Data Protection Policy

Effective Date: 01/01/2025
Last Updated: 01/05/2025

At Model Britain Ltd, we take your privacy seriously. This Data Protection Policy outlines how we collect, use, store, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Model Britain Ltd operates www.modelbritain.co.uk — a cultural attraction based in the United Kingdom. For the purposes of data protection law, we act as the Data Controller.

Company Details:

Name: Model Britain Ltd
Email: info@modelbritain.co.uk
Address: [TBA]
ICO Registration Number: [TBA]

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: Full name, title, date of birth
Contact Data: Email address, phone number, postal address
Transaction Data: Purchase history, payment details (processed securely via third-party providers)
Technical Data: IP address, browser type, cookies, and log files
Marketing Preferences: Communication consents and subscription status
Visitor Data: CCTV footage (onsite only), ticket bookings, and visitor records

3. How We Collect Your Data

We collect your personal data when:

You visit or interact with our website
You contact us via phone, email, or web forms
You book tickets, request information, or enquire about sponsorship
You sign up for newsletters or marketing communications
You attend Model Britain events or visit our attraction

4. Why We Use Your Data

Your data is used to:

Process bookings and manage visitor services
Respond to enquiries and provide customer support
Send you updates, newsletters, and marketing (with your consent)
Ensure the security of our premises and website
Comply with legal and regulatory obligations

5. Legal Basis for Processing

We process personal data based on one or more of the following lawful grounds:

Consent – for email marketing and optional cookies
Contract – to fulfil ticket bookings or other service agreements
Legitimate Interests – to improve our services, prevent fraud, and enhance user experience
Legal Obligation – for regulatory or tax purposes

6. Sharing Your Data

We only share your personal data with trusted third parties necessary to operate our business:

Payment Processors: Stripe, PayPal
Email Platforms: Mailchimp or similar providers
Analytics Services: Google Analytics
IT & Web Support: Developers and hosting partners
Legal Authorities: Only if required by law

We will never sell your personal data.

7. How Long Do We Keep Your Data

We retain data only as long as necessary:

Marketing Data: Until you opt out or withdraw consent
Transaction Data: 6–7 years for accounting and tax compliance
General Enquiries: Up to 12 months unless a longer relationship is established

8. Your Rights

Under UK GDPR, you have the right to:

Access your personal data
Request corrections to inaccurate or incomplete data
Request erasure (“right to be forgotten”)
Restrict how we process your data
Object to certain processing (e.g., direct marketing)
Request data portability

To exercise any of your rights, contact us at info@modelbritain.co.uk.
If you are unsatisfied, you can lodge a complaint with the Information Commissioner’s Office (ICO):
🔗 www.ico.org.uk

9. Data Security

We implement robust security measures including:

Encrypted communications (SSL/TLS)
Secure payment gateways
Role-based data access
Regular website security updates

10. International Data Transfers

If we transfer data outside the UK or EEA, we ensure:

Adequacy decisions are in place
Standard contractual clauses are used
Appropriate safeguards are enforced with service providers

11. Cookies

We use cookies to improve your browsing experience. For details, please see our [Cookie Policy].
You can manage your cookie preferences through our banner or browser settings.

12. Updates to This Policy

We may update this policy from time to time. Any changes will be published on this page. Where significant, we’ll notify you via email or on our website.