisation uses the personal data we collect from you when you use our website, contact us via email, fill in one of our surveys, work with us or take part in our activities. 

Topics:

What data do we collect?

Exeter Science Centre collects the following data:

Note that we do not collect cookies on our website.

How do we collect your data?

You directly provide us with most of the data we collect. We may collect data and process data when you:

We may also receive your data indirectly from the following sources:

How will we use your data?

We collect your data so that we can:

Whenever we access your data, we do so for the purpose of running our organisation. We will not share your data with any third parties except those which will process your data for our business purposes, e.g. for sending you an email or newsletter, or processing a donation you would like to make. 

Certain types of personal data that we may collect, such as age, gender, racial or ethnic origin, will always be anonymised if used for external reporting. This data, if collected, is only used to indicate the demographics of the people that we interact with, for example during our public engagement activities, and we use this to ensure that we are working with people from all backgrounds.

How do we store your data?

We use appropriate safeguards to keep your personal information as secure as possible. We will ensure that any third parties we use for processing your personal information do the same. 

The third parties we use are Stripe to process any donations, and the Stripe privacy policy is available here. We use Sendinblue to store our contacts for newsletters, and the Sendinblue privacy policy is available here. We also use Google for file storage and certain forms (e.g. registering your interest) and the Google privacy policy is here. If you contact us on social media platforms (such as Facebook, Twitter or Instagram) you are agreeing to their privacy and data processing policies by contacting us through these methods.

What are your data protection rights?

Exeter Science Centre would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request Exeter Science Centre for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request Exeter Science Centre to complete the information you believe is incomplete.

The right to erasure – You have the right to request that we erase your personal data, under certain conditions.

The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.

The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.

The right to data portability – You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at [email protected].

Changes to our privacy policy

We will place any updates on this webpage. This privacy policy was last updated on 7 October 2020.

How to contact us

If you have any questions about Exeter Science Centre’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at [email protected].

Should you wish to report a complaint or if you feel that we have not addressed your concern in a satisfactory manner, you may contact the Information Commissioner’s Office (www.ico.org.uk).