This Privacy Policy explains how Wing Museum processes personal data when you use the website and related services. It applies to visitors, prospective clients, and business contacts who interact with the site in a professional context.
We use personal data to respond to enquiries, provide and manage services, communicate with business contacts, maintain website functionality, monitor security, improve performance, keep records, meet legal and regulatory obligations, and support the establishment or defence of legal claims where necessary.
We may share personal data with hosting providers, technical support providers, analytics services, security providers, and other professional partners that assist in operating the website or delivering services. These parties act under contractual or equivalent confidentiality and data protection obligations and may process data only for the purposes we specify.
We may disclose personal data to courts, regulators, law enforcement, or other public authorities when required by law or when disclosure is necessary to establish, exercise, or defend legal claims. We may also share information to comply with lawful requests or to protect the rights, property, or safety of Wing Museum, our users, or others.
Where GDPR applies, we process personal data on a lawful basis such as consent, contract performance, legal obligation, or legitimate interests, depending on the activity involved. We apply data minimisation, purpose limitation, and storage limitation principles and use appropriate safeguards for the processing we carry out.
Where GDPR applies, you may have rights of access, rectification, erasure, restriction, objection, and data portability, as well as the right to withdraw consent where processing is based on consent. You may also object to processing based on legitimate interests in circumstances recognised by law.
We may process identification and contact details, company and role information, inquiry content, account or service records, technical identifiers, device and browser data, usage data, and any other information you choose to submit through forms, messages, or other interactions with the site.
We collect personal data when you submit forms, communicate with us, request services, or otherwise interact with the site. We also receive technical and usage information automatically through the operation of the website and from third parties that support hosting, analytics, security, or related functions.
We may use strictly necessary cookies to operate the site, functional cookies to remember preferences, and analytics cookies to understand how the site is used. Cookies may be session-based or persistent, depending on their purpose. We do not rely on cookies for purposes that are incompatible with this policy.
You can manage cookies through your browser settings and, where available, through the cookie controls presented on the site. Blocking some cookies may affect site functionality, security features, or preference settings. Where consent is used as the legal basis, you may withdraw it at any time for future processing.
Subject to applicable law, you may request access to your personal data, correction of inaccurate information, deletion where appropriate, restriction of processing, and objection to certain processing activities. You may also request information about how your data is used and, where relevant, ask for a copy in a portable format.
To protect privacy and security, we may need information to verify your identity before acting on a request. We will review the request, respond within the period required by law, and explain any refusal or limitation where the law allows us to do so.
We retain personal data for the period necessary to provide the requested service, manage our relationship, meet legal or accounting obligations, resolve disputes, and maintain security records. When data is no longer needed, we delete it, anonymise it, or restrict it in line with applicable law and internal retention practices.
If we make material changes, we will update the policy text and take reasonable steps to draw attention to the revised version where appropriate. The date of the latest update should be reviewed periodically.
