Museum of Chelmsford Privacy Policy

Privacy policy

Your privacy is very important to Chelmsford City Council, as it is to you. We are committed to respecting and protecting your privacy when you interact with us and use our services and venues.  We want you to feel confident that we are serious about any concerns surrounding the security and safeguarding of your personal information (data).   

This policy is about what we are doing with your personal data and our promises to you. 

It will explain: 

• Who we are 
• How and why we collect it 
• How we will use it 
• How we will store it 
• Who we will share it with 
• How you can access and control it   
• Any other rights you have   

We may amend this policy at any time to ensure that we are keeping up to date with the latest legislation.   

We promise to act in accordance with the rules set out in the Data Protection Act 2018 and the General Data Protection Regulation (GDPR) in how we gather and use your personal information. 

When you see “we”, “us”, “our” or “the Council” this means Chelmsford City Council. 

1. Who we are

Chelmsford City Council is a legal body responsible for certain services that the Government requires us to provide (statutory services), as well as optional services designed to cater for local needs (discretionary services).  

The Council maintains a balance between essential services and other services that local people want, using Government funding and other income sourced from grants and through providing services to the public. 

We provide online information about our services and venues through various websites, social media accounts and apps owned and/or operated by us. 

Our registered address is Civic Centre, Duke Street, Chelmsford, Essex, CM1 1JE.  

2. Personal information that we collect about you 

Chelmsford City Council collects information about you in various ways. 

If you are a parent or guardian of a child who is under 13 years old, we may process limited personal information about you so that you can give consent for the child to access some of our services and venues.  We may use your contact details to communicate to you on their behalf.  

2.1 Information you provide to us: 

• Register, apply and/or pay for a statutory and/or discretionary product, goods and/or service provided by us; 
• Enter into an agreement or contract with us, where you supply us, or we supply you, with a product, goods and/or service; 
• Contact us to request assistance, provide feedback, make a comment and/or complaint. 

The amount and type of information that we collect, as well how long we hold it for, depends on the type of product, good or service. 

2.2 Information we collect about you: 

When you visit our website(s) we may collect information about your computer.  This includes your IP address (a set of numbers that identifies each computer or other network device using the internet), information about your visit and how you used the website (such how you landed on our website, the individual pages you visited, the order in which you visited the pages, how long you were on each page and if you used the search function). You can read more about this in our Cookie Policy. 

When you visit and use our venues including Leisure Centres (Riverside Leisure, Chelmsford Sport and Athletics Centre, South Woodham Ferrers Leisure Centre and Dovedale Leisure Centre), Chelmsford Theatres, Museum of Chelmsford, Hylands Estate and Parks, we may also capture some information. The amount and type of information we hold on you in our booking and ticketing systems depends on what activities and services you have requested from us, but may include name, address, date of birth, home/mobile/work telephone numbers, email addresses, medical conditions (particularly for sports lessons, courses and use of gym and fitness facilities), and bank details (such as for direct debit payments). 

When you complete any contact forms requesting assistance or a service, you might be asked to provide contact information as well as details on any issues, problems or the type of help you need.  The amount of information required will be dependent on the service you require.  

When you complete any consultation, such as online or printed surveys or feedback forms, the data from your responses may be used for analysis and research purposes. This includes the use of geo-demographic information (such as your postcode, gender and age).   

2.3 Information we receive from others about you: 

We may receive information about you from other organisations or agencies that we work with. This includes partner organisations, government bodies and service providers. This may be combined with other information you provided us with, to help improve our service to you. 

3. Using your personal information 

3.1 To action your requests or contact you 

The Council is legally allowed to contact you, even if you do not provide us with permission for marketing purposes, if it is about: 

• a statutory or legal service (such as Council Tax, benefits and housing);  
• an agreement, contract or licence (including leisure memberships, environmental permits, parking permits, alcohol licensing, vehicle licensing and animal licensing);  
• a booking (such as an activity, course, seminar, show or event);  
• an application (such as pest control, planning control, building control or employment);  
• any correspondence (such as letter, form, email or web form) or contact (such as call, voicemail, text and online content or message) we receive from you or any comment or complaint you make about the Council’s services;   
• or other services that you or your child (if under 16 years old) have asked us to provide you with. 

When we do so, it will be in accordance to this policy and the legislation previously mentioned. 

3.2 For marketing purposes 

We don’t want to lose our ability to contact you for marketing purposes, however you have the right to tell us: 

• How you want to be contacted  
• What you want to be contacted about 
• That you have removed your permission for us to contact you 

Don’t forget you can change your mind at any time.    

There are lots of good reasons for giving us permission to contact you.   

• By telling us exactly what you are interested in (such as Sports, Museums, Theatre, Hylands Estate, Events, Recycling and Elections), we can tailor our information to make it relevant to you.  We understand everyone is busy and not always aware of what’s going on, so we would love to be able to keep you updated.   
• By giving us your permission, we can contact you when we are making changes or improvements to our pricing, programming (activities, courses, workshops, shows and/or events) and services on offer; when we have exciting news and of course when we have special offers, promotions and discounts to save you money!    
• We may also invite you to get involved in surveys or consultation opportunities to help us shape our services for the future. 

In addition, we may use your information to help improve our communication and services that we provide.  

• Information gathered when you use our website(s) helps us make improvements to the navigation (how you move through the website) and content (information on the pages), so that you can easily find the right information whether you visit us online using a desktop PC, laptop, tablet or mobile phone. 
• Information gathered when you use our social media site(s) such as Facebook, Twitter and Instagram, help us to understand whether our posts are engaging and of interest to you, and to ensure we are effective in targeting the right messages to the right people.  
• Information gathered when you receive our email newsletters around email opening and clicks, using industry standard technologies to help us monitor and improve its performance.

4. Sharing your personal information 

We will never sell your data, however we may share some of your personal information with third parties, for the following reasons: 

• To help prevent fraud, we may share your information with Government departments and schemes (such as Department for Work and Pensions, HM Revenue and Customs and the National Fraud Initiative); as well as credit reference agencies and other companies for use in credit decisions.  These searches may be recorded by credit agencies but will not affect your credit standing.  
• To pursue people or companies who owe us money, we may share your information with debt collection agencies. 
• Business partners, suppliers and sub-contractors in the process of delivering any contract we enter with them or you. 
• If we are required to obtain additional professional or legal advice on a matter relating to you. 
• Analytics and search engine providers that assist us to improve and optimise the performance of our websites and social media accounts.  The information provided for this would in an aggregated and anonymised statistical format where an individual cannot not be personally identified. 
• To determine whether a grant or funding from a Government or other local, regional or national organisation (such as Sport England and National/Heritage Lottery Fund) has been successful in achieving its targets and goals.  The information provided for this would in an aggregated and anonymised statistical format where an individual cannot not be personally identified. 

5. Storing your personal information 

We will take all reasonable steps to ensure we keep your details safe, secure and used in accordance to this policy.  We will use strict procedures and security features to prevent unauthorised access to your information. 

While we will do our best to protect your personal information, there may be a situation that happens outside of our control that may affect you based on access to your data.  We promise to act promptly and in accordance with the rules set out in the Data Protection Act 2018 and the General Data Protection Regulation (GDPR) to ensure any impact on you is minimised.   

6. Your Rights  

6.1 To see what information we hold on you 

You have the right to access personal information held about you by us.  Any access requests are free of charge. 

If the information we hold about you is inaccurate you have a right to have this corrected and you have the right to request completion of incomplete data. 

You have the right to request the erasure of your personal data in certain circumstances (‘right to be forgotten’). 

You have the right to request that we stop, or restrict the processing of your personal data, in certain circumstances. Where possible we will seek to comply with your request, but we may be required to hold or process information to comply with a legal requirement. 

You can make any of these requests by emailing ir@chelmsford.gov.uk       

If you are dissatisfied with how the council have used your personal information you have a right to complain to the Information Commissioner’s Office at casework@ico.org.uk 

6.2 For marketing purposes 

You have the right to change your mind about what you are interested in and we want to make this as easy as possible for you to do.  The exception to this is explained in section 3.1. 

You can control how and what we contact you about for marketing purposes by using the forms on www.chelmsford.gov.uk/mychelmsford or by clicking the unsubscribe button on our e-newsletters.  The forms held here allow you to sign up to receive e-marketing, change your mind about what you are interested in (by changing your preferences), or even remove your permission completely (unsubscribe).   

Each person, including children (under 13 years old), needs to have a separate sign up to form completed as the information sent out (such as through electronic newsletters or emails) will be tailored to that person.  However, a parent or guardian can use their own email address when completing a child's form so that they receive the information on their behalf.  

Please remember that we would never contact you to ask for any login details or account passwords.  Please do not give out this information if you receive any emails or calls from someone saying they are from the Council and asking for it.   

If you have any concerns that any of your accounts have been compromised (such as someone finding your password), please get in touch with us straight away.  Do not provide us with your password – we will only require your name for us to reset your account.  

Data Protection Officer 

Our designated Data Protection Officer is John Breen. You can contact him by emailing ir@chelmsford.gov.uk  

Additional rights 

Our websites and social media accounts may, from time to time, include links to and from websites or social media accounts owned and operated by our partner, funding or accreditation organisations.  If you choose to follow one of these links, you need to be aware that they have their own privacy and/or cookie policies and we do not accept any liability or responsibility for these.  We encourage you to check their policies carefully before you choose to use them.  If you choose to submit any of your personal information to them, you do so at your own risk. 

Our website uses cookies to help distinguish you from other users of our website.  These cookies help us to provide you with an easier and more enjoyable online experience when you visit us.  They give us information on how you are using our website, such as the pages you are visiting and how long you are spending on them.  This is important to us as it allows us to make improvements (such as adding more relevant information on pages people are having problems with) and to tailor the information that you see and use based on your viewing history.  You can adjust the settings on your browser to prevent cookies from accessing your data, but in choosing to do some of the services and functions on our websites may not work properly. 

Privacy Notices for our range of services 

Our different services collect, process and share information in different ways. You can view a list of all our Privacy Notices. You can also view our cookie policy.

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026