Victoria Gallery & Museum Privacy Statement

The purpose of this policy is to explain how the Victoria Gallery & Museum will collect and use (process) your personal data, what rights you have in relation to that data and to provide transparency about the data collected about you.

Who will own your data once you submit it?

The University of Liverpool will own the data that you submit.

What do we do with your data? 

The University shall use and take care of any personal information you supply as described in its data protection policy, a copy of which can be seen in accordance with data protection legislation.  

The University will collect your information and use it fairly and in accordance with its legitimate interests. These may include, yet are not exclusive to: 

  • Marketing purposes; where you have previously opted in to marketing messages. This could include informing you of new events or activities at or related to the University’s Libraries, Museums and Galleries and any offers discounts or other promotional communications; 
  • To invite you to provide feedback or take part in optional surveys or competitions;  
  • To improve and tailor our services and activities based on visitor information;  
  • The collection and/or retention of information which the University may use for health and safety, surveying, analysis, statistical and/or archival purposes. 

You can opt-out of all or specific communication types at any point. Please use the unsubscribe link in any emails sent to you or email 

How do we obtain your data and what allows us to use your data? 

The University will collect data about you during booking/registration processes, visits, and email signup. These data will either be provided directly by you with your consent or, where your data is passed to us via a third party (e.g. Eventbrite), the data we hold will reflect what you have provided and agreed to share with us as part of your agreement with that third party. 

With whom might we share your data within the University? 

The University shares and processes your data in accordance with its legitimate interests. All members of the University who process or use your personal information follow the University’s Data Protection Policy, and regular information security training is provided by the University to all those with access to your personal data. Further information and a copy of the Policy can be found at 

Do I have to provide this information and what will happen if I don’t?

In certain situations, you may be required to provide information in order to fulfil the requirements of a booking. Only essential information will be compulsory. 

How will my information be stored?

User data will be stored in a secure mailing system.

How long will you keep this data for and why?

We will maintain a stakeholder record until such time as you notify us that you longer wish us to keep in touch. In this instance, we will delete the majority of the personal data that we hold for you and unsubscribe you from our mailing list, but will maintain basic personal data to ensure we do not inadvertently create a new record in the future.

Your personal data rights 

Under the UK General Data Protection Regulation, you may have the following rights with regards to your personal data:

  • The Right to subject access – you have the right to see a copy of the personal data that the University holds about you and find out what it is used for.
  • The Right to rectification – you have the right to ask the University to correct or remove any inaccurate data that we hold about you.
  • The Right to erasure (right to be forgotten) you have the right to ask the University to remove data that we hold about you.
  • The Right to restriction – you have the right to ask for your information to be restricted (locked down) on University systems.
  • The Right to data portability – you have the right to ask for your data to be transferred back to you or to a new provider at your request.
  • The Right to object – you have the right to ask the University to stop using your personal data or to stop sending you marketing information, or complain about how your data is used.
  • The Right to prevent automated decision making – you have the right to ask the University to stop using your data to make automated decisions about you or to stop profiling your behaviour (where applicable).

Please note that not all rights apply in all situations. To find out more about your rights under the UK GDPR, please visit the Information Commissioner’s website.

To request a copy of your data or ask questions about how it is used, contact:

Dan Howarth, Data Protection Officer

  • Email:
  • Post: Legal & Governance, University of Liverpool, Foundation Building, 765 Brownlow Hill, Liverpool L69 7ZX

Who can I complain to if I am unhappy about how my data is used?

You can complain directly to the University’s Data Protection Team by writing to:-

  • Dan Howarth, Data Protection Officer
  • By email:
  • Post: Legal & Governance, University of Liverpool, Foundation Building, 765 Brownlow Hill, Liverpool L69 7ZX

You also have the right to complain to the Information Commissioner’s Office using the following details:

  • The Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
  • Telephone: 08456 30 60 60 or 01625 54 57 45
  • Website:

Changes to the Privacy Statement 

In the interests of transparency, the University may amend this Privacy Statement from time to time. Any significant changes to the Statement or to the way we treat your data will be communicated to you in writing. 

Back to: Victoria Gallery & Museum