Privacy Policy
This privacy policy sets out how The New Glyn Valley Tramway & Industrial Heritage Trust (“the Trust”, “we”, “our”, “us”) uses and protects the personal information we collect when you use our website, make donations and other payments to us, fill out and submit our forms or communicate with us by other means, visit our museum sites or volunteer with us.
It also sets out how our website uses cookies.
The New Glyn Valley Tramway & Industrial Heritage Trust is the data controller for the personal information we collect. You can contact us by writing to us at the address shown at the bottom of this page or by emailing us at thenewglynvalleytramway@gmail.com.
We are committed to ensuring that your privacy and personal information is protected.
What Information We Collect
We typically collect the following personal information:
name and title
contact details (e.g. home address, email address, phone number)
relationship with us (e.g. member, donor, customer, volunteer, visitor, enquirer)
and then additional information specific to:
receiving donations, legacies and other payments
claiming Gift Aid
approving and administering memberships
recruiting and managing volunteers
ordering and delivering goods and services
preferred means and types of communications (e.g. phone, post, email, text message)
use of our website (e.g. IP address, country location, device type, pages visited, links followed).
We also have security cameras on our sites and inside our museum building in Glyn Ceiriog which record images of our visitors and volunteers whilst in public areas.
What We Do With The Information
We use the personal information we collect in order to properly manage our organisation and our museum sites, and to undertake our fundraising and other activities, in particular for the following reasons:
to maintain proper accounts and records [1, 3]
to respond to general enquiries [1, 4]
to administer memberships [2, 3, 4], legacies [1, 3, 4] and donations [1, 3, 4]
to make claims for Gift Aid [1, 4]
to fulfil orders for goods and services [2, 4]
to recruit and manage volunteers [1, 3, 4]
to prevent crime and to help keep our visitors and volunteers safe [1, 3]
to communicate information about the Trust, our museum, our fundraising and other activities, and related subjects which we feel might be of interest to the recipient - for members of the Trust [1, 2, 3, 4]; for all other persons [4]
to conduct statistical analyses of the use of our website [1, 4] and the demographics of our members, supporters and customers as a whole [1]
to customise our communications according to an individual's preferences, interests and relationship with us [1, 4].
The numbers shown in brackets above indicate the following legal bases for us collecting, using and storing personal information:
[1] legitimate interests
[2] performance of a contract
[3] statutory, regulatory or other legal obligation
[4] with the consent of the individual concerned.
For information and guidance on understanding these legal bases, please visit the website of the Information Commissioners Office at ico.org.uk.
Sharing Personal Information With Third Parties
Our website is hosted by Google and uses cookies from Google to deliver its services and to analyse traffic - see our Cookies Statement below. Information about your use of our website is automatically shared with Google.
We may also share some of your personal information with our preferred service providers, not for their own use but to facilitate their services to us (e.g. banking, payment processing, external audit, electronic messaging and postal services).
If you elect to Gift Aid a donation or membership subscription fee, we may share your relevant personal information to HM Government when making the claim for Gift Aid.
We will not otherwise share your personal information with third parties unless we have your consent, we are required to do so by law, we receive a lawful request by a governmental or law enforcement authority to do so, or we are assisting the police in the investigation of a possible crime.
We will not sell or license the use of your personal information to third parties.
Online Payments
We accept online payments for membership fees, goods and donations using major credit / debit / charge cards and digital wallets via payment links and QR codes that we publish.
Our chosen payment service providers to process online payments on our behalf through their respective secure internet-based payment gateways are PayPal UK Ltd (for memberships, goods and donations) and SumUp Payments Ltd (presently for donations only).
If you pay us online via PayPal, it will share with us your email address, the amount paid and currency, a unique transaction code, a time and date stamp, the payment purpose, and your name and address if (a) the payment is for membership or goods, (b) the payment is a donation and you have consented for your name and address to be shared with us or (c) the payment is a donation and you have elected to Gift Aid it. PayPal will automatically send you a payment confirmation to the email address you have registered with PayPal.
If you donate to us online via SumUp, it will only share with us the amount paid and currency; a unique transaction code; a time and date stamp; the payment purpose; the type of payment card used; and the last four digits of the payment card number. SumUp will not share with us your name and address.
Please also note that personal information provided to PayPal and SumUp may be processed on servers located outside the EEA. You can read the PayPal privacy policy here and the SumUp privacy policy here.
In-Person Card Payments
We accept in-person card payments for membership fees, goods and donations via secure payment devices at our Museum and at events we attend. This includes the use of Google Pay & Apple Pay digital wallets.
Our chosen payment service provider for processing card payments on our behalf is SumUp Payments Ltd.
When you make a card payment via one of our secure payment devices, the transaction data (including payment method, card information, geolocation, device identifier and payment purpose) are transmitted securely to SumUp for processing.
If you donate at our self-service donation point which uses a software platform provided by Give-A-Little, SumUp provide a payment summary to Give-A-Little (payment success or failure notice, the amount paid and currency, a unique transaction code, a time and date stamp and geolocation of where the donation was made) to enable Give-A-Little to provide us with an integrated reporting service.
You can read the SumUp privacy policy here and the Give-A-Little privacy policy here.
Controlling Your Personal Information : Your Rights
You can change your communication preferences at any time simply by writing to us at the address shown at the bottom of this page or by emailing us at thenewglynvalleytramway@gmail.com.
You can ask us to provide details of the personal information which we hold on you. Please submit your request to us in writing by post.
If you believe that any information we are holding on you is inaccurate or incomplete, please contact us in writing by post or by email as soon as possible. We will promptly correct any information held by us found to be incorrect.
You can ask us to restrict our use of the personal information which we hold on you, or to delete the personal information which we hold on you – provided there is not a compelling reason for us to continue to hold the information. You also have the right to object to our use of personal information on a legitimate interests basis alone, or for direct marketing. Please submit your request or objection to us in writing by post.
For further information and guidance on your personal information rights, please visit the website of the Information Commissioner's Office at ico.org.uk.
Security
We are committed to ensuring that your personal information held by us is secure. In order to prevent unauthorised access or disclosure, we have in place appropriate procedures and physical or electronic safeguards to secure the personal information we collect.
Cookies
Our website is hosted by Google and uses cookies from Google to deliver its services and to analyse traffic. Information about your use of our website is automatically shared with Google. By using our website, you agree to its use of cookies.
Cookies are small pieces of text sent to your browser by a website you visit. They help the website to remember information about your visit, like your interaction with a page or feature, your preferred language and other settings. That can make your next visit easier and the website more useful to you. Cookies play an important role. Without them, using the web would be a much more frustrating experience.
To understand the types of cookies used by Google, how Google uses the information about your use of our website, and how to manage cookies in your web browser, click here.
Third Party Websites
This privacy policy applies solely to the personal information collected, used and stored by us, it does not apply to other parties or their websites.
A number of links to other party websites (including social media pages) are provided in our website for convenience of access. We are not responsible for the privacy policies of the other parties and their websites, nor the cookie settings of their websites.
When following a link to another party’s website from our website, we strongly advise users to first review the privacy and cookie policies of the other website and be satisfied before continuing to browse and entering any personal information.
Retention
Personal information we collect and store is evaluated by us periodically to determine whether it is current and still needs to be held by us. We retain personal information only for as long as and to the extent necessary and appropriate after our relationship with a person ends. Records relating to our receipts and expenditure are retained for not less than 7 years to comply with our statutory and legal obligations. Security camera images are stored for not more than 30 days except where a possible crime is being investigated.
Making A Complaint
We aim to comply fully with our obligations under the data protection and privacy laws of the United Kingdom. If you believe that our processing of your personal information, or your receipt of electronic unsolicited direct marketing from us, is not in accordance with those laws or has in some way caused you damage or distress, please write to us setting out the detail of your complaint. We will endeavour to address the matter to your satisfaction and in a timely manner.
You may also complain to the Information Commissioner's Office, the authority for compliance with the data protection and privacy laws of the United Kingdom. Visit its website at ico.org.uk for details on how to complain.
Changes
We may change this privacy policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes. This privacy policy was last updated on 24 January 2025.