Revised 5 July 2025
By using our site, you indicate that you accept the terms of this Privacy Policy. If you do not agree, please refrain from using our site.
ABOUT US
In this Privacy Policy, references to ‘we’ or ‘us’ are to Heritage Innovation Limited, a company limited by guarantee registered in England, no. 14145049. Our registered office is at 34-35 Butcher Row, Shrewsbury, SY1 1UW, United Kingdom.
We will be the controller of any relevant personal data regarding members of staff, customers, subcontractors, landowners, trustees, volunteers, students, interns, work experience children and their parents/guardians processed or described in this Privacy Policy as part of our operations.
We will not pass on your details to any third-party unless you give us permission to do so or we are required to do so by law.
We keep our privacy policy under regular review and we will place any updates on this web page.
EXEMPTIONS
Certain data is exempted from the provisions of the GDPR including the following:
DATA SECURITY
Heritage Innovation Limited takes appropriate technical and organisational steps to ensure the security of relevant personal data. We have implemented security measures to protect the personal data that we have under our control from
Heritage Innovation ensures that all staff are aware of their responsibilities under GDPR, and provides them with the necessary advice, guidance and awareness training in handling personal data.
PROCESSING OF PERSONAL DATA
We are committed to complying with the General Data Protection Regulation (GDPR) in fulfilling our duty to the rights for individuals and in the collection, processing and transfer of personal information to ensure that personal data is:
WHAT IS PERSONAL DATA?
'Personal data' is any information relating to a (living) person which allows them to be directly or indirectly identified from that data. The processing of personal data is governed by legislation relating to personal data which applies in the United Kingdom including the General Data Protection Regulation (GDPR) and other legislation relating to personal data and rights such as the Human Rights Act.
WHAT DATA DO WE PROCESS?
We collect and process data from different groups as follows:
Clients. The majority of our clients are businesses and are not therefore supplying us with personal data other than their name along with their business contact details. Some clients are private individuals requiring our services. We only collect their name, address and phone numbers to be able to supply the required service or advice. All client information is held securely.
App customers. Members of the public who use our heritage apps do so under the terms and conditions and Privacy Policy of those apps. These can be found here:
Subcontractors and suppliers. Subcontracted business services usually supply us with contact names and business contact details thereafter. Some subcontractors are freelance specialists who we take on, on a temporary contract for a specific project. As such we treat them as suppliers and the data we collect is name, address, (emergency contact details if site working) and payment details to pay their invoice. This information is held securely.
Volunteers, work placements and interns. Adult students who are doing work placements or internships will supply us with their name, address, email and telephone numbers as well as emergency contact name and details. Medical and relevant prescribed medication information is requested to enable us to ensure volunteer safety and comfort whilst working with us, but it does not exclude them from working with us. This information is held securely and confidentially
Landowners. We need to contact landowners of sites where archaeological archives are generated to gain their permission to deposit the archive with the relevant museum to facilitate its long-term preservation. The information we request is a name and address so that we can send them a Transfer of Title form to fill in; these details are then passed to the museum who have a legitimate interest in acquiring them as part of the legal agreement that the Transfer of Title constitutes, and will not use them for any other purpose than to acknowledge said Transfer of Title. These details are held securely by Heritage Innovation Limited only for as long as is necessary to complete the transfer of archives to the relevant repository.
External processors. We use data processors for accounting and certain other legal functions. We may share some details (for example client and supplier names and addresses) where it is necessary for them to carry out their duties as our data processors or where you have given us your prior consent.
RIGHT OF ACCESS TO INFORMATION
Individuals have the right of access to their personal data held by Heritage Innovation Limited, subject to the provisions of the GDPR and the Freedom of Information Act 2000.
If you are a resident in the United Kingdom, we are the 'data controller’ of your personal information. Any individual wishing to access their personal data should put their request by email to admin@heritageinnovation.org, or by post to:
34-35 Butcher Row
Shrewsbury
SY1 1UW
United Kingdom
CHANGES AND RESTRICTIONS TO INFORMATION
Heritage Innovation Limited will endeavour to ensure that all personal data held is accurate and up to date and will amend or change data upon request if it is inaccurate.
Individuals have the right to have personal data erased though this right is not absolute and only applies in certain circumstances (see Article 17 of the GDPR for full details).
Individuals have the right to request the restriction or suppression of their personal data, though this is not an absolute right and only applies in certain circumstances (see Article 18 and 21 (1) of the GDPR for full details). Individuals can also object to the processing of their personal data to stop it being used for direct marketing.
Individuals have the right to obtain and reuse their personal data for their own purposes i.e. in a structured, commonly used and machine-readable format and/or have it transmitted directly to another controller. We will comply with this where it is technically feasible.
Any requests concerning changes to personal data, including erasure, restriction and portability, should be made by email to admin@heritageinnovation.org, or by post to:
34-35 Butcher Row
Shrewsbury
SY1 1UW
United Kingdom
RETENTION OF DATA
We may retain data for differing periods of time for different purposes as required by statute or best practices. Other statutory obligations, legal processes and enquiries may also necessitate the retention of certain data. It should be noted that our standard company disaster recovery process requires regular and secure data back-ups.
TRANSFER OF DATA ABROAD
We will only transfer personal data to countries or territories outside of the European Economic Area (EEA) if their systems comply with measures giving equivalent protection of personal rights through international agreements or contracts approved by the European Union.
If you have any queries please get in touch via admin@heritageinnovation.org.
Heritage Innovation Limited
34-35 Butcher Row • Shrewsbury • SY1 1UW • United Kingdom
Company 14145049
Copyright © 2025 Heritage Innovation