We are committed to protecting and respecting your privacy and to ensuring we meet our obligations under the UK General Data Protection Regulation (UK GDPR), tailored by the Data Protection Act 2018.
Who are we?The following policy is issued by Beaulieu Enterprises Ltd referred to as “BEL”. BEL is a private limited company, registered in England (company no. 00152186) with its registered office at John Montagu Building, Beaulieu, Hampshire, SO42 7ZN.
For the purpose of the UK GDPR, the data controller is BEL and our data protection representatives can be contacted directly here:
IT Operations Manager, John Montagu Building, Beaulieu, Hampshire, SO42 7ZN
- Identity Data includes title, first name, last name, and username.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes your internet protocol (IP) address. We may collect information about your computer including, where available, your IP address, operating system and browser type for system administration and to report aggregate information to our advertisers. This is statistical data about our users’ browsing actions and patterns and does not identify any individual. Your IP address may also be used to diagnose problems with our server, monitor visitor traffic patterns and site usage to help us develop and improve our site further. We may also analyse which marketing activity led you to our website and resulting actions.
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
Where do we collect your data?We may collect and process personal data from you as follows:
- Directly from yourself when you complete a form, use our website, use our onsite Wi-Fi, or send us correspondence by email, letter or telephone. This includes data when you:
o Purchase tickets for the attraction and river cruise
o Subscribe to our marketing
o Enter a competition
o Participate in a survey
o Provide feedback on a service or experience
- CCTV. We operate a number of CCTV cameras across our premises.
- Publicly available information (for example, through social media, Companies House, Charity Commission, newspapers, magazines and trade publications).
How do we use your personal data?We will use your data in the following ways:
- To meet our contractual obligations to you when you purchase Buckler’s Hard attraction or river cruise tickets either online or in person. This includes communicating with you about your purchase both before and after your visit.
- To update you on any products or events linked to (or similar to) your past purchases, as well as products or events you have expressed an interest in.
- To send, with your consent, marketing communications regarding Buckler’s Hard products and services. See further information below.
- To notify you of the results of any competitions you have entered with us.
- To keep records for accounting purposes.
- To carry out market research after your visit.
- To respond to any correspondence you send to us.
- To communicate with media in relation to our PR processes.
Marketing communicationsWe will only send you marketing communications with your consent, requested at the point of providing your data, and based on your preferences and interests. You may update your preferences or unsubscribe by following the links on any marketing message sent to you or emailing email@example.com at any time.
Fundraising communicationsThe National Motor Museum Trust is a registered charity (No. 1107656), which runs the National Motor Museum at our sister attraction, Beaulieu. The Trust relies heavily on voluntary contributions from our supporters and visitors. To assist in their fundraising, the Trust undertakes research to understand our visitors and supporters better and the extent to which they may have potential interest in and ability to support the Trust and its work. They also conduct research to find those with a shared interest in motoring who may wish to help with their work. Their research is conducted on the basis of “Legitimate Interest” under the terms of the UK General Data Protection Regulation (UK GDPR).
The research may include using publicly available information (for example, through social media, Companies House, Charity Commission, newspapers, magazines and trade publications). The Trust may occasionally commission research from research specialists.
We share information with the Trust and they may conduct analysis of the information that you give to us directly (for example, payment methods, postcodes, contact details, events you have attended) in order to help with our fundraising initiatives.
The Trust also undertakes research to help them to meet their obligations to protect the charity from financial fraud and risk.
If you would prefer us not to share your information with the Trust so that they can use your data in this way, please email us at firstname.lastname@example.org.
For more information about the National Motor Museum Trust, together with their privacy statement, please visit www.nationalmotormuseum.org.uk
Who do we share your data with, and why?Please be assured that we will never sell your data to third party organisations. The nature of our business means that we work with carefully selected suppliers for services required to facilitate online purchases and the provision of our river cruise. We may need to share your personal data with these third parties in relation to fulfilling our contractual obligations to you. They are obliged to keep your details securely and to only use them in relation to the service they provide to us. When they no longer need the data for the service, they will dispose of the details.
|Third party service provider||Purpose|
|Blue Funnel Cruises||Fulfilment of river cruise bookings|
|Semantic Ltd||Website support provider|
|Enhanced||IT Infrastructure support provider|
|CPIO||Accounts system software support|
|Mailchimp||Secure emails and newsletter broadcast platform|
|AMS Media Group||Media buying agency|
|The Alarming Company Limited||CCTV monitoring and security services|
|The National Motor Museum Trust||Processing of data for marketing, volunteering, fundraising and administrative purposes|
|Cloud4Wi||Splash Page Provider|
|Enhanced IT Solutions Limited||IT Infrastructure Support Provider|
|New Park Solutions||Car park management solution|
How do we protect your information?We understand the concerns you may have about giving your personal details over the internet so we are rigorous about our security procedures. We use up-to-date industry procedures to protect your personal information including the encryption of payment details using SSL technology. We have appropriate security measures in place in our physical facilities to protect against the loss, misuse or alteration of information that we have collected from you via our websites.
Please be aware however that the internet is not a 100% secure medium of communication. We cannot therefore guarantee the security of any information you input on the website or send to us on the internet.
How long do we hold your data?We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Your rightsUnder the data protection laws, you have the following rights in relation to your personal data. If you wish to exercise any of them in relation to the personal data we hold about you, please contact email@example.com or write to the IT Operations Manager, Beaulieu Enterprises Ltd, John Montagu Building, Beaulieu, Hampshire, SO42 7ZN.
- Right of access – you have the right to request a copy of the information that we hold about you.
- Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.
- Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.
- Right to restriction of processing – where certain conditions apply to have a right to restrict the processing.
- Right of portability – where relevant you have the right to have the data we hold about you transferred to another organisation.
- Right to object – you have the right to object to certain types of processing such as direct marketing.
- Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.
- Right to judicial review: in the event that we refuse your request under rights of access, we will provide you with a reason as to why.
Concerns and complaintsIf you have any concerns or complaints regarding our data processing approach in relation to your own personal data, please contact firstname.lastname@example.org in the first instance. Your communication will be acknowledged and then responded to within 1 month.
If you are not satisfied with the outcome you can raise your concern with the Information Commissioner’s Office. For information on how to contact them, visit www.ico.org.uk/concerns