National Museums Scotland
We are registered as a Scottish Charity, and our registration number is: SC 011130
We are registered as a data controller under the Data Protection Act 1998, and our Data Protection Register number is: Z159876X
Any electronic communications will be made in accordance with the Privacy and Electronic Communications Regulations (PECR)
We collect the personal data that you may volunteer as part of ticket bookings, online purchases, Membership or donation forms, e-newsletter sign-ups and visitor surveys.
Personal information we collect may include:
We will also collect and hold information about any contact you have with us as a visitor, customer or supporter of National Museums Scotland, and may consist of details of:
When we ask you to provide your personal information we will let you know why we are asking, and how we will use your data, by directing you towards this notice.
Depending on your relationship with National Museums Scotland, and the preferences you have indicated, data we hold may be used by us for the following purposes:
You can opt out of any / all of our communications at any point simply by contacting firstname.lastname@example.org.
There are some Membership and donation communications that we are required to send regardless of your contact preferences. These are essential communications, deemed necessary to fulfil our contractual obligations to you. This would include Direct Debit confirmations and advanced notices, thank you letters, Member benefits such as Explorer magazine and Membership cards, renewal reminders, Gift Aid confirmation letters and querying returned mail or bounced Direct Debit payments with you.
We continuously review records of supporters to ensure your data is as accurate as possible. We may consult alternative sources in order undertake these checks, such as:
Where we appoint an external party to undertake a screening of information, any such arrangements will be subject to a formal agreement between National Museums Scotland and that organisation, to protect the security of your data.
We may segment the information we hold about you in our database based on a proprietary score. These scores are calculated using personal data, as well as how engaged with us you have previously been, and indicators of future engagement. Analysis of this helps us understand our Members, donors and potential donors to ensure we are efficient and that only relevant communications are sent to you.
You can opt-out of your data being utilised for wealth screening, data cleaning or analysis (with the aims of targeting communications with you appropriately, or finding up to date contact information in the case of gone away mail) simply by contacting email@example.com
We do not disclose personal data to any third parties or external organisations, other than data processors carrying out work on our behalf.
Examples of such data processors would be mailing houses for the sending of our Explorer magazine, bulk email distribution services, telephone fundraising agencies working on our behalf, or wealth screening and data cleaning organisations.
Any such companies are acting as approved data processors for National Museums Scotland, and we retain full responsibility for your personal data. Data processors will act only on our instructions.
We may occasionally need to transfer your personal information overseas, for instance to our bulk email distributor, MailChimp. Where this is necessary, this may be to countries or territories around the world.
We are required to ensure any transfers of data will be done securely, in accordance with best practice, and in compliance with the Data Protection Act 1998.
Your data will never be sold or passed to any third party for any other purpose.
We have implemented security procedures, rules and technical measures to protect the personal data that we have under our control from:
All our employees and data processors, who have access to, and are associated with the processing of personal data, are legally obliged to respect the confidentiality of our visitors’ and supporters’ personal data.
You can ask us if we are keeping any personal data about you and you can also request to receive a copy of that personal data – this is called a Subject Access Request.
To make a Subject Access Request you will need to provide adequate proof of identity such as a copy of your passport, birth certificate or driving licence before your request can be processed. There may also be a fee of up to £10 depending on the volume of work required.
Please try to be as clear as possible about the information you are seeking.
Once we have received your Subject Access Request, the agreed fee and proof of identity, you will receive a response from us within 40 days and you will be able to get copies of any information we hold on you. However, exemptions to disclosure may apply in some circumstances.
Subject Access Requests should be sent to:
Data Protection Officer
National Museums Scotland
At any time you may request that we delete or correct your personal information. If you wish to correct any information on you held by National Museums Scotland, simply contact firstname.lastname@example.org.
Pages on the National Museums Scotland website include links to relevant content within nms.ac.uk, shop.nms.ac.uk, blog.nms.ac.uk and supporting.nms.ac.uk - this privacy notice only applies to these websites.
We regularly review our privacy notice, and may make changes time to time. Any changes made will be posted to this page, and will apply from the time we post them. This privacy notice was last changed on 13 March 2017.
If you have any comments on our privacy notice, or information we hold about you please contact us: