This privacy policy was last updated on 24 May 2018

Elements of this policy were created using a template from SEQ Legal (http://www.seqlegal.com)

The purpose of this policy is to clearly explain what data or personal information the Hereford Cathedral Family might collect from you when you use our website.

This policy will explain:

• Who we are
• The type of data we collect & how we might use that information
• Who we share your data with
• Your access to your data

WHO WE ARE

The Hereford Cathedral family is formed of the following organisations:

• Hereford Cathedral Enterprises Limited
• Hereford Cathedral Perpetual Trust
• The Chapter
• Mappa Mundi Trust
• Hereford Cathedral Almshouse Charity of Saint Katherine and Saint Ethelbert
• Tomsons Charity

The main office of Hereford Cathedral Family is located at 5 College Cloisters, Cathedral Close, Hereford, HR1 2NG. You can contact the office by post to this address, by telephone on 01432 374200 or email [email protected]

 

THE TYPES OF DATA WE COLLECT & HOW WE MAY USE THAT INFORMATION

Transaction Data

You may provide Hereford Cathedral family with personal information such as your name, email address, telephone number, postal address and financial information when doing the following on our website:

• Buying tickets
• Making a donation

This data above is provided by you. The legal basis for this processing is contract as we need this information to process your request.

Financial transactions relating to the Hereford Cathedral Family may be handled by our payment services providers, Stripe. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds. You can find information about the payment services providers' privacy policies and practices at https://stripe.com/gb/privacy

We retain necessary transaction data for six years.

Marketing Data

You may provide Hereford Cathedral family with personal information such as your name, email address and postal address when doing the following on our website:

• Setting up an online account
• Signing up for marketing communications (such as Out of The Cloisters or our monthly e-newsletter)
• Asking to receive notifications (such as for our webcasts)

This data above is provided by you. The legal basis for this processing is consent as you are asking us to contact you with these forms of communication.

Hereford Cathedral Family will not send you any marketing communications unless you have opted in to receive them and will only send you marketing information in the format you ask to receive it. You have the right to amend your preferences at any point or ask to unsubscribe from communications and can do so by emailing [email protected] or putting your request in writing to the Data Team.

Marketing communications including Out of The Cloisters and webcast notifications are sent and distributed by the Hereford Cathedral Family staff through information stored within the Harlequin database. Harlequin stores personal data in a secure way and only members of the cathedral family staff who need to access it are able to. More information on Harlequin’s privacy policy can be found here www.harlequinsoftware.co.uk/privacy

Marketing email newsletters are sent by Dawleys on behalf of the Hereford Cathedral Family and they maintain and update the database. More information on Dawleys’ privacy policy can be found here www.dawleys.com/privacy-policy

We periodically review interaction with our marketing emails and will remove individuals from the database who have not opened an email within eighteen months.

 

Web Analytics Data

We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google's privacy policy is available at: https://www.google.com/policies/privacy/. The relevant cookies have the following names:_ga, _gid, _gat, __utma, __utmt, __utmb, __utmc, __utmz and __utmv

We may process data about your use of our website and services. The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system. This usage data may be processed for the purposes of analysing the use of the website and services. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services.

We use cookies to gather this information and you can read our Cookie Policy here

 

WHO WE SHARE DATA WITH

We may disclose your personal data to any member of the Hereford Cathedral Family insofar as reasonably necessary for the purposes set out in this policy.

This privacy policy only governs our websites and we are not responsible for the privacy policies that govern third party websites even where we have provided links to them. If you use any link on our website, we recommend you read the privacy policy of that website before sharing any personal or financial data.

We also operate a number of social media pages (including Facebook, Twitter and Instagram).  Although this policy covers how we will use any data collected from those pages it does not cover how the providers of social media websites will use your information. Please ensure you read the privacy policy of the social media website before sharing data and make use of the privacy settings and reporting mechanisms to control how your data is used.

 

YOUR ACCESS TO YOUR DATA

Please let us know if the personal information that we hold about you needs to be corrected or updated.

You are entitled to amend, correct or update the data which we have for you at any point as well as ask to remove yourself from our databases. To amend your data please put your request in writing to Data Team (5 College Cloisters, Hereford, HR1 2NG) or sending an email to [email protected]

You also have the right to ask for access to see the data which we hold about you – this is called a Subject Access Request. If you wish to complete a subject access request you can do so by putting the request into writing for the attention of Data Team (5 College Cloisters, Hereford, HR1 2NG) or sending an email to [email protected]

Please note that we will need to have enough information to confirm your identity before processing a request. If we have cause to doubt your identity, we can ask you to provide a reasonable amount of evidence to ensure that we do not divulge your personal details to a third party

 

We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you are happy with any changes to this policy.

If you have any questions or queries about this policy or would like more information on any of the elements within it please contact the Hereford Cathedral Family at the below address:

5 College Cloisters, Hereford, HR1 2NG

Hereford Cathedral is fully covered by CCTV for the safety and security of our visitors, volunteers and staff.