Privacy

Privacy Notice

1. Who we are

Glasgow Science Centre Charitable Trust (Scottish charity SC030809) is the data controller for the personal data described in this notice. This notice also covers our subsidiaries Glasgow Science Centre Limited and Glasgow Science Centre (Trading) Limited.

Our Data Protection Officer can be contacted at [email protected] or by writing to Glasgow Science Centre, 50 Pacific Quay, Glasgow, G51 1EA.

2. How we collect your data

We collect personal data when you interact with us, including when you:

• Buy tickets, memberships or gift vouchers (online, by phone, or in person)
• Make a donation or Gift Aid declaration
• Book a birthday party, event, or education visit
• Sign up for our newsletter or create an online account
• Visit our website (through cookies and analytics tools)
• Interact with us on social media
• Visit our premises (through CCTV and photography)
• Contact us by email, phone, or post
• Leave a review or complete a survey

We may occasionally receive information from third parties such as research companies.

3. What we collect

Depending on how you interact with us, we may collect:

• Name, email address, postal address, phone number
• Payment information (processed securely and not retained beyond the transaction)
• Details of purchases, bookings, and donations
• Website usage data and cookie information
• CCTV footage and photographs taken at our premises
• Survey responses and feedback

Children’s data: Glasgow Science Centre is predominantly visited by families with children. We do not knowingly collect personal data directly from children without parental involvement. Where children’s data is collected (for example through ticket or party bookings), we only collect what is necessary to provide the service. Our online services comply with the ICO’s Age Appropriate Design Code and the Data (Use and Access) Act 2025.

4. Why we use your data and our legal basis

We process your data under the following lawful bases:

Contract: To process ticket purchases, memberships, donations, event bookings, and other transactions you enter into with us.

Legitimate interests: To improve our services, understand our visitors, measure marketing effectiveness, and prevent fraud. We balance our interests against your rights before relying on this basis.

Recognised legitimate interests: Under the Data (Use and Access) Act 2025, we process data for crime prevention and detection (CCTV) and the safeguarding of vulnerable individuals without requiring a balancing test.

Consent: For sending newsletters, marketing emails, and surveys. You can withdraw consent at any time by contacting us or using the unsubscribe link in our emails.

Legal obligation: Where required by law, for example Gift Aid declarations to HMRC.

5. Who we share your data with

We do not sell your personal data. We may share it with:

• Our subsidiaries for service provision
• Service providers processing data on our behalf (e.g. payment platforms, ticketing systems, email services)
• HMRC for Gift Aid purposes
• Law enforcement or other bodies where required by law

Our service providers act as data processors and are required to comply with UK GDPR. They can only process your data for the purposes we specify.

International transfers: Some of our service providers (such as Mailchimp, Google, and social media platforms) are based outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place such as UK adequacy regulations or standard contractual clauses.

6. Third-party services

We use the following third-party services:

• Google Analytics & Google Signals: Website analysis and marketing
• Microsoft Clarity: Website analysis
• Hotjar: User experience analysis
• Mailchimp: E-newsletters
• Ticket Tailor: IMAX cinema ticketing
• Metricool: Social media management
• Typeform: Surveys
• MS Forms: Surveys and forms
• Facebook, Instagram, Bluesky, X, LinkedIn, TikTok: Interaction and marketing

7. Cookies

We use cookies to improve your website experience and analyse usage patterns. Under the Privacy and Electronic Communications Regulations (as amended by the Data (Use and Access) Act 2025), some cookies such as those used for analytics and website functionality may be set without requiring consent. You can still opt out, and we provide clear information about how cookies are used.

• Cookies: Manage or disable through your browser settings
• Google Analytics: Opt out at tools.google.com/dlpage/gaoptout
• Newsletters: Unsubscribe using the link in our emails

8. How long we keep your data

We keep your data only as long as necessary. Our standard retention periods are:

• Ticket and transaction records: 7 years (financial and tax purposes)
• Gift Aid declarations: 7 years (HMRC requirement)
• Marketing data: Until you unsubscribe or withdraw consent
• Science Passport membership: Duration of membership plus 5 years
• CCTV footage: 30 days unless needed for legal reasons
• Photography and filming: For as long as the material is in promotional use
• Complaints and DSARs: 3 years from closure

9. CCTV

Our premises are monitored by CCTV for safety, security, and crime prevention. This is carried out under recognised legitimate interests as defined by the Data (Use and Access) Act 2025. Recordings are retained for 30 days unless needed for legal reasons. Signage is displayed throughout our premises.

10. Photography and filming

Glasgow Science Centre may photograph or film visitors during events and general visits for promotional purposes. We process this under our legitimate interests in promoting the work of the charity. Signage is displayed when photography or filming is taking place.

If you do not wish to be photographed or filmed, please inform a member of staff. If you believe an image of you or your child has been used without appropriate justification, contact our Data Protection Officer.

11. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct any inaccuracies
• Request deletion of your data
• Restrict processing of your data
• Request portability of your data
• Object to processing
• Withdraw consent at any time
• Make a data protection complaint

To request a copy of the personal data we hold about you, you can submit a Data Subject Access Request using our online DSAR form or by emailing [email protected]. To exercise any of your other rights, contact our Data Protection Officer using the same email address.

12. Complaints

If you wish to complain about how we have handled your personal data, you can submit a complaint using our online complaints form or by emailing [email protected]. You have a statutory right under section 164A of the Data Protection Act 2018 to make a data protection complaint directly to us as the data controller. We will acknowledge your complaint within 30 days of receipt and aim to provide an outcome within three months.

If you are not satisfied with our response, you can escalate your complaint to the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

13. Security

We implement appropriate technical and organisational safeguards to protect your data. Our service providers are required to comply with UK GDPR and process data only in accordance with our instructions.

14. Changes to this notice

We keep this notice under review. The latest version will always appear on our website.

15. Contact us

For any questions or to exercise your rights:

Glasgow Science Centre, 50 Pacific Quay, Glasgow, G51 1EA 
Email: [email protected] 
Tel: 0141 420 5000

This notice was last updated in June 2026.