Privacy Policy
May 2018
1.0 Introduction
Association of Heritage Interpretation (AHI)’s privacy policy sets out how uses and protects any information that you give AHI. This is in compliance with the new General Data Protection Regulations (GDPR). AHI promises to respect any personal data that you share with us and keep it safe. We aim to be clear about when we collect your data and commit not to do anything you would not reasonably expect.
AHI is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified, then you can be assured that it will only be used in accordance with this privacy policy. You also have a right to request the information that we hold, and a right to be forgotten (i.e. to have all your information on our records deleted).
AHI have moved to an ‘opt-in only’ communication policy. This means that we will only send communications (e-newsletters, e-bulletins, newsletters) to those that have explicitly stated that they are happy to do this via their preferred channels (email, phone or post).
Communications carried out for business purposes (e.g. confirmation of booking for conference/training and receipt of the AHI journal for members) are, as business transactions, exempt from the provisions of the GDPR, so you should expect to be able to receive these without needing to commit to receiving other communications from AHI.
AHI may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.
2.0 Where we collect information about you from and how we use it
AHI collects information about you in the following ways:
- Details of our current and previous membership.
- Details of our current volunteers
- Details of our trainers
- Details of our conference delegates and attendees at our training courses
Contact/Membership Form
We collect the minimum required personal data from our contact form, online and on paper.
We may collect the following personal information:
- Your name if you submit it
- Your phone number and email address if you submit them
Submitted contact form information is not stored on the website.
AHI does not link this personal data with any other paper or website data.
AHI’s website and paper communications do not collect sensitive personal data.
We retain membership details for up to 3 years.
You have a right to request the details that we hold about you and a right to be forgotten, i.e. that we will delete all records relating to you.
3.0 AHI Website and E-communications
The AHI website, e-bulletin and e-newsletter is one of the primary ways that we use to keep in touch with our members.
The details of the privacy settings on our current website are:
What AHI’s website collects
Use of Cookies
AHI’s website uses cookies. A cookie is a small piece of information which is sent to your computer’s hard drive by the website so that the website can store some information about your online visit. This information may include information about your computer such as the computer’s IP address and browser type and, if you arrived at our site via a link from third party site, the address of the linking page.
The IP address helps Google Analytics make sense of the data. It is never linked by AHI to personal data. We only use information gathered by cookies in aggregate. For example, learning that 60% of people viewed the About page or that 50 people arrived at the website after clicking on one of our Tweets.
Overall, cookies help us provide you with a better website by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer.
Cookies
When you are logged in our website uses cookies to keep you logged in securely. Here’s a list of the cookies we use and what they do:
WordPress & S2member software provides you a secure login and allows your access to privileged areas of the site:
S2member_tracking, wordpress_logged-in, wordpress_sec, wordpress_test_cookie, PHPSESSID
Google Analytics aggregate tracking to see how well our website works:
_ga, _gat, _gid, _gat_gtag, _utma, _utmz, CONSENT
Stripe payment to secure your purchases:
_stripe_mid, checkout-live-session, checkout-test-session
A cookie notice is provided if you have accepted it we record your choice:
cookie_notice_accepted
Google Maps uses your Google Maps account preferences:
NID
Aggregate Tracking
AHI’s website uses web analytics services provided by Google, Inc which uses cookies to help us to analyse how users use the site. This tracks how people reached the website, how many people use the website, and which pages are looked at most. Google is a data processor. The information generated by the cookie about your use of our sites (including your IP address) will be transmitted to and stored on Google servers in the United States and/or United Kingdom. Google will use this information to evaluate our websites and compile reports on website activity for. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on their behalf. Google will not associate your IP address with any other data held by Google. You can read Google’s Privacy Policy here: https://policies.google.com/privacy. If you wish to refuse the use of cookies by Google please visit http://tools.google.com/dlpage/gaoptout . You may also refuse the use of cookies by selecting the appropriate settings on your browser.
Map Data
This website uses Google Maps to show you our business location. You can read Google’s Privacy Policy here: https://policies.google.com/privacy
Email Marketing
If you have explicitly agreed to it, this website uses MailChimp to store your email address, so we can contact you about our business. You can read MailChimp’s own Privacy Policy here: https://mailchimp.com/legal/privacy
Links to other websites
Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over other websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.
4.0 How we keep your data safe and who has access
Security
AHI is committed to ensuring that your information is secure. To prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. AHI ensures that there are appropriate technical controls in place to protect your personal details. For example our online forms are always encrypted and our computer systems are protected and routinely monitored. We have an active cookie notice to cover this area of GDPR regulations stringently. We have opt-in consent on our contact form. AHI undertakes regular reviews of who has access to information that we hold to ensure that your information is only accessible by appropriately trained staff, trustees, volunteers and contractors.
5.0 What we do with the information we gather
AHI uses the information that you provide to further our charitable objectives – to increase the quality of Heritage Interpretation in the UK and beyond. We do not sell on to third parties. We use the information gathered online and through analysis of conference and training attendees and evaluation forms to understand your needs and provide you with a better service, and for the following reasons:
- If you have used the online contact form, we will use the information provided to contact you about your message.
- If you are a member, you can opt-in to receive our e-news and e-bulletin; you can also unsubscribe if you would prefer not to receive these communications.
- If you have booked for training or a conference we will contact you about your booking.
- If you are a member, you will receive a mail copy of the paper AHI journal as long as you are opted-in; you can also unsubscribe from these communications.
- We use tracking information from Google to improve our website content and structure. For example, if the data shows that a given page is not being read much, perhaps it needs rewritten or linked to more clearly. This does not link directly to individual personal data.
Controlling your personal information
Please be aware you have the following rights regards the collection or use of your personal information:
Right to Access
You may request details of personal information which we hold about you. If you would like a copy of any information held on you, please email admin@ahi.org.uk
Right to Rectification
If you believe that any information we are holding on you is incorrect or incomplete, we will promptly correct any information found to be incorrect. Please email admin@ahi.org.uk
Right to Deletion
You will only receive email marketing messages if you have explicitly agreed to receive them. Every marketing message should include an unsubscribe link which will quickly remove you from the service. If you wish us to remove you manually please email admin@ahi.org.uk
You may also request deletion of any personal information which we hold about you. If you would like such information deleted, please email admin@ahi.org.uk
We will not sell, distribute or lease your personal information to third parties unless we are required by law to do so.