Last Updated: May 2020
Aims & Objectives
Bristol Zoological Society is committed to the protection of Personal Data obtained and stored by the Society and on our behalf by third party processors. This statement supports the Data Protection Policy and is a plain English description for the public of what data is collected and stored and for what purposes.
This is the general privacy statement for Bristol, Clifton & West of England Zoological Society. Please refer to the additional internal policies for details on staff, volunteer & student personal data.
Who are we?
Bristol, Clifton & West of England Zoological Society Ltd and its subsidiary Bristol Zoo Enterprises Ltd (together referred to as ‘BCWEZS’). We are a conservation and education charity, which runs and operates Bristol Zoo Gardens and Wild Place Project.
The company details are as follows:
Bristol, Clifton & West of England Zoological Society Ltd
Registered office: Bristol Zoo Gardens, Clifton, Bristol, BS8 3HA.
Company registered in England, number 5154176.
Charity registered number 1104986.
Bristol Zoo Enterprises Ltd
Registered office: Bristol Zoo Gardens, Clifton, Bristol, BS8 3HA.
Company registered in England, number 1750167.
What information do we collect about you?
We collect information about you when you make a purchase at our sites or online, register for an event, experience or course, donate, or register for our e-news mailing list. We also collect information when you enter our competitions or register for special offers. Website usage information is collected using cookies.
We occasionally have photographers on site who may take images of our visitors for use in marketing, promotional and educational purposes.
The Society has installed and monitors closed circuit television (‘CCTV’) to provide a safe and secure environment for employees, for visitors to the Society’s premises, to protect the Society’s property and to monitor some animal enclosures. Sound is only recorded for the purposes of monitoring animal behaviour. CCTV is installed in entrance and exit areas, in retail areas and other high traffic areas as well as some animal enclosures.
What is the legal basis for having your data?
The ‘legal basis’ is our reason under data protection law for having this information. You can find out more about these at https://ico.org.uk.
When we are providing you with a product or service your personal data is held under the basis of contract. We will only ask for the information we need and will only use it for administration and provision of the product or service.
To develop what we offer to guests and as educational experiences, we use data for analysis, including customer comments and feedback. The basis for this is legitimate interest. Whenever possible, data is anonymised for these purposes.
The lawful basis of CCTV monitoring includes the safety of those on site, emergency situations, prevention of crime, prevention of employee misconduct and ensuring compliance with health and safety procedures.
In some areas we have a legal obligation to keep data such as on purchases and incident reports as well as for the purposes of the NHS Test and Trace initiative.
For other areas we will ask for consent – this means we would like to use the information for a specific stated purpose and are asking your permission. If you give your permission it is only for this purpose, and you may withdraw permission at any time.
How will we use the information about you?
We collect information to process your purchase or booking, and to manage your membership. If you contact us with queries or feedback, we will use your information to respond.
Research is sometimes conducted by BCWEZS, and you may be contacted following your visit to complete a survey. The data collected as part of this survey is anonymised and your contact details only obtained by consent and only for the purposes of the competition. On occasion research may be conducted on our behalf by Morris Hargreaves McIntyre (MHM), who may contact you as part of your online ticketing purchase.
If you agree, we will email you our newsletter with updates of our work at Bristol Zoo Gardens, Wild Place Project and about our overseas conservation. If you agree, we will email you with events and offers which may be of interest to you.
We would like to send you information about our ongoing work and future events and offers which may be of interest to you. If you have given permission for this, you may withdraw this at any time by contacting us.
We do not share your information with other organisations for marketing purposes. We sometimes use external companies to support our own marketing work, and will ask for your permission to share your details with them. Any data shared with an external processor is transferred using secure methods and only to complete work requested by us.
A photograph will be taken when you join as part of your membership registration. This will appear on our screens when your card is scanned on entry so we can ensure the correct person is visiting with your card.
Some events and experiences require us to obtain medical and emergency contact information. This helps us ensure that all participants are safe to take part. In the unlikely event of an incident they allow us to contact a suitable person and to pass essential information on to emergency services.
In most cases these forms are destroyed at the end of the event or experience. If there was an incident, the form would be kept with the incident report which is stored for 5 years as part of our Health and Safety records.
Where CCTV captures images of people:
Cameras are included in the admission/retail areas to help prevent theft or unauthorised access and are only reviewed retrospectively if a theft or security issue needs to be investigated.
Cameras on key pathways which are used for checking visitor flow and safety issues. These will only be reviewed retrospectively if there is a health and safety incident which needs to be checked.
Access to, and disclosure of, images recorded on CCTV is restricted.
Photographs and digital images of individuals
Anyone featured individually (where the photo is of a person or family), we will ask permission and complete a filming permission form. When photography or filming involves children, and/or vulnerable adults, no photographs will be taken unless full permission has been gained from the responsible adult/s accompanying the child/ children and/ or vulnerable adult/ adults.
As a conservation and education based charity, we rely on fundraising and income from our visitors to continue our work both locally and globally. This work is supported by members, individuals, companies and trusts / foundations. We aim to target our fundraising activities to ensure that we contact you appropriately. We may use simple research methods to profile supporters and to identify shared interests and connections. All information is obtained from publicly available sources or data that you have given to us. We use this information to understand who our supporters are and what they may be best interested in. This information aids us in making appropriate fundraising approaches to those who will be most interested.
How long do we keep your data?
We hold your information for only as long as necessary for the purpose needed. For only as long as necessary’ varies according to the nature of the information.
- We have to keep all data relating to purchases and other financial transactions for 6 years for our tax records.
- Incident reports are kept for 5 years for our health and safety records.
- Medical information forms are destroyed at the end of the day they are needed, unless there has been an incident, or it will be needed for a future event and you have asked us to keep it on file instead of giving a new one.
- Customer feedback and complaints are kept for 3 years from the year of contact.
- Member data is kept for contact for the duration of membership, members are also added to our e-news mailing list as part of their subscription. As a transaction it is also kept by Finance for 6 years.
- Personal data collected through Morris Hargreaves McIntyre (MHM) research is retained for 1 year.
- Personal data collected as part of a competition is retained for 1 month following the closure of the competition.
- E-news mailing list tracks if emails are opened, and if you do not read anything for 6 months we will remove you automatically from the mailing list. You may also unsubscribe at any time.
- CCTV footage is erased after 31 days as standard. Sections may be extracted and retained to support ongoing investigations as required, and may be added to incident reports or complaints with the associated timescales above.
- Photography permissions will be kept for 5 years or for the duration that the photograph is in use.
Accessing or amending your information
Website & Social media
Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. You can find out how to disable cookies on your browser here.
(Bristol Zoo Gardens only) We use a third party tool called Lucky Orange which collects anonymised information to help us improve the website visitor experience including device IP address, device and browser information, location, pages visited and recorded user session. No personally identifiable data is recorded, and you can find out more how your data is protected on the Lucky Orange website.
Facebook – we do not hold any data on individuals who interact with us through Facebook. We respond to contact made on Facebook via the Facebook interface, but encourage contact to be made by email to receive a full response. Marketing via Facebook is controlled by Facebook.
Online ticket purchases - For tickets purchased online, we do have third party cookies set up with Pure360 and Purepromoter Ltd to collect browsing behaviour information to improve the online process. By using myonlinebooking.co.uk you acknowledge that we may store and access cookies on your computer or other device as well as capture contact information for remarketing purposes but this will not be entered into any marketing databases. See their cookies statement.
Third Party Processors
Whilst we allow relevant staff, consultants and/or external third party service providers acting on our behalf to access and use your personal data for the activities we have described in this policy (e.g. to provide services or products to you, conduct research, to analyse data and to process payments), we only permit them to use it to deliver the relevant information, goods or services. We will only engage with the third party if we are satisfied that your data will be held in accordance with Data Protection law, including being held securely by them, and the responsibilities will be established upon signing of any contract.
We do not and will not sell your information under any circumstances.
We can be obligated to disclose your personal data upon request to regulatory and government bodies as well as law enforcement agencies
Changes to the policy
We review and update our policies regularly, and any update will be made available on our websites.
How to contact us
By email at firstname.lastname@example.org
By mail at: Bristol, Clifton & West of England Zoological Society Ltd, Bristol Zoo Gardens, Clifton, Bristol, BS8 3HA.
You have the right to request a copy of the information we hold about you. If you would like a copy of some or all of the information we hold, please write to the address above or email email@example.com
We want to ensure that your information is correct and up to date, so you are also entitled to ask us to update or remove information which you think is inaccurate.
Removing or restricting your information
You have the right to request that we remove your information from our records, or stop using it for particular purposes. We will do this wherever possible, with the following exceptions:
If restriction would prevent us providing a service you have asked for (e.g. membership/booking) and you still wish to receive the service
Where we have a legal obligation to retain the information
There may be other situations where our business interests require us to keep your data, and we will advise if it is not possible to remove your data entirely in our response