FACT is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website or our services, then you can be assured that it will only be used in accordance with this Privacy Policy. FACT may change this Policy from time to time by updating this page. This Policy was most recently updated on 29 May 2024.

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We only collect the information that is necessary to carry out our business, provide the particular service you’ve requested and to keep you informed. There are occasions when you can choose not to give us certain information.

We collect, use, store and transfer different kinds of personal data about you.
The type of information we collect depends on where and when it is gathered.

• Identity Data includes prefix, first name, maiden name, last name, username or similar identifier, name of partner/spouse, marital status, title, date of birth, photograph and gender. For donations we also collect any other details provided by the donor/.

• Contact Data includes billing address, city or places of residence, email address and telephone numbers.

• Financial Data includes bank account and payment card details. Please note, we will not hold payment information for any longer than it takes to process your transaction.

• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us

• Technical Data includes internet protocol (IP) address and your login data.

• Cookies: for further information about Cookies, please see below.

• Usage Data includes information about how you use our website, products and services.

• Marketing and Communications Data includes your preferences in receiving direct marketing from us and our third parties and your communication preferences.

We will also collect information and personal data that you voluntarily give when you contact us with enquiries, complaints, comments or other feedback.

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

Sometimes we may need to collect Special Categories of Personal Data about you such as dietary requirements or accessibility requirements for our facilities and events.

Third-Party Organisations

Please note Stripe and SumUp are FACT Liverpool’s card acquirer for all card payments online and in gallery. Stripe and SumUp are independent Data Controllers in respect of the Data Subject’s Personal Data. For more information on Stripe and SumUp, you can view their privacy notices online.

Social Media

Depending on your settings or the privacy policies for social media and messaging services like Facebook, Instagram, TikTok or X, you may give us permission to access information from those accounts or services.

Data Hygiene

It is important that the personal data we hold about you is accurate and current.

From time to time, we will contact you via our mailing list to confirm the data we hold is accurate.

If you fail to provide personal data

Although it is not compulsory to provide all of the information listed below, should you choose not to, then we may not be able to provide you with the full range of services that we have to offer.

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.

We use different methods to collect data from and about you.

Generally, we collect your information when you decide to interact with us. This could include purchasing tickets online or in person, or it could be where you sign up to receive emails from us. We also look at how our audience use our website, so that we can offer the best possible experience whether you are booking tickets or just trying to find out more about our latest exhibitions.

Direct interactions

1. When you sign up to receive our email newsletters or respond to FACT emails

2. When you sign up on behalf of your organisation to participate in a FACT

3. When you visit our website: we use cookies to help make the experience of using our website better, personalise the service you receive from us and provide you with information on products and offers that are relevant to you on social media.

4. When you visit our website: our web server automatically records your public internet protocol ('IP') address and also generates a log file.

5. When you visit FACT. FACT uses CCTV to monitor its buildings and the surrounding areas in the interests of the safety and security of visitors and staff, as well as part of its public task to safeguard the artworks on display.

6. When you use your Studio/Lab Membership access card.

7. When you contact us by phone to book tickets.

8. When you make purchases or book tickets in person or in the building.

9. When you sign in to use Wi-Fi on your visits.

10. When you attend a public event at FACT or RSVP to a private event hosted by FACT.

11. When you respond to one of our surveys.

12. When you enter a competition, promotion or survey.

13. When you apply for a vacancy advertised on our website.

14. When you apply for an internship or placement role at FACT.

15. When you engage with us professionally or undertake tasks for FACT.

16. In order to enter into a contract with us when either you or we provide goods or services, or you enter into a donation agreement with us or you otherwise intend to create a binding legal obligation with us.

17. When you join one of our community groups.

18. When you join an in-person or online meeting. This can include your name, contributions you make to the meeting and any images shared where relevant.

Third parties of publicly available sources

We receive personal data about you from various third parties and public sources as set out below:

• We use a number of different sources to aid us in our activities, including official websites of companies, charities and other arts organisations. In addition to general use of the internet we also make use of company, director and shareholder information from publicly available information providers.

• We use Google Analytics to collect information about how our visitors use and navigate this website. This information is pseudonymous and cannot be used to identify you personally. For more information, please see how we use cookies below.

Third-party links

This website includes links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances: to provide a service you have requested.

Purposes for which we will use your personal data

Where we need to provide a service or perform a contract we are about to enter into or have entered into with you, to:

• Fulfil ticket, merchandise, donation and membership requests.

• Process payments. Please note that we do not store any Credit Card or other payment information once the transaction has been completed.

• Provide you with assistance through our customer service team.

• Send you e-tickets and products you have ordered.

• Register you as a user to Studio/Lab’s room and equipment booking system.

• Administer your visit to FACT and the attendance of an event.

• Contact you with important information relating to a booking or purchase, such as confirming your order, reminding you of an upcoming booking or letting you know about changes that may affect your visit.

• Train those who provide you with services and who manage the website.

• Send you membership benefits such as your welcome pack and cards.

Where we have your consent, to:

• To personalise your experience with FACT and make it more relevant to you.

• Inform you of news about FACT and upcoming exhibitions or events.

• Recommend products and offers that we think you might be interested in.

• Contact you if we need to obtain or provide additional information.

• Create invitation lists for events, including private views and opening previews.

• Credit donors in publications and in gallery.

• Film or take photographs of workshops or other small group activities taking place at FACT. Parents or Guardians will be asked to sign approval forms for children.

• Email you about a specific topic you’ve requested to hear more on such as our cinema programme.

• Where adequate measures have been taken to anonymise your personal data and share it with third parties. The data will be provided in accordance with any consents you have previously given.

Where we need to comply with a legal or regulatory obligation:

• To undertake due diligence to detect and reduce fraud and credit risk.

• To submit a claim to HM Revenue and Customs (HMRC) for Gift Aid.

• The use of CCTV recording equipment in and around our premises for monitoring and security purposes.

• Comply with Health and Safety requirements.

Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests, to:

• Learn about your interests and preferences so that we are able to personalise your experience and contact you with programme or product information that is relevant to you.

• Assess potential level of support and identify individuals who might be interested in receiving information about particular projects. It is also used in aggregate to inform an overall strategy for securing donations.

• Take photographs in public and gallery spaces and at events. Location warning notices for filming or photography is always put in place and all reasonable efforts will be made to gain approval from the subject of any image of an identifiable person.

• Brief FACT staff on existing relationships.

• Recognise those who have provided support and thank them.

• Provide the best possible customer services and to help us with internal administration.

• Use your pseudonymised details, to protect your personal data, to show you advertising on social media platforms as Facebook and Instagram or via other third-party advertising that may appear on other websites you use. This includes using specific services offered by some sites and social networks, such as Facebook’s Custom Audience service. We also use cookies provided by Facebook and Twitter to provide you with information on products and offers that are relevant to you on social media. You can find more information about how we use pixels and cookies on our website by reading more about cookies below. You can limit the advertising you see and the kind of profiling and tracking that Facebook undertakes by going to your Facebook account settings and selecting ‘Ads’.

• Use booking and publicly available information to classify our audience into groups or segments. These segments help us to understand our audience better and ensure we’re sending relevant messages to each group.

• Analyse and continually improve the services we offer, including by using appropriate electronic systems to ensure effective service delivery.

• Measure and understand how our audiences respond to a variety of marketing activity so we can ensure our activity is well targeted, relevant and effective.

• Ensure the security of our website and information systems.

• Answer your queries or complaints.

• Record a meeting.

Where it is necessary for the performance of our public functions, as defined in the Museums and Galleries Act:

As a public authority we process your personal data where it is necessary for the performance of our public task (for example, personal information contained within artworks or to make our collection available to researchers and for the public’s enjoyment).

A small percentage of our records containing personal information are selected for permanent preservation in our collection. They are made available in accordance with the Freedom of Information Act 2000, as amended by the Data Protection Act 2018.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us:

By email: info@fact.co.uk

By phone: +44 (0)151 707 4444

By post: FACT, 88 Wood Street, Liverpool, L1 4DQ

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

We will never sell, rent or exchange your details with any other organisation outside of FACT.

We will ask for your consent to share personal information with third parties.

Some of our service providers may have access to your data in order to perform services on our behalf. We require all third parties to respect the security of your personal data and comply with UK data protection laws. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We share personal data with the following parties for the purposes set out above under 'How we use your personal data'.

• Service providers who work on FACT behalf for the performance of any contract we enter into with them or you, for example payment processing companies (e.g. Stripe), our ticketing service provider (TicketSource), our marketing platforms, database services (e.g. GoodCRM), website hosting, or email delivery service (e.g. Mailchimp).

• Third-party providers, for example: PwC who have built and developed Illuminate, an Audience Data Platform, for Arts Council England. Illuminate helps us to segment and understand our audience by providing additional information so that we can send the most relevant and targeted communications possible.

• Third-party advertisers (such as Facebook or Google) to help us identify customers similar to our audience or to serve relevant adverts to you on third party websites. The information shared with these advertisers is pseudonymised to protect your personal data.

• Third party event and project organisers and co-ordinators who partner with FACT.

• Professional advisers including lawyers, bankers and auditors.

• Where required to do so (for example, if required to do so by the ‘know your donor’ principles under charity law or a court order), or regulators and other authorities who require reporting of processing activities in certain circumstances (such as HMRC), or when requested by the police (e.g. in the event of a security incident) or a regulatory or government authority investigating illegal activities.

• Evaluators and research specialists engaged by FACT for the purpose of improving and developing FACT’s programmes.

FACT is not responsible for the privacy notices and practices of other websites and recommends that you check the notices of each website you visit and contact its owner or Data Protection Officer if you have any concerns or questions.

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed and will notify you and any applicable regulator of a breach where we are legally required to do so.

In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

All external suppliers have signed data processing and confidentiality agreements with FACT. However, despite all our precautions, no data transmission over the internet is 100% secure. As a result, we cannot guarantee the security of any information which you disclose to us and so wish to draw your attention to the fact that you do so at your own risk.

Data Retention

We will only retain your personal data for as long as is reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. We will not keep more information than we need.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. By way of example, if purchasing a ticket only, we will typically keep your data for up to ten years from the date of your last transaction.

For further information about how long we will keep your information, please contact the Data Protection Officer using the contact details outlined in this notice.

If you ask us to stop sending direct marketing communications to you, we will keep the minimum amount of information (e.g. name, address or email address) to ensure we adhere with such requests.

In some circumstances you can ask us to delete your data.

In some circumstances, we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Request access to your personal data

• Request correction of your personal data

• Request erasure of your personal data

• Object to processing of your personal data

• Request restriction of processing your personal data

• Request transfer of your personal data

• Right to withdraw consent

If you wish to exercise any of the rights set out above, you may contact our

Data Protection Officer:
By email: info@fact.co.uk

By phone: +44 (0)151 707 4444

By post: FACT, 88 Wood Street, Liverpool, L1 4DQ

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within one month. Occasionally, it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

This notice was updated on 29 May 2024. It may be updated to take into account changes at FACT or for example to reflect changes to regulation or legislation.