The London Bus Preservation Trust Ltd (“The Trust”) and its associated companies are committed to the protection of the personal data of its members, volunteers, visitors, customers and suppliers.

Personal data is anything, written, printed or electronic, by which an individual can be identified, whether on its own or in conjunction with additional information from elsewhere.

The General Data Protection Regulation (GDPR) is a law which requires organisations to inform individuals (“Data Subjects”) about what personal data is kept about them, how it is used, what it is used for, how long it is kept, who it is given to and how it will be disposed of. Data Subjects must also be told their rights to access their data, to amend it and (subject to certain legal restrictions) to remove it.

The Trust and its associated companies will not collect or keep more data than is necessary, and will not transfer data to third parties except as described in its Privacy Notice (see below) in order to provide services to members, visitors and customers, to assist suppliers and contractors, or to meet statutory or legal obligations.

The Trust and its associated companies will not use third party providers who are unable to certify that personal data entrusted to them for their performance of a service to us will be secure and not transferred or communicated to to any other organisations or individuals.

The Trust and its associated companies will abide by the GDPR principles, and publish this Privacy Policy and a separate Privacy Notice [PDF] on its website, www.londonbusmuseum.com, where they will be clearly accessible via the Home Page. Both the Policy and Notice will be regularly reviewed by the Trust and updated as and when required.

The Privacy Notice will detail the information described in the previous paragraphs, and explain individuals’ rights under GDPR law and how they may request access to their personal data or make a complaint to the Information Commissioner’s Office.