Our Policies

Supporting NHS Test and Trace Privacy Notice

This Privacy Notice sets out what you need to know about how English Heritage is supporting NHS Test and Trace and local public health contact tracing. English Heritage is committed to meeting its data protection obligations and handling your information securely.

English Heritage is the Data Controller for information you provide to us and is responsible for compliance with data protection legislation for the period that we hold it.

This policy was last updated on 19 July 2021 following changes to legislation which means it is no longer mandatory for English Heritage to record contact details of customers, guests, contractors and visitors for the purposes of NHS Test and Trace. This means: 

  • We will no longer collect your details for the purposes of supporting NHS Test and Trace.
  • We will continue to process staff and volunteer data for the purposes of managing Covid-19 cases in the workplace. The lawful basis of this is legal obligation in H&S law.

How do we collect information about you?

If you are using the NHS app then English Heritage will not be directly processing your data and you should consult the NHS app privacy policy for further information.
For staff and volunteers, we will use the contact information you have provided to us and which we have on file as well as rotas and signing in books/systems.

What information do we collect?

We will collect the following information of visitors about staff and volunteers:

  • Name
  • Telephone number, email or postal address
  • Date of visit, arrival and departure time where possible

How will your information be used?

We will only use information for the purpose for which it has been collected.
We will not use this information for any other purpose such as marketing.

The legal basis for using your information

Processing employee and volunteer data for the purposes of NHS Test and Trace including local authority public health tracing, is necessary for English Heritage to comply with its legal Health & Safety obligations to manage COVID-19 cases in the workplace.

Who will your information be shared with?

NHS Test and Trace and, or, local authority public health teams will only ask English Heritage for this information where it is necessary, either because an employee or volunteer who has tested positive for COVID-19, or because one of our properties has been identified as the location of a potential local outbreak of COVID-19.

We will only share this information when it is requested by NHS Test and Trace or the local authority public health team. We will ensure that this information is shared in a safe and secure way.

Where information is shared with NHS Test and Trace the Department of Health and Social Care (DHSC) will be data controller for the information at the point it receives the data from English Heritage. The DHSC Privacy notice for maintaining records of staff, customers and visitors to support NHS Test and Trace is available at https://www.gov.uk/government/publications/privacy-notice-for-maintaining-records-of-staff-customers-and-visitors-to-support-nhs-test-and-trace/privacy-notice-for-maintaining-records-of-staff-customers-and-visitors-to-support-nhs-test-and-trace
For further information on how local authority public health teams manage your personal data please refer to the relevant local authority website.

How long will we keep your information?

We will only use and store your information for as long as it is required for the purposes it was collected for including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your rights

The Data Protection Officer for English Heritage is Lynda Bennett and she can be contacted by sending an email to data.protection@english-heritage.org.uk

For additional information about how English Heritage manages your data, your rights and how to request them please visit our Privacy Policy https://www.english-heritage.org.uk/about-us/our-people/our-policies/

Changes to this privacy notice

We may change this privacy notice. When we make changes to this notice, the ‘last updated’ date at the top of this page will also change. Any changes to this privacy notice will apply to you and your data immediately. If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

'step into englands story