The Regent's Park & Primrose Hill aerial view
The Regent's Park & Primrose Hill

Privacy & Cookies Policy

The privacy and security of your personal information is extremely important to us. This privacy policy explains how and why we use your personal data, to make sure you stay informed and can be confident about giving us your information.

We process your personal data in line with the Data Protection Act 2018 (DPA 2018) and the UK General Data Protection Regulation (UK GDPR).

Who are The Royal Parks?

In this policy, the words The Royal Parks, ‘TRP’ ‘we’, ‘us’, ‘our’,  refers to The Royal Parks Limited. We are the data controller of the personal data we process, unless otherwise stated.

If you would like to contact us about this privacy notice or how we use your personal data, please contact us at:

Data Protection Team
The Old Police House
Hyde Park
London
W2 2UH
Telephone: +44 (0)300 061 2000
Email: dataprotection@royalparks.org.uk

Why do we collect personal data?

We need to collect personal data so that we can fulfil our charitable objectives. To achieve these, we may need your information to deliver and manage services, train and manage our workers, investigate any concerns you may have as well as follow up with you to check the quality of the parks and help research and plan for the future.

What personal data do we collect?

Your personal data is any information which identifies you, or which can be identified as relating to you. We only collect what we need to fulfil the purpose, provide a service to you and help manage the parks.

The information we collect will differ depending on the purpose. Please click the heading/s below to expand the purpose and see further details about what we need to collect and why, and how we do it.

Your rights as a data subject

As a data subject whose personal information we hold, you have certain rights. If you wish to exercise any of these rights, please email dataprotection@royalparks.org.uk or use the address or phone number above. We will work with you to ensure we can support your request or will explain why a request may not be possible. We will do this as soon as possible and in most cases within one calendar month. In order to process your request, we will ask you to provide two valid forms of identification for verification purposes.

Your rights are as follows:

The right to be informed – We must be clear to you about how we use your personal data. We do this by providing this privacy policy and always telling you what we use your information for. We will put a link to this notice at the end of any form where your data is collected.

The right of access - You have the right to ask us for copies of the information we have relating to you. We might have to remove certain parts before sharing it with you, for example if it is contains information about someone else, but we will always support you when you make a request.

The right to object, the right to erasure and the right to restriction – In some circumstances, you can tell us to stop processing your data or to delete it. For example, if you no longer wanted to receive our newsletter, you could tell us to stop sending it; this would be described as an ‘objection’.

There are some instances where we could not delete your data.

For example, we cannot delete data we would need so we know not to contact you in future, this is known as a ‘suppression list’.

Another example would be if we have your details because, for example, you bought something in our shop or paid for a licence. We wouldn’t be able to erase this data as we need to retain financial records for legal reasons.

We will always explain those reasons to you what is and isn’t possible to do with your data.

The right to data rectification – You can tell us if you think we hold inaccurate information about you or if you think there is something missing.

The right to data portability – If another party provides the same service as another, they can send or ‘port’ your data to them. This may apply, for example, to services such as mobile phone contracts or energy bills. However, we don’t have any activities at TRP where this applies so such a process would not take place.

Rights related to automated decision-making including profiling – You can object to decisions being made about you which are automated and have no human involvement; this might occur in situations such a insurance price being based on your job title and industry. However, such automated decision making is not something we do at TRP.

You can find out more about your rights on the Information Commissioner’s Office.

Cookies

Our websites and online services may use “cookies.” Cookies are small pieces of data that get downloaded to your computer or device when you visit a website or app. They tell us which parts of our websites people have visited, help us measure the effectiveness of ads and web searches, and give us insights into user behaviour so we can improve our communications and website performance. Cookies can be disabled in your browser settings but you may find that certain website functionality doesn’t work.

We need your consent to store cookies on your device. When you visit our website, a cookie consent banner will alert you that the website uses cookies and ask you to give permission.

Your rights are as follows:

The cookies used on our websites are as follows:

Category 1 — Strictly Necessary Cookies

These cookies are essential to enable you to browse around our websites and use their features. Without these cookies, services like shopping baskets and e-billing cannot be provided. They are also used in our forms to save the data to allow you to move on to the next step.

Category 2 — Performance Cookies

These cookies collect information about how you use our websites, for example which pages you visit, how long you stayed there and where you clicked next. Using this combined data for all website users help us to make our websites easier for you to navigate. This website uses Google Analytics, a web analytics service provided by Google Inc., which uses cookies to help a website analyse how users use the site. The information generated by the cookie about your use of this website (including your IP address) will be used by Google for the purpose of evaluating your use of the website on our behalf. When your personal data is processed by Google Analytics, it will be processed under Google’s privacy notice. The website also uses third-party Facebook cookies to target website users with relevant advertising and content.

Category 3 — Functionality Cookies

These cookies allow our websites to remember choices you make while browsing. For instance, we may store your geographic location in a cookie to ensure that we show you our website localised for your area. We may also remember preferences such as text size, fonts, and other customisable site elements. They may also be used to keep track of what featured products or videos have been viewed to avoid repetition. The information these cookies collect will not personally identify you, and they cannot track your browsing activity on third party websites.

Category 4 – Targeting Cookies

These are cookies from third parties such as social media platforms that are on the website with our permission. They may be used by us to show you advertising relevant to you and your interests on other websites. Your data is processed under the third party’s privacy notice.

Security

We recognise the need to ensure that personal information gathered via this website remains secure. We use industry standard Secure Server Software (SSL) for your transactions with us to protect against the loss, misuse and alteration of the personal information under our control. It encrypts all of your personal information, including credit card number, name, and address, so that it cannot be read as the information travels over the Internet.

However, you acknowledge that although we exercise adequate care and security there remains a risk that information transmitted over the Internet and stored by computer may be intercepted or accessed by an unauthorised third party.

When personal data is stored on The Royal Parks’ systems we take every care to ensure the security of your personal data.  Its information systems are adequately and appropriately protected, by the implementation and maintenance of security controls, against threats to the systems. The implemented security controls are appropriate to the measures of risks and the value of assets, and implemented, used and where relevant tested, correctly, through information security compliance (audit) reviews, to ensure that the required level of security is maintained.

Links to third party websites

This Privacy Policy applies solely to the personal data collected by TRP and does not apply to third party websites. Please be aware that if you access other websites, using links from our website, these are outside of TRP’s control.  If you provide personal data to other companies, the privacy policies of those companies will apply to your personal data. Please read the privacy policy carefully of any company you provide your personal data to.

Complaints

Should you wish to discuss a complaint regarding our handling of your data, please feel free to contact us using the details provided above. All complaints will be treated in a confidential manner.

Should you feel unsatisfied with our handling of your complaint, you are entitled to escalate this to the supervisory authority. For the United Kingdom, this is the Information Commissioner’s Office (ICO). Its contact information can be found at here

Changes to this policy

We may update this policy from time to time so please check it regularly. Changes will be notified by an announcement on this website. If there are significant updates, we will inform those people with whom we are in regular contact, such as email subscribers or regular donors.

Policy sections

CCTV

Purpose: To support with security and safety of people and property and for prevention and detection of criminal activity. Legal basis: Legitimate interests

CCTV is in operation across our parks, predominantly in private areas but is also in place in some public facing areas, with clear signage in place. Our CCTV captures and stores real time images and footage wherever the cameras are pointed. Image or footage of you may be captured whilst you are in our parks.

CCTV is in use and therefore your data may be captured for the following purposes:

  • To ensure the health and safety of staff, contractors and visitors.
  • To protect our buildings and assets
  • To detect, prevent or reduce the incidence of crime
  • To monitor site use and maintain visitor levels to keep you safe
  • To support with improved inspection and maintenance regimes
  • To prevent and respond effectively to all forms of possible harassment and disorder
  • To reduce the fear of crime
  • To create a safer environment
  • To assist with health and safety and other serious occurrences, including employment issues, for example, disciplinary investigations, where appropriate to do so
  • For the defence with regards to legal or insurance claims

We will only retain and share images/footage when it is necessary or we are required to do so by law, such as to assist in any investigations in relation to the above purposes.

Direct marketing / newsletters

Purpose: To email you our newsletter and keep in touch with you Legal basis: Consent

By signing up to our mailing lists you agree to receive communications from TRP by consenting we can process your personal data, for the purpose of marketing. You can choose to provide us your postcode to receive information on your closest park.

We collect your personal data when you sign up via our ‘Newsletter Sign Up’ page or if you select to hear from us via other places. This could be other pages on our website, or via third parties such as our shop, fundraising platforms like JustGiving or other initiatives like the parks half marathon. We want to ensure you receive content relevant to you. Initially you will be signed up to our full mailing list but you can change your mind at a later date. Within the emails there will be an ‘unsubscribe’ link or you can get in contact with us directly using the details on this page. Our different communications will be about visiting the parks, volunteering with us, Health & Wellbeing, Nature and Heritage events and experiences, conservation work, fundraising campaigns, and learning opportunities. If you tell us you don’t want to receive marketing communications anymore, then you may not hear about events or other work we do that may be of interest to you.

We currently use Dotmailer as our email marketing platform. By consenting, you acknowledge that your information will be transferred to Dotmailer for processing, which may be outside of the EEA. Their full privacy policy can be found here.

If you are on one of our specific web pages and choose to sign up to receive information, this will be about the theme of the page. For example, from the learning page, you will only receive news about learning offers, or just about events in the parks from the events page. You can choose to hear about other or all topics by following the ‘unsubscribe’ link in the emails.

We use cookies in our email communications to track whether the mail has been opened or read and whether you have used any website links contained in the email. This allows us to monitor and improve our email communications and website.

We will never share your information with companies outside The Royal Parks for inclusion in their marketing.

Dedications

Purpose: To manage your dedication

Legal basis: Contract

We use your personal information so we can manage your dedication, for example, a bench dedication. When your dedication period comes to an end we will use your contact details to get in touch and offer you an extension to the dedication period. During the dedication period we may contact you to update you about your dedication, check your contact details remain correct or invite you to supporter events. You can inform us of any changes at any time. We have a legal obligation to retain financial records and will retain your dedication payment details in line with our retention policy.

Fundraising, donations and legacy pledges

Purpose: To administer donations Legal basis: Legal obligation

We use your personal information so we can administer your donation/pledge. We have a legal obligation to retain financial records and will retain your details in line with our retention policy. Where your donation comes from a third party site such as virgin money giving, justgiving, WorldPay, or PayPal, they will share your information with us, for us to retain in our financial records.

Where we have your permission (see direct marketing/newsletters),  we may invite you to support vital initiatives by making a donation, getting involved in fundraising activities or leaving a gift in your will. Occasionally, we may invite some supporters to attend special events to find out more about the ways in which donations and gifts in wills can make a difference to specific projects and to our cause.

If you tell us you want to fundraise to support our cause, we’ll use the personal information you give us to record your plans and contact you to support your fundraising efforts.

Our Fundraising Promise

Your generosity has a huge impact and we want to ensure that you have an excellent experience every time you choose to make a donation. Read our Fundraising Promise.

Purpose: Research Legal basis: Legitimate interest

As a charity, we are grateful to receive donations of all sizes. Every donation helps protect the green spaces in our care. Philanthropy and major gifts from supporters and members of the public can play an important role in supporting our projects and programmes, which enhance everyone’s experience of visiting and using the Royal Parks.

For a small number of people, we may undertake research using data that person has shared with us, data collected from the public domain or information which may have been passed to us by a third party by way of introduction, to build a picture of their philanthropic activities, wealth, employment and capacity and inclination to support The Royal Parks philanthropically. Processing this data helps us to tailor our ways of communicating with different supporters, determine who may be most interested in entering into a conversation about philanthropy and ensure that approaches we make about philanthropy are appropriate and directed only to those who we believe may be able and willing to give. 

We believe that processing in this way is in our legitimate interest as a charity, conducive to providing an excellent supporter experience and vital to securing the support we need to protect your parks. However, we will always respect your right to privacy when carrying out this research. We will only process your data for these purposes if we have reasonable cause to believe you may be interested in supporting the parks philanthropically (such as a previous history of supporting our work), where we have carried out a relevant Legitimate Interest Assessment and where we are confident that processing your data in this way would not reasonably be deemed intrusive. You can opt out of your data being processed for these purposes at any time by emailing fundraising@royalparks.org.uk.

We may sometimes contract third parties to help us carry out fundraising research. This may include contracting the third party to analyse personal data we hold, and collect and make use of other, publicly available data.

Research using data you have shared with us

We may use data you have shared with us that may be indicative of your wealth and capacity to give to understand whether it would be appropriate to approach you about philanthropy. This data might include:

  • The size, frequency and duration of any past donations you have made to The Royal Parks, including donations you have made or funds you have raised when participating in events to fundraise for The Royal Parks, such as The Royal Parks Half Marathon, Swim Serpentine or the London Marathon
  • Whether you have purchased tickets or attended our Winter Wonderland Charity Preview Night or any similar charitable events operated by The Royal Parks
  • Whether you live in a post code where we have received a greater level of support previously, or where we might reasonably expect to receive a greater level of support from residents due to factors such as the affluence of the area and proximity to one of the spaces in our care

Research using publicly available information

We may use information from publicly available sources to gain a better understanding of your interests and capacity to give. We may also share this information with our staff and trustees if you are attending one of our supporter or stakeholder events, so that they are informed about your background and interests and able to engage with you about areas of our work that we believe will be of most interest to you. We may collect this data from sources including:

  • Lists of directorships published by Companies House
  • Lists of trustees published by The Charity Commission for England and Wales or Scottish Charity Regulator
  • Newspaper or magazine articles
  • Profiles you have made publicly available on personal websites, organisational websites or professional platforms, such as LinkedIn
  • Twitter (where you have made your posts publicly available)
  • Published lists of other organisations’ supporters
  • Specialist charity research tools, such as Factary Phi, which collate publicly available data about philanthropic support of charities

Information passed to us by way of introduction

Sometimes, a mutual contact may inform us that they believe you would be interested in hearing from us about philanthropy and share information about your philanthropic activities and interests. We may make a record of relevant information that is shared with us, such as the suggested nature of your interest in our work or your interest in similar charities and causes, if we are confident that processing your data in this way would not be intrusive or deemed unreasonable.

Fundraising due diligence

As a charity, we have an obligation to undertake appropriate due diligence on donations (in accordance with the guidelines set out by the Charity Commission for England and Wales and the Fundraising Regulator) to ensure that we do not accept gifts from inappropriate sources. We may collect information from publicly available sources including, but not limited to, the UK government’s Sanctions List, newspaper and magazine articles, Companies House and the Charity Commission for England and Wales / Scottish Charity Regulator to verify the appropriateness of accepting a donation.

Licences and permits

Purpose: To manage a service Legal basis: Contract and legal obligation

We collect the information in our licence and permit application forms so that we can provide a service to you. The fields of information will depend on the licence you apply for but will include information about you, your business, your use of the park and payment information if required. The licence/permit information is collected under the basis of the customer contract with you and the payment details must be retained for financial purposes as our legal obligation.

Our range of licenced areas can be found on our web pages: Commercial & licences or may be park dependant such as fishing licencing in Bushy Park and Richmond Park.

As part of some of our licences, some of your information may be made public if you choose to. For example, if your Fitness Licence application is approved, your contact details including your name, company and telephone number can be uploaded to the ‘Licensed Royal Parks fitness operators’ page on our website. There is a tick box option on the Fitness Licence application for you to confirm to us if you would like your contact details to be advertised online.

Management of volunteers

Purpose: To manage our volunteering programme

Legal basis: Contract and legal obligation

We collect your information to manage our volunteering programme, from the moment you enquire to the time you decide to stop volunteering with us. This may include references, criminal records checks, details of emergency contacts and medical conditions etc and our purpose is to adhere to relevant legislation and to manage our arrangement (contract) with you. This is to protect both you and us in areas such as safeguarding or health and safety.

We will use your information to contact you about all aspects of the volunteering programme. For example: contacting you about an opportunity you’ve applied for or we think you might be interested in, expense claims you’ve made, shifts you’ve booked and to recognise your contribution. It could also include information about things happening where you volunteer and about your volunteering, including asking for your opinions on your volunteering experience. We may also share this data anonymously with funders to help them monitor how their funding is making a difference.

We will retain your personal data for three years after you last volunteered with us.

Purpose: For volunteers to be able to effectively lead and support events

Legal basis: Contract

Across our parks we have a range of services run by and supported by volunteers. When you book an event, such as walking tours, we will securely share your name with our volunteers so they can take a register.

All of our walking volunteers have been trained and understand the requirement to protect your data and will destroy the list as soon as possible after the event.

Orders and events management

Purpose: To fulfil your order

Legal basis: Contract and legal obligation

We process customer data to fulfil orders and run events, and manage our customer contract with you. Your data will be used to communicate with you throughout the process, including confirming we’ve received your order and payment, to confirm dispatch, to clarify where we might need more detail to fulfil an order or booking, or to resolve issues that might arise with your order or booking. The Royal Parks Half Marathon and other events held in the Parks have their own privacy notices which can be found on their websites.

Research, consultation and feedback

Purpose: To support our continual service improvement

Legal basis: Contract

Where we have provided you with a service such as a licence or event booking, we may ask for your feedback on that as part of our customer contract with you. The purpose of this is for our continual improvement of the parks and is an integral part of park management.

When you get in contact with us regarding your experience of the park, it may relate to a service which is managed by a third party under contract with TRP. Where possible we only share anonymised information but we may need to share personal details to look into your communication further. This will be done in line with our contract with the third party who will protect your information on our behalf.

Purpose: For research and improvement of the parks

Legal basis: Consent

We carry out research and consultations with our supporters, customers, staff and volunteers to get feedback on their experience with us. We use this feedback to improve the experiences that we offer and ensure we know what is relevant and interesting to you.

If you choose to take part in research, we’ll tell you what data we will collect, why and how we’ll use it. This kind of research we conduct is optional and you can choose not to take part. For some of our research we may ask you to provide special categories of personal data (e.g. ethnicity). You don’t have to provide this data and we also provide a ‘prefer not to say’ option. We only use it at an aggregate level for reporting (e.g. equal opportunities monitoring).

We may engage a research agency to support our research. We will always make it clear if another party is involved to ensure you are happy for them to handle your personal data on our behalf.

Learning and development

Purpose: To manage a service Legal basis: Contract

If you choose to sign up to one of our courses/events (e.g. walking tours, workshops, experiences etc) through our website or by telephone, we will process a limited amount of your personal data in order to provide you with the service you have requested. Where we work with a contracted provider to deliver these courses/events we may need to share your personal information with that provider. Your personal data will be processed on a contractual basis: we cannot provide the service without your personal data.

We may request some personal data about the children attending the course, but this personal data will be destroyed as soon as the course has run.  We may keep some anonymised data for statistical and reporting purposes.

Photography, videography and drone use

Purpose: To support the management of the parks Legal basis: Legitimate interests

Photography and videography is of great value in The Royal Parks (TRP). In this privacy notice, use of the term ‘photos’ includes video footage. We might take photos during landscaping and maintenance activities, during events or for other activity such as learning, volunteering, fundraising and play in the park. We also take photos for specific purposes such as appearing on our website, in emails, on our social media channels and in flyers and advertising campaigns. Sometimes we capture footage by use of a drone.

Park management

As an organisation charged with looking after public spaces we seek to ensure that TRP are maintained and preserved as necessary, and taking photos is necessary for this. This includes specific activities such as taking photos of landscapes, trees and animals, assets such as gates and statues to detail in our asset management system and work that has or has not been completed by contractors

For building works, we sometimes use a drone to capture footage, especially in hard to reach locations.

We do not intend to capture individuals in these photos, however, sometimes it may not be possible to take a photo without someone in the background. The purpose of these photos is not based around you as an individual.

Promotion of TRP and our work

One of TRP’s charitable objectives is to promote the use and enjoyment of the parks for public recreation, health and well-being including through the provision of sporting and cultural activities and events and the processing of personal data in photos is in this interest. We may take photos across a range of activities in the parks and use them across social media or presentations. Where photos are taken for this purpose we will make it clear to you and where possible will use a permission form to ensure you have been able to speak to us about your photo.

Ceremonial events

During a ceremonial event, we will take photos or video of visitors gathered in our parks, paying their respects or laying floral tributes.

Marketing, media and sharing:

We may use photos for specific purposes such as (but not limited to) use on:

  • TRP website
  • TRP social media channels
  • TRP internal presentations and emails
  • Printed and online publications
  • Marketing materials such as flyers and advertising campaigns
  • Fundraising purposes such as funding websites and applications

We may like to share the photos with a third party such as for press releases, for any traditional and digital media platforms such as newspapers, magazines, online news websites or applications etc. In this instance we would securely share your photos with the party, stating they can only be used to publicise The Royal Parks and nothing else. Responsibility for that photo would then lie with that third party.

Recruitment and employment

Purpose: To manage our recruitment and employment duties Legal basis: Legal obligation

In order to comply with our contractual, statutory, and management obligations and responsibilities, we process personal data, including special categories of personal data, from job applicants and employees. Such data can include, but isn’t limited to, information relating to health, racial or ethnic origin, and criminal convictions. Further information is available internally for our employees.

Wildlife monitoring

Purpose: To protect and conserve wildlife in the parks

Legal basis: Legitimate interests

We sometimes monitor wildlife in the parks using specific equipment such as motion sensor camera traps or thermal imaging cameras. The intention of this is to capture wildlife footage and not people although depending on the camera position/height, you may be in the footage.

Footage will not be used or publicised showing identifiable individuals. We may conduct this research with partner organisations - for example, Zoological Society of London (ZSL). You can view ZSL’s privacy notice here: ZSL Privacy Policy | Zoological Society of London (ZSL)