Privacy Policy

Privacy Policy

Effective date: 21/11/2025
Version: 1.0

1. Who we are

We are Newstead Abbey Partnership (“we”, “us”, “our”). Our website is https://newsteadabbey-partnership.org/ (“the Website”). Our mission is to engage UK and international visitors, heritage enthusiasts and potential donors in the story of Newstead Abbey, encourage donations, membership and shopping, and provide news and events.
Our registered address: [Insert address].
You can contact us at: [Insert email address] or postal address as above.

2. Scope and purpose of this policy

This Privacy Policy explains how we collect, use, share and protect personal data about you when you visit our Website, register for newsletters, become a member, donate, sign up for events, or shop via our online store. It also explains your rights under the UK data protection regime (including the Information Commissioner’s Office (ICO) guidance). ICO+2ICO+2

3. What personal data we collect

We may collect and process the following types of personal data:

• • Identity & contact data: your name, title, postal address, email address, telephone number (when you provide these via forms – e.g., membership, donation, event registration).

• • Transaction data: details of any donations you make, membership payments, purchases from our shop.

• • Technical & usage data: when you visit our Website, we may collect your IP address, browser type, operating system, device type, pages visited, time spent, referral source and other similar analytics/usage data.

• • Marketing & communications data: your preferences about how we may contact you (if you opt in to receive our newsletter or other communications).

• • Other data: any other information you choose to provide us (for example via contact forms, surveys, volunteering interest forms).

4. How and why we use your personal data (purposes & lawful bases)

We process your personal data for the following key purposes:

• • To provide you with the services you request (e.g., processing a donation, issuing membership, fulfilling a shop order). The lawful basis: contract (or pre-contract) and legitimate interests.

• • To send you our newsletter, event invitations and information about membership, the Abbey, our work, if you have opted in. Lawful basis: consent.

• • To improve our Website, understand its usage, monitor analytics and performance. Lawful basis: legitimate interests (for example better visitor experience).

• • To comply with legal obligations (e.g., accounting, tax, charitable reporting). Lawful basis: legal obligation.

• • To protect our organisation, prevent fraud or misuse of our services. Lawful basis: legitimate interests.

5. Who we share your personal data with

We may share your personal data with:

• • Our payment processor(s) (for example for donations and shop purchases).

• • Our email/newsletter provider (for communications if you opted-in).

• • Web analytics and hosting providers (for usage data).

• • Any third-party service providers engaged by us in connection with the carrying out of our mission (e.g., event management, CRM).

• • Where required by law or a regulatory authority.

We do not sell your personal data to third parties for marketing purposes.

6. International transfers

If we transfer your personal data outside the UK (for example to service providers hosted outside the UK), we will ensure that appropriate safeguards are in place (such as UK / EU equivalent protections) or otherwise comply with the UK GDPR requirements. ICO

7. How long we keep your data

We retain your personal data only for as long as necessary for the purpose for which it was collected, and for compliance with legal obligations (for example charitable accounting) or legitimate interests (such as membership history) as appropriate. After that we will securely delete or anonymise your data.

8. Security of your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. Access to personal data is limited to those staff and third-party service providers who have a business need.

9. Your rights

Under the UK data protection regime you have certain rights in relation to your personal data, including:

• • the right to request access to your personal data;

• • the right to request correction of inaccurate or incomplete data;

• • the right to request erasure of your personal data (in certain circumstances);

• • the right to request restriction of processing;

• • the right to object to processing (including for direct marketing or profiling);

• • the right to request data portability (in certain circumstances);

• • the right to withdraw consent (where processing is based on consent) at any time, without affecting the lawfulness of processing before the withdrawal; ICO

• • the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you consider our use of your personal data infringes data protection law.

To exercise any of these rights, please contact us at the contact details above.

10. Marketing

If you have opted in to receive communications from us about our work, events, membership and shop, you can change your mind and unsubscribe or update your preferences at any time by following the link in the email or contacting us.

11. Children

Our Website, services, event bookings, donations and membership are generally aimed at adults. If we become aware that we have collected personal data from a child without valid consent (where required) we will take steps to delete it.

12. Changes to this policy

We reserve the right to update this Privacy Policy from time to time. We will publish the updated version on our Website and indicate the effective date. Please check back periodically.

13. Contact us

If you have any questions about this Policy or our data practices, please contact:
Newstead Abbey Partnership
Email: napsecretary@outlook.com