Privacy Notice Updated March 2025 (Version 1.12)
This Privacy Notice explains:
- What information is collected and why
- Who is collecting it
- How it is collected
- Why it is being collected
- How it will be used
- How long it will be kept
- Who it will be shared with
- How that information will be kept secure
- Transfers of information outside of the EEA
- Your choices, including how to access and update information
When we collect your personal information, we will:
- only collect what we need and no more
- keep your information secure
- tell you how we will use your information
- delete your information when it is no longer needed
- only process your information in line with rules set out in the Data Protection Act 2018 and related Manx Data Protection legislation.
This notice may be replaced, or more information added, when you use a specific service.
If we decide to change our Privacy Policy, we will post changes to this Privacy Notice. If you have any questions or comments on this Privacy Notice, please contact our Data Protection Officer (see “Contact us” below).
Freedom of Information – Privacy Notice
A separate Privacy Notice specifically in relation to the Isle of Man Freedom of Information Act 2015 (“FOIA”) is published here: MNH-FOI-Privacy-Notice.pdf
Who we are
The data controller is the Manx Museum and National Trust (“MMNT”), trading under the name Manx National Heritage (“MNH”). We recommend you take some time to read this notice and if you do not agree to this Privacy Notice do not provide us with your personal information.
Contact us
Contact details for MNH are provided below. MNH also has a designated Data Protection Officer (DPO). If you wish to contact our DPO directly you can write to the DPO at the address provided below, or email DPO@mnh.im
Manx National Heritage
Manx Museum
Kingswood Grove
Douglas
Isle of Man
IM1 3LY
Email: enquiries@mnh.im
Tel: +44 (0)1624 648000
What information is collected and why
When you use a Manx National Heritage (MNH) service, including using our websites www.manxnationalheritage.im, isleofmanher.im, www.imuseum.im or accessing MNH’s services through gov.im, we may ask you to share personal information with us. Any data you submit or send via these websites is sent at your own risk. We collect and process information, including personal information, to provide effective and efficient services and to meet our statutory obligations.
We use your personal information in line with the rules set out in the Data Protection Act 2018 and related legislation for the following reasons:
- Compliance with our statutory obligations under the Manx Museum and National Trust Act 1959 (as amended), such as for the protection of the Island’s historic monuments, archaeology, archives, arts, ecology and conservation
- Compliance with other legal obligations and duties, including:
- financial requirements, including banking and keeping financial accounts and records, such as for processing goods and service payments you make to us or we make to you
- contractual requirements, including contracts of employment; contracts and written agreements with you as our customers, suppliers, or tenants; contracts of sale, to meet a request you have made for a service or to make a purchase or booking
- answering requests for information under the Freedom of Information Act 2015 or data protection legislation
- Providing access to online and offline services offered by MNH
- Answering your queries or requests for information
- Where you have agreed to the processing
- Advertising, marketing and public relations such as communicating with you about our news, products, services and events
- Analysing use of the websites to make improvements
- Keeping historical and research records
- Providing education, through cultural and historical training events
- Estate and property management such as tenancies, rented, leased and holiday accommodation
- Use of CCTV for the prevention and detection of crime and prosecution of offenders
- Recruitment, training and administration for trustees, staff and volunteers
We will only process your personal information if there is a legal reason for us to do so. We may rely on:
- Meeting our legal obligations and duties under Isle of Man legislation, for example:
- the Manx Museum and National Trust Act 1959 (as amended)
- the Charities Registration and Regulation Act 2019
- the Treasury Act 1985
- the Freedom of Information Act 2015
- the Safeguarding Act 2018
- employment law
- law governing the sale of goods and services, and electronic transactions
- Meeting our contractual obligations
- Prevention or investigation of suspected or actual violations of law, complaints and investigations
- Protection of public interest
- Retention of information for historical or archiving purposes under the Public Records Act 1999 by the Manx National Heritage Library and Archives and the Public Records Office
- Your consent*
*Where we rely on your consent to process your information, you may withdraw your consent at any time by contacting enquiries@mnh.im or by contacting our Data Protection Officer (see “Contact us” above).
Types of personal information we collect about you
Depending on how you interact with us we may process different information about you. Below you will find an overview of the categories of information that we may collect.
If you use a link to any website, you should make sure you read the privacy notice on that website page to find out what it does with your information.
Information you provide to us directly
This is information about you that you give us by filling in forms on our sites www.manxnationalheritage.im or www.imuseum.im or by corresponding with us by phone, e-mail or otherwise. It includes information you provide when you register to use our websites, subscribe to our service, search for a product, place an order on our site, participate in discussion boards or other social media functions on our site, enter a competition, promotion or survey and when you report a problem with our site.
It also includes information you provide when you attend one of our ticketed events or when you support our work as a donor, trustee, employee, volunteer, supplier or partner organisation, including for events management, the annual Heritage Open Days and renting any of our holiday or residential accommodation.
The information you give us may include your name, address, e-mail address and phone number, financial and credit card information, personal description and photograph.
| Category of data | Examples of that type of data |
| Account login information | Login ID, password, or security questions |
| Contact information | Your name, email address, telephone number, address and relatives, guardians or other persons associated with you |
| Financial data | Invoice number, amount, bank details We hold partial credit or debit card information |
| Government identifiers | Driving licence number, NHS number, national insurance number |
| Health information | General symptoms, source of pain, diagnosis, dietary requirements |
| Other information | Feedback, comments, complaints |
| Personal identification data | Name, title, date of birth, image including photograph or film |
| Education details | Qualifications, training establishments and examining bodies |
Information we collect automatically
When you visit any of our websites, we will automatically collect the following information:
- technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
- information about your visit, including the full Uniform Resource Locators (URL), clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page.
When you visit or use our website, we may collect information sent to us by your computer, mobile phone, or other device. For example, we may collect:
| Category of data | Examples of that type of data |
| Device information | Hardware model, operating system version |
| Log information | Time and duration of visit |
| Other information | Links you click, location |
| Tracking information | When you visit this site we use cookies that do not collect any personal data. Read more about under “Cookies”. |
How long we keep your personal information
We will only keep your information for the minimum time necessary.
This may be to:
- Comply with our statutory obligations such as retaining accounting and tax records
- Respond to an enquiry from you
- Continue to give you access to a service you have requested
Who we share your personal information with
We may share your information with the following third parties:
- Our partners and suppliers to ensure you receive the information, goods or services you have requested, including partners in the Isle of Man Government, the Friends of Manx National Heritage and our commercial partners
- Our ICT and commercial suppliers for the maintenance and security of our records and financial accounts, for the hosting of our website and online shop, and for our tills and stock control systems
- Our financial suppliers for processing financial transactions, electronic payments and banking
- Our suppliers for booking and managing our visitor and rental accommodation and venue hire
- Our commercial partners in the event of a complaint by you, subject to your prior agreement
- The police or law enforcement agencies where there is a legal requirement to do so
- The courts on production of a valid court order
We will share your personal information with other companies, organisations or individuals where there is a legal requirement to do so. Your personal information will not be disclosed to any third party without your prior consent unless we are required to do so by law.
We will not sell your personal information to other companies, organisations or individuals.
Photography and filming
We will not produce or use images of you individually or in small groups without obtaining your prior consent. This includes photographs and film, taken for example at our events or sites, to be used in our news, promotional and social media communications. You have a right to withdraw your consent at any time, but please note that it may be difficult to remove images if they have been published.
How we keep your personal information secure
The security and confidentiality of your information is very important to us.
We will ensure that:
- Safeguards are in place to make sure personal information is kept securely
- Only authorised staff are able to view your information.
Transfer of information outside the EEA
We may transfer data outside of the European Economic Area. We make sure appropriate safeguards such as contracts or other agreed standards are in place.
Your choices, including how to access and update information
What are your rights?
To ask if we hold personal information about you
You can ask to see what information we hold about you by submitting a Subject Access Request. Please contact our DPO for assistance with this (see “Contact us” above).
In certain circumstances a charge may apply.
Subject access requests must be responded to promptly and in any event within a maximum of 1 month.
To review your personal information and ensure it is accurate
Where possible, we will provide you with access to the information we hold about you so that you can view this information and provide a means for you to have this information changed if it is not accurate.
To remove your personal information
In certain circumstances you can ask for your information to be deleted. Please note that as part of Manx National Heritage’s statutory functions some information may need to be retained.
You can make any of these requests by contacting the MNH Data Protection Officer (see “Contact us” above).
To make a complaint
If you are not satisfied with the way we deal with your personal information, you can submit a complaint to the MNH Data Protection Officer (see “Contact us” above) who will work with you to resolve any issues.
The Information Commissioner is the independent authority responsible for upholding the public’s information rights and promoting and enforcing compliance with the Island’s information rights legislation. Further information can be found on the Information Commissioner’s website here.
You have the right to request the Information Commissioner to undertake an assessment as to whether the processing of your personal data has been carried out in accordance with the provisions of the Data Protection Act 2018.
Will this Privacy Notice change?
This Privacy Notice may change. We will not reduce your rights under this Privacy Notice without your consent. If any significant change is made to this Privacy Notice, we will provide a prominent notice on our websites so that you can review the updated Privacy Notice.
This Privacy Notice may be replaced, or more information added, when you send feedback, ask to use a service online or make a payment for a service through this website.
This Privacy Notice was last updated March 2025 (Version 1.12).
Cookie Policy
Last updated April 2026 (Version 2.1)
Cookies
Cookies are small text files that are placed on your computer, tablet or mobile device when you visit a website. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.
We use cookies to ensure you get the best experience on our website. You can refuse the use of cookies by selecting the appropriate settings on your browser; however, if you do this you may not be able to use the full functionality of MNH’s websites.
The first time you visit our MNH website www.manxnationalheritage.im a pop-up banner will request your consent to our use of cookies. You can refuse the use of all or some of the cookies by selecting the appropriate settings through the cookie banner (see ‘How to control cookies through our website optional settings’ below). However, depending on the options you select, you may not be able to use the full functionality of the MNH website.
Visitors to our websites
When someone visits www.manxnationalheritage.im, isleofmanher.im or www.imuseum.im we use the following types of cookies:
- Strictly necessary cookies
These cookies are essential for the website to operate securely and correctly. They enable core functionality such as security, session management and form submission.
You cannot switch off these cookies, as the website would not function properly without them. - Functional cookies
These cookies enable enhanced functionality and performance, particularly in relation to embedded media. - Analytics cookies
We use a third-party services, Google Analytics and Sourcebuster, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things like pages visited; time spent on pages; device and browser type; approximate location (based on IP address). This information is only processed in a way which does not identify anyone. We do not pass on identifiable information to Google.
If we do want to collect personally identifiable information through our website, we will be up front about this. We will make it clear when we collect personal information and will explain what we intend to do with it. This Cookie Policy should be read together with our Privacy Notice (see above), which explains how we process personal data more generally.
How to control cookies through our website optional settings
The first time you visit our MNH website www.manxnationalheritage.im a pop-up banner will request your consent to our use of cookies. You can choose to:
- Accept all the cookies we use – click the ‘Accept All’ button
- Decline all non-essential cookies – click the ‘Decline’ button
- Personalise your own cookie settings –
- 1) Click the ‘Decline’ button and a small blue ‘Cookie Settings’ flag will appear in the bottom right-hand corner of the website;
- 2) Click on the ‘Cookie Settings’ button, then scroll down to the very bottom of the website where you can choose which exact cookies you consent to and which you wish to decline;
- 3) Click Save And Accept to save your chosen settings for next time you visit.
- Note that you can change these cookie settings at any time.
How to control cookies through your browser
Most web browsers allow you to control cookies through their settings. You can:
- Delete existing cookies
- Block all or certain types of cookies
- Set your browser to notify you when cookies are set
Please note that blocking strictly necessary cookies may affect the functionality of the website. The About Cookies website has more information about cookies and instructions for managing and deleting cookies in different browsers.
Use of cookies on manxnationalheritage.im, isleofmanher.im or www.imuseum.im
The tables below explains the cookies we use and why.
Strictly necessary and functional cookies
| Cookie | Purpose | Type | Expiry |
| csrf_cookie_name | Protects the site against cross-site request forgery (CSRF) attacks | Strictly necessary | At the end of the user’s session |
| TS01dc4fc6 | Maintains secure and consistent connections to the website (load balancing / security) | Strictly necessary | At the end of the user’s session |
| _cf_bm | Cloudflare cookie used to distinguish between humans and bots and help protect the website from malicious traffic | Strictly necessary | 30 mins to 1 hour |
| JSESSIONID | Maintains the user’s session across page requests to ensure the site functions correctly | Strictly necessary | At the end of the user’s session |
| machine | Internal routing / load balancing cookie | Strictly necessary | At the end of the user’s session |
| wordpress_test_cookie | A test cookie used by WordPress to identify if cookies are enabled in the current user’s session. | Strictly necessary | At the end of the user’s session |
| woocommerce_cart_hash | This cookie stores the content of the user’s ‘basket’. No personal information is stored within the cookie. | Strictly necessary | At the end of the user’s session |
| woocommerce_items_in_cart | Stores the number of items in the user’s basket. No personal information is stored within the cookie. | Strictly necessary | At the end of the user’s session |
| wp_woocommerce_session_ | Contains a unique code for each customer so that it knows where to find the basket data in the database for each customer. No personal information is stored within the cookie. | Strictly necessary | At the end of the user’s session |
| __Secure‑YEC | Provided by YouTube (Google LLC)
Helps maintain security, prevent fraud and remember user preferences when interacting with YouTube content. |
Strictly necessary | 1 year |
| YSC | Provided by YouTube (Google LLC)
Maintains session state and helps protect against abuse and spam when videos are played. |
Strictly necessary | At the end of the user’s session |
| VISITOR_PRIVACY_METADATA | Provided by YouTube (Google LLC)
Stores information relating to a user’s privacy and consent preferences for YouTube services. |
Strictly necessary | 6 months |
| wordpress_{random character string} | Used to store account information about customers and our back-office staff for their time using the site, such as account management and shop checkout. | Strictly necessary | 2 weeks |
| wordpress_logged_in {random character string} | Used to store account information about customers and our back-office staff for their time using the site, such as account management and shop checkout. | Strictly necessary | 2 weeks |
| wp-settings-{userid}-{variable string} | Used by us to set what areas of the back office can be viewed or edited by our back-office staff. | Strictly necessary | 2 weeks |
| VISITOR_INFO1_LIVE | Provided by YouTube (Google LLC)
Estimates bandwidth, optimises video playback, and remembers video player settings. |
Functional | 6 months |
| .fonts.net | Used to deliver web fonts correctly and efficiently. | Functional | 1 year |
Analytics cookies
| _ga | Distinguishes users for analytics purposes | Analytics – Non-essential
You can opt out of Google Analytics cookies |
2 years |
| _gat | Limits the rate of analytics requests | Analytics – Non-essential
You can opt out of Google Analytics cookies |
1 minute |
| _gid | Distinguishes users within a single day | Analytics – Non-essential
You can opt out of Google Analytics cookies |
24 hours |
| _ga_* | Stores session and campaign information for a specific Google Analytics property | Analytics – Non-essential
You can opt out of Google Analytics cookies |
Up to 2 years |
| sbjs_current | Sourcebuster.js via WooCommerce (online shop) – Analytics | Analytics – Non-essential
Stores information about the visitor’s current session source (e.g. referral, marketing campaign). |
At the end of the user’s session |
| sbjs_current_add | Sourcebuster.js via WooCommerce (online shop) – Analytics | Analytics – Non-essential
Stores additional information about the visitor’s current session source. |
At the end of the user’s session |
| sbjs_first | Sourcebuster.js via WooCommerce (online shop) – Analytics | Analytics – Non-essential
Stores information about the visitor’s first visit source to support marketing attribution. |
At the end of the user’s session |
| sbjs_first_add | Sourcebuster.js via WooCommerce (online shop) – Analytics | Analytics – Non-essential
Stores additional data about the visitor’s first visit source. |
Persistent |
| sbjs_session | Sourcebuster.js via WooCommerce (online shop) – Analytics | Analytics – Non-essential
Tracks session activity for marketing and analytics attribution purposes. |
Persistent |
| sbjs_migrations | Sourcebuster.js via WooCommerce (online shop) – Analytics | Analytics – Non-essential
Used to manage Sourcebuster cookie version upgrades and data consistency. |
At the end of the user’s session |
Third‑party cookies
We do not use cookies for advertising or social media tracking.
Where we embed video or photographic content on our websites using third-party websites such as YouTube, you may be presented with cookies from these websites. We do not control these cookies and you should check the relevant third-party website for more information about their use of cookies.
Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in law or how we use cookies. The “Last updated” date at the start and end of this policy shows when the policy was last revised.
Contact us
If you have any questions about this Cookie Policy or how we use cookies, please contact our Data Protection Officer:
Email: DPO@mnh.im
Manx National Heritage
Manx Museum
Kingswood Grove
Douglas
Isle of Man
IM1 3LY
Tel: +44 (0)1624 648000
Cookie Policy Last updated April 2026 (Version 2.1)