Haverfordwest Heritage Privacy notice.

Haverfordwest Heritage ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 where applicable, and amendments introduced by the Data (Use and Access) Act 2025.

Introduction

Haverfordwest Heritage is the data controller responsible for your personal data. If you have any questions about this Privacy Notice or our data protection practices, please contact us at:

Haverfordwest Heritage
c/o Haverhub, 12 Quay Street
Haverfordwest
SA61 1BG

info@haverfordwestheritage.co.uk

01437 925915

Data Controller

We may collect and process the following personal data about you. The type of data, and the specific forms of data we collect will depend on your relationship to us. We will only collect the data that we need in order to fulfil the purpose intended.

• Identity Data (e.g. name, date of birth, gender).

• Contact Data (e.g. address, email address, phone number).

• Financial Data (e.g. bank account details, payment card details).

• Transaction Data (e.g. details about payments to and from you).

• Technical Data (e.g. IP address, browser type, and version).

• Profile Data (e.g. your interests, preferences, feedback, and survey responses).

• Usage Data (e.g. information about how you use our website, products, and services).

• Marketing and Communications Data (e.g. your preferences in receiving marketing from us and your communication preferences).

What Data We Collect

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To perform a contract: Processing necessary for the performance of a contract with you.

• To comply with a legal obligation: Processing necessary to comply with a legal obligation.

• For our legitimate interests: Processing necessary for our legitimate interests (or those of a third party) and where your interests and fundamental rights do not override those interests.

• For recognised legitimate interests: Where UK data protection law permits this for limited public-interest purposes such as safeguarding, crime prevention, emergencies, public security, national security or defence, or certain sharing with organisations carrying out public tasks.

• With your consent: Where you have given clear consent for us to process your personal data for a specific purpose.

 How We Use Your Data

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

Data Security

If we transfer personal data outside the United Kingdom, we will only do so where permitted by UK data protection law and where appropriate safeguards are in place.

International Transfers

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods for different aspects of your personal data are available in our Data Protection Policy.

Data Retention

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

• Request access to your personal data.

• Request correction of your personal data.

• Request erasure of your personal data.

• Object to processing of your personal data.

• Request restriction of processing your personal data.

• Request transfer of your personal data.

• Right to withdraw consent.

If you wish to exercise any of the rights set out above, please contact us.

Your Legal Rights

Data Protection Complaints

If you are unhappy with how we have handled your personal data or responded to a request about your data protection rights, you can make a data protection complaint using the contact details in this notice. We will acknowledge your complaint within 30 days, investigate it without undue delay, and explain the outcome. You also have the right to complain to the Information Commissioner’s Office.

Cookies and Electronic Marketing

Where we use cookies, website analytics, embedded content or electronic marketing tools, we will provide clear information and obtain consent where required. You can withdraw consent or object to direct marketing at any time.

We may update this Privacy Notice from time to time. Any changes we make will be posted on this page, and where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Notice.

Changes to This Privacy Notice

Contact Us