Privacy Policy
This privacy policy explains how The Centre for Computing History Ltd (“we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website: www.computinghistory.org.uk.
We are committed to protecting your privacy and handling your personal data transparently and securely, in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
Further details about how we manage personal data internally, including staff responsibilities, security measures, and procedures for handling data protection requests, are set out in our internal Data Protection Policy.
Who we are
Data Controller:
The Centre for Computing History Ltd
Rene Court, Coldhams Road
Cambridge, CB1 3EW, UK
Company number: 1302367, Charity number: 1130071
Contact email: admin@computinghistory.org.uk
If you have any questions about this policy or how we use your data, please contact us using the details above.
What personal data we collect
Depending on how you interact with us, we may collect:
- Contact details (such as name, email address, postal address, telephone number)
- Donation and transaction details (where you make a purchase, donation, or booking)
- Newsletter and marketing preferences
- Website usage data, including pages visited and interactions (via cookies and analytics)
- Correspondence you send to us (emails, contact forms, enquiries)
We do not intentionally collect data about children without parental or guardian consent.
How we use your personal data
We use personal data for the following purposes:
- To respond to enquiries and provide information you request
- To process bookings, donations, memberships, and orders
- To send newsletters or updates where you have opted in, or where we have a legitimate interest
- To manage relationships with supporters, donors, and partners
- To analyse website usage and improve our services
- To meet legal and regulatory obligations
Lawful bases for processing
Under UK GDPR, we rely on the following lawful bases:
- Consent – for email marketing, newsletters, and non‑essential cookies
- Contract – where processing is necessary to deliver a service (e.g. event bookings, shop orders)
- Legal obligation – where we are required to keep records (e.g. financial reporting)
- Legitimate interests – for supporter communications, fundraising activity, and service improvement, where this does not override your rights and freedoms
You can object to processing based on legitimate interests at any time.
Marketing and communications
We will only send you marketing communications (including newsletters) if:
- you have explicitly opted in, or
- you have previously engaged with us and the communication relates to similar activities, in line with PECR.
You can unsubscribe or change your preferences at any time using the link in our emails or by contacting us.
We carry out all fundraising communications in line with the Privacy and Electronic Communications Regulations (PECR) and the Fundraising Regulator’s Code of Fundraising Practice.
Use of Cookies
This website uses cookies to better the user’s experience while visiting the website. Where applicable this website uses a cookie control system allowing the user, on their first visit to the website, to allow or disallow the use of cookies on their computer / device. This complies with legislation requirements for websites to obtain explicit consent from users before leaving behind or reading files such as cookies on a user's computer / device.
Cookies are small files saved to the user's computer’s hard drive that track, save and store information about the user's interactions and usage of the website. This allows the website, through its server, to provide the users with a tailored experience within this website.
Users are advised that if they wish to deny the use and saving of cookies from this website on to their computers hard drive they should take necessary steps within their web browsers security settings to block all cookies from this website and its external serving vendors.
Other cookies may be stored to your computer’s hard drive by external vendors when this website uses referral programs, sponsored links or adverts. Such cookies are used for conversion and referral tracking and typically expire after 30 days, though some may take longer. No personal information is stored, saved or collected.
Data sharing and third parties
We do not sell your personal data.
- We may share data with trusted third‑party service providers where necessary, including:
- Beacon CRM (UK‑based)
- Mailchimp (email marketing platform; servers may be outside the UK)
- Payment processors and delivery partners
All third parties are required to process data securely and only for specified purposes.
Data retention
We keep personal data only for as long as necessary for the purpose it was collected, including:
- legal, accounting, or reporting requirements
- active supporter or customer relationships
When data is no longer required, it is securely deleted or anonymised.
Your rights
Under UK GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict processing of your data
- Object to processing (including marketing)
- Request data portability
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO contact details:
https://ico.org.uk
Telephone: 0303 123 1113
Data security
We take appropriate technical and organisational measures to protect personal data, including:
- secure servers
- restricted access
- staff training
- regular review of data handling practices
No online system is entirely risk‑free, but we take reasonable steps to safeguard your information.
External links and social media
Our website may contain links to external websites and social media platforms. We are not responsible for the privacy practices of third‑party sites, and we encourage users to review their policies before providing personal data.
Changes to this policy
Last updated: April 2026
We may update this privacy policy from time to time. The latest version will always be published on our website, with the revision date clearly stated.
