Privacy Policy

Who we are

Cromarty Museum (formerly Cromarty Courthouse Museum)

Scottish Charity Number: 018438

Website: https://www.cromartymuseum.org.uk

Last updated: 2nd July 2026

Cromarty Museum (“we”, “our”, “us”) is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains what information we collect when you use our website, why we collect it, how we use it, and your rights under UK data protection law. We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK legislation. We may update this Privacy Policy from time to time. The latest version will always be published on this website with the updated date. If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact Cromarty Museum using the contact details published on this website.

Information we collect

Depending on how you use the website, we may collect information that you provide. This may include:

your nameour email address
your telephone number
the contents of any enquiry you send us
information you choose to submit for exhibitions, research or community projects

Providing this information is voluntary.

Information collected automatically

Like most websites, we may automatically collect technical information including:

IP address
browser type
operating system
pages visited
date and time of your visit
referring website

This information helps us understand how people use the website and improve it.

Cookies

Our website may use cookies to:

remember preferences
improve website performance
understand website usage through analytics

Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can control or delete cookies through your browser settings.

How We Use Your Information

We use personal information to:

respond to enquiries
administer museum activities
manage volunteer or community projects
improve our website
comply with legal obligations
protect the security of our website

We only process personal data where we have a lawful basis under UK GDPR.

These lawful bases may include:

* your consent
* performance of a contract
* compliance with legal obligations
* our legitimate interests, provided these do not override your rights

Sharing Information

We do not sell personal information.

We may share information with trusted service providers who help us operate the website, such as website hosting providers or email services.

Where we do so, appropriate contractual safeguards are in place.

We may also disclose information where required by law.

Data Retention

We only keep personal information for as long as necessary for the purposes for which it was collected, including meeting legal, accounting and archival obligations.

Where information is no longer required, it will be securely deleted or anonymised.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

We are not responsible for the privacy practices or content of those websites. We encourage you to read their privacy policies.

Your Rights

Under UK data protection law, you have the right to:

access your personal information
request correction of inaccurate information
request deletion where appropriate
restrict processing in certain circumstances
object to processing based on legitimate interests
withdraw consent where processing relies on consent
request transfer of your information where applicable

You also have the right to complain to the UK’s data protection regulator if you believe your information has been handled unlawfully.

Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration.

No internet transmission can ever be completely secure, but we work to minimise risks.

Co-produced Content and Community Contributions

Cromarty Museum works collaboratively with volunteers, researchers, artists, local residents and community groups to create exhibitions, digital resources and online content.

Where contributors provide photographs, recordings, stories, artwork or other material, they confirm that:

they own the material or have permission to share it;
to the best of their knowledge its publication does not infringe the rights of others;
they understand the museum may publish the material online, in exhibitions and in educational resources unless otherwise agreed.

Personal information contained within contributed material will be handled in accordance with this Privacy Policy.