Privacy Notice: Photo, filming and comments permissions

Looking after your personal information is very important to us, and we want you to be confident that your personal data is kept safely and securely.

Eureka! The National Children’s Museum (“Eureka!”) is committed to complying with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Eureka! will be what is known as the ‘Data Controller’ for the personal data visitors provide to us.

We have published this notice to help you understand:-

  • how and why Eureka! collects information from you/your child;
  • who we share your/your child’s information with, why and on what basis; and
  • what your/your child’s rights are.

What information we gather and how and why we use it

What How Why Legal Basis*
Photos, filming and comments During your visit to Eureka! and/or at pre-arranged photo/film shoots. To publicise events or announcements, in newspaper articles, magazines and other media such as television or radio broadcasts, websites, social media, information leaflets, electronic newsletters and presentations. Consent


* Explanation of legal basis for processing

Consent: where you have provided your consent for us to use images for advertising and communication purposes. You can withdraw your consent at any time by contacting us at the address below.

Keeping your information safe and up-to-date

Eureka! is committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect.

We will store these images securely for five years before either deleting them or contacting you to renew consent for another five years. Any images already released in the public domain during this time may continue to be used and circulated by ourselves or third parties.

We will not share your information with anyone other than:

  • our approved Data Processors, who are fully compliant with General Data Protection Regulations (GDPR), and who will only process your data in accordance with this privacy notice.
  • publications, broadcast media, and on websites of an appropriate nature.

We will not transfer your personal information to a country or territory outside the EEA (European Economic Area) unless that country or territory ensures an adequate level of protection for the rights, and freedoms of data subjects in relation to the processing of personal data. In the unlikely event that personal data needs to be transferred outside the EEA, your personal information will be anonymised.

The organisation may also share your data with third parties in the context of a sale of some or all of its business. In these circumstances the data will be subject to confidentiality arrangements.

We will not use your personal data for marketing purposes without your express consent.

Automated decision-making

Automated decision-making occurs when an electronic system uses your personal information to make a decision without human intervention. Eureka! does not make any decisions based on automated decision-making.

Your rights

You have the right to:

  • Request access to your personal information
    This is usually known as making a data subject access request and it enables you to receive a copy of the personal information we hold about you.
  • Request rectification of your personal information
    This enables you to have any inaccurate or incomplete personal information we hold about you corrected.
  • Request the erasure of your personal information where there is no compelling reason for its continued use – although this may prevent us from providing a service.
  • Restrict the processing of your personal information
    This enables you to ask us to suspend the processing of your personal information e.g. if you contest its accuracy and so want us to verify its accuracy.
  • Object to the processing of your personal information
    This enables you to ask us to stop processing your personal information where we are relying on the legitimate interest of the organisation as our legal basis for processing and there is something relating to your particular situation which makes you decide to object to processing on these grounds.
  • Data portability
    This gives you the right, in specific circumstances only, to request the transfer of your personal information to another party so that you can reuse it across different services for your own purposes.

If you would like to exercise any of these rights, or for any other data protection queries, please contact us at:

Data Compliance Manager
Eureka! The National Children’s Museum
Discovery Road

Changes to this privacy notice

We will keep our privacy policy under regular review and we will place any updates on our website. This policy was last updated on 15 May 2018.

Eureka! The National Children’s Museum
Discovery Road, Halifax HX1 2NE. Map