1. Privacy Statement
1.1 Fireground is committed to protecting the privacy and personal information of everyone who interacts with us, including Trustees, members, employees, volunteers, visitors and users of our website or other online services. We aim to fully comply with appropriate law and best practice when processing or managing such information. We will ensure that all Fireground staff and volunteers are fully conversant and trained in these obligations and take all steps to minimise risk to persons with whose personal data we are entrusted.
1.2 This Policy document should be read in conjunction with the Museum’s related documents, viz:
(i) Access Policy
(ii) Membership, Volunteering and Staffing Policy
(iii) Safeguarding Policy
2. Who we are
2.1 Fireground is the operating name of the museum governed by Greater Manchester Fire Service Museum Trust, (Charitable Incorporated Organisation no. 1189175). The Museum registered address is :
Maclure Road
Rochdale
OL11 1DN
3. About this Policy
3.1 This Policy explains why and how Fireground collects, uses, stores and protects personal information, what we use it for, to whom it may be provided and the legal bases on which it does this.
3.2 It applies to any personal information collected through our website, ticketing and mailing systems, employment, membership, volunteering, donations, correspondence and research enquiries, or any other interaction with Fireground.
3.3 It also details the rights of individuals providing such data and actions they can take in case of any complaint.
4. Data Protection Law
4.1 Fireground processes personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, together with any subsequent legislation that amends or replaces them.
4.2 The Information Commissioner’s Office (ICO) is the UK’s independent supervisory authority for data protection. The ICO’s guidance confirms that organisations should provide clear information about why personal information is collected, the lawful basis for processing, who it is shared with, how long it is retained and the rights available to individuals.
4.3 Data Protection laws state that personal data must :
(i) Be processed fairly and lawfully
(ii) Be obtained only for specific, lawful purposes
(iii) Be adequate, relevant and not excessive
(iv) Be accurate and kept up to date
(v) Not be held for any longer than necessary
(vi) Be processed in accordance with the rights of data subjects
(vii) Be protected in appropriate ways
5. Definitions
5.1 For the purposes of this Policy, “Fireground,” “the Museum,” “we” or “us” means:
Fireground
Maclure Road
Rochdale
OL11 1DN
5.2 “Data subject” means any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.
5.3 “Personal data” means data held either on a computer or in a paper-based filing system which relates to a living individual who can be identified from that data.
5.4 “Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
5.5 “Consent” implies any freely given, specific, informed and unambiguous indication of the data subject’s wishes where he or she, by a statement or by clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
5.6 “Employees” means paid staff, Trustees, members and volunteers.
5.7 Fireground is the “data controller” for the personal information we process, unless otherwise stated.
6. Lawful Bases
6.1 The UK GDPR requires Fireground to have a lawful basis or ground in order to process personal data. The appropriate basis depends on the nature and purpose of the processing, but may include one or more of the following :
(i) Primary Purpose (the museum’s original, specific and explicit reason for collecting and processing an individual’s personal data, such as object donation)
(ii) Consent (when we will seek consent to use personal information, e.g. for notifications)
(iii) Contract (where this is necessary to enter into a contract with the person, such as ticketing, employment etc)
(iv) Legal Obligation (where this is necessary for Fireground to comply with a legal obligation such as employment, tax, health and safety etc)
(v) Legitimate interests (such as security, defending legal rights etc; such processing must be appropriately balanced against the rights and freedoms of individuals)
(vi) Public task (where this is necessary in the public interest)
(vii) Vital interests (in exceptional circumstances where necessary to protect an individual’s vital interests)
(viii) Special category information (such as voluntarily provided health or accessibility information in order to make reasonable arrangements to support an employee or visitor; this category subject to additional protection under law)
7. Why We Collect
7.1 Fireground needs to know basic personal data in order to administer our activities.
7.2 We will only collect sufficient personal data from you that we need in order to carry out any particular activity.
7.3 We use personal data in a variety of ways, depending on the relationship we have with an individual. This can include, for example :
(i) Communication
(ii) Fulfilling requests or agreements, such as processing membership
(iii) Processing sales transactions, donations or other payments
(iv) Record keeping, such as for health and safety, security and insurance purposes
8. How we collect
8.1 Information is primarily collected during interactions with correspondents, visitors, donors or employees, which will have been provided voluntarily by that individual.
9. What we collect
9.1 Unless otherwise agreed, we will only collect basic information about an individual, as in the following category examples :
(i) General Visitors : Payment transaction information, necessary access requirements (where voluntarily provided), partial address or demographic information as part of a survey (where voluntarily provided)
(ii) School or Group Visits : Information limited to contact or payment details, organiser’s name etc (details of individual visitors or children are not recorded)
(iii) Research Enquiries : Name and contact details, any other personal information provided voluntarily (if relevant to the enquiry)
(iv) Employees : Names, addresses, contact details, emergency contact details
(v) Website Users : Names, addresses, IP address, email or other contact details as appropriate to the specific use of the site (eg enquiries, donations, research, sales)
(vi) Oral History : Any personal information voluntarily provided during the course of an oral history interview, contact details, photograph etc. (consent form required)
(vii) Room Hire : Organiser’s contact details, payment information
(viii) Donors (monetary): Necessary personal and financial details in order to facilitate transactions and acknowledge donor
(ix) Donors and Lenders (collection) : Name, address, contact details, signatures, relevant background information regarding the object in order to meet the Museum’s primary objectives and collections care needs
9.2 We will not collect “special category” (or sensitive personal) date unless specifically agreed and necessary in a particular case.
10. Information from Other Sources
10.1 We may receive personal information from sources other than the individual concerned, including:
Schools and educational organisations
Group organisers
Event partners
Donors and lenders
Publicly available sources
Contractors and service providers
Professional advisers
Partner organisations
Public authorities
Other organisations where this is lawful
10.2 Where required, we will provide appropriate privacy information explaining the source and use of the information. The ICO recommends that organisations explain where personal information was obtained from when it was not collected directly from the individual.
11. How We Use Information
11.1 Personal information may be used for various purposes in order to provide or support core museum or visitor services, including :
Admissions and ticketing
Donations (collection or financial)
Exhibitions and events
Educational service
Responding to enquiries or correspondence
Managing employees
Historical research
Fundraising
Website and other digital services
Feedback or surveys
Security and crime prevention
Working with partners
Communications
Compliance with legal obligations
Complaints
12. How Long We Keep Personal Information
12.1 We will retain personal information only for as long as is reasonably necessary for the purpose for which it was collected, unless a longer period is required or permitted by law.
12.2 Any information obtained in connection with legitimate museum, archival or historical purposes may be retained for longer periods or indefinitely (see also Section 15).
12.3 Where there is no fixed retention period, we will determine retention by considering the nature and sensitivity of the information, the purpose for which it was collected, legal and regulatory requirements and whether there is an ongoing legitimate need to retain it
12.4 The ICO requires privacy information to explain either the retention period or the criteria used to determine how long personal information is retained.
13. Data Security
13.1 Fireground takes a responsible approach to data security and will take all reasonable and appropriate measures to protect personal information against unauthorised access, unauthorised disclosure, loss or destruction.
13.2 Access to personal information is limited to people having a legitimate reason to access it.
14. Who We Share Personal Information With
14.1 Where necessary and lawful, Fireground may share personal information with employees, IT providers, payment service providers, auditors, Government departments and regulatory or law enforcement bodies.
14.2 We require organisations processing personal information on our behalf to provide appropriate contractual and security safeguards.
14.3 We do not sell or provide personal information to third parties unless with an individual’s prior consent.
15. Collections and Archives
15.1 In connection with its primary purpose as a museum, Fireground may hold information about individuals – whether living or deceased – as part of its collections, archives, historical records, research materials and associated documentation.
15.2 This may include names, images, biographies, correspondence, audio recordings, historical documents or other records.
15.3 Fireground will handle all such information responsibly, sensitively and in accordance with appropriate legal requirements.
16. CCTV
16.1 CCTV is in use around the Fireground site for purposes of safety. security, crime prevention and detection, incident investigation and the protection of people and property.
16.2 CCTV footage may include identifiable images of visitors, staff, volunteers, contractors and other individuals who enter areas covered by cameras.
16.3 Appropriate signage will be used in areas where CCTV operates.
16.4 CCTV recordings will only be retained for as long as reasonably necessary for the purposes for which they were collected, subject to any need to preserve footage for an incident, investigation, legal claim or law-enforcement request.
16.5 CCTV images may be disclosed to the police, emergency services, insurers, legal advisers or other appropriate parties where this is lawful and necessary.
17. Photography and Filming
17.1 Photography and filming may occasionally take place at Fireground for official or museum purposes, including:
(i) Recording museum activities and events
(ii) Documenting exhibitions and programmes
(iii) Publicity and promotional activities
(iv) Educational and historical purposes
(v) Social media and website content
(vi) Press and media coverage
17.2 Fireground will take all steps to ensure this is not intrusive or disturbing to visitors.
17.3 Visitors will generally be informed where photography or filming is taking place, where appropriate, and respect the wishes of those who do not want to be include in images or recordings intended for publication
17.4 There may be circumstances where photographs form part of a wider public scene or event and it may not be practical to identify or obtain consent from every individual. Fireground will consider the circumstances and applicable data protection and privacy requirements when using such material.
17.5 Photography or filming at Fireground by visitors, for personal use, is generally welcomed but those taking such images must be respectful of people close by, particularly children or vulnerable persons, and adhere to Fireground Safeguarding Policy.
18. Website technologies and cookies
18.1 Our website uses one cookie, which is necessary for the site to work. It is needed when you use our enquiry form and protects the form against automated abuse. It contains no information about you, is not used to track you, and is deleted when you close your browser.
18.2 We do not use cookies for advertising, marketing or website analytics and we do not share Information about your visit with third parties.
18.3 Because we place nothing on your device that requires your permission we do not show a cookie consent banner.
18.4 Some pages contain links to other organisations' websites, such as Tripadvisor, Google Maps and PayPal. Those sites set their own cookies and have their own privacy policies, which will apply once you follow the link.
19. Marketing and Communications
19.1 Fireground does not retain any personal information of general visitors.
19.2 The following is shared by means of social media, any personal, identifiable information will only be published with prior consent :.
(i) Museum news;
(ii) Exhibitions. events and activities;
(iii) Fundraising;
(iv) Educational programmes;
(v) Appeals
(vi) Other information about Fireground.
20. Automated Decision-Making and Profiling
20.1 Fireground does not currently use personal information to make solely automated decisions that may have legal or similarly significant effects on individuals.
21. Data Protection Rights
21.1 Depending on the circumstances and applicable law, a Data Subject has the right to:
(i) Request a copy of the personal information we hold about you and why
(ii) Request us to correct inaccurate or incomplete information
(iii) Request us to erase your personal information
(iv) Request us to restrict how we process your information
(v) Object to certain processing
(vi) Object to direct marketing
(vii) Request the transfer of certain information to the Data Subject, or another organisation
(viii) Withdraw consent where processing is based on consent
(ix) Raise a complaint with the Information Commissioner’s Office
These rights are not absolute and may be subject to legal conditions and exemptions. Which rights apply can depend on the lawful basis we rely on and the circumstances of the processing.
21.2 The Museum will always verify the identity of anyone making a subject access request before handing over any information.
21.3 Upon receipt of a written request, the Museum will arrange for you to see or hear all personal data held about you within 40 days
22. How to Exercise Your Rights
22.1 To exercise any of your rights, please contact:
Data Protection Contact
Fireground
Maclure Road
Rochdale
OL11 1DN
Email:
Telephone: 01706 341219
Please provide enough information for us to identify you and understand your request.
23. Complaints
23.1 If you have concerns about how Fireground has handled your personal information, we would encourage you to contact us first so that we can investigate your concerns.
23.2 You also have the right to complain to the Information Commissioner’s Office (ICO), which is the UK’s independent supervisory authority for data protection.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Email:
Website: ico.org.uk
24. Data Breaches
24.1 Fireground has procedures for identifying, assessing, managing and responding to personal data breaches.
24.2 If a personal data breach occurs, we will assess the incident and take appropriate action in accordance with applicable data protection law.
24.3 Where required by law, we will notify the ICO and affected individuals within the applicable timescales.
25. Changes to Data Protection and Privacy Policy
25.1 We may update this Policy from time to time to reflect changes in our activities, the personal information we process, data protection legislation or regulatory guidance.
25.2 The ICO recommends reviewing and updating privacy information when necessary, particularly before introducing new processing activities.
26. Contact Us
If you have any questions about this Data Protection and Privacy Policy, or how Fireground handles personal information, please contact :
Data Protection Contact
Fireground
Maclure Road
Rochdale
OL11 1DN
Email:
Telephone: 01706 341219
- Document approved by
- Greater Manchester Fire Service Museum Trust
- Approval date
- 27th August 2026
- Review frequency
- At least annually and whenever there is a significant change to processing activities or applicable data protection law
- Effective date
- 1st September 2026
- Last reviewed
- n/a
- Next review
- 1st August 2027
