Privacy policy

We collect personal information from our members, visitors, customers and stakeholders in order to fulfil our services. We do this both electronically and in paper format.

In addition we also collect details automatically about the pages you visit on our website. Please see our Cookies policy below for more information.

In choosing to share your personal information with us, you will be agreeing to our collection and use of your information as described in this policy.

If you no longer want us to process your personal details you can ask us to stop at any time by contacting cadwmarketing@gov.wales

We use the information you share with us to:  

• Make sure you receive the product, service or information you have requested or bought
• Carry out reasonable administration of your membership, bookings, volunteering and other services
• To keep in touch with you in the way that you want us to
• To better understand our supporters so that we can personalise and improve the services we offer.

For details of how we do this please see the full policy below.

We will need to make changes to this policy from time to time, to make sure that we are always providing you the latest information about what is happening to your personal information.  

This policy was last updated on 15-07-2024.

We collect personal information about you that helps us to deliver and improve our services. 

Our services refers to: Online ticketing (general admission/events) / venue hire (film and TV) / travel trade bookings / wedding and photography hire / event hire.

Educational activities: self-led educational visits / supported visits / Cadw funded experience days. Community activities: venue hire / supported schemes.

This includes:  

• Name and address
• Email address and telephone numbers
• Date of birth
• Payment information such as credit card and bank details
• How you would like to hear from us
• Details of purchases and membership
• Details of your volunteering application
• Enquiries and feedback.

Under our membership scheme we also ask for details of your children who you would like to include on the membership. We use this information to better understand how to provide the best service to your family in terms of offers and events, and we will not contact your children directly.  

If you have provided details for someone else, for example by buying a gift for them, we will not contact that person until they have been given the opportunity to let us know their communication preferences.

If you have contacted us on behalf of an organisation, for example making an Educational Booking or a Travel Trade enquiry, we will also store details of your employer.

When visiting our website we also collect information about your IP address and the pages you visit. This helps us to understand which areas of our website are most useful to our supporters and make improvements. This does not tell us who you are and where you live until you choose to provide us with that information.  Please see our Cookies policy below for more information.

Processing

We will make sure that you receive the product or service you have requested, process any payments and send you information relating to that service.

If you have joined as a Member or Monument Pass holder this will include sending you confirmation of your purchase and membership materials such as membership cards, information on how to use your membership, regular magazines, handbook and email newsletters including opportunities to feedback on your membership. We will also send you information about membership renewal and information relating to your Direct Debit payments.

Please notify us if your details have changed.

Marketing and communications

Receiving marketing information from Cadw will always be your choice, and you can choose how you would like to receive that information from us.

You can also change your mind at any time, and we will keep your preferences up to date.

We limit the number of marketing communications we send to make sure we are not sending you too much. The maximum you would receive is two per month, in addition to communications that are not marketing related described above.

If you have signed up to receive Cadw newsletters, we will use your subscription to contact you about Cadw news and events including asking for your feedback on Cadw products and services as part of our ongoing research. Every email will have a link to help you unsubscribe if you wish to stop this.

We may contact you occasionally by post, however you can also stop this at anytime by contacting cadwmemberships@golleyslater.co.uk

Your information will be only be accessible to our staff, volunteers and contractors if they are trained and it is appropriate in order for them to carry out their role in line with this Privacy Policy.

We will never sell your personal information, or let other organisations use it for their own purposes.
We will only share your personal information where: 

• We are legally required to, or as a result of a lawful request by a governmental or law enforcement authority.
• We have engaged a supplier or contractor to carry out services on our behalf, such as order fulfilment, sending our communications or carrying out research and analysis. 

We only work with trusted suppliers in compliance with the General Data Protection Regulation (UK GDPR), tailored by the Data Protection Act 2018.

Our website may contain links to other websites that are outside our control and are not covered by this Privacy Policy. If you access other sites using the links provided, the operators of these sites may collect information from you that will be used by them in accordance with their privacy policy, which may differ from ours. 

The security of your information is paramount to us. We use encryption for transfer of data and our networks are regularly monitored to ensure they remain secure.

We also regularly review our measures to ensure they are up to date and in line with latest developments, particularly when we are handling payment information.  

If you have a password to allow access to certain parts of our website, you must keep that password safe and not share it with anyone or your personal information could be at risk.

Data that is transmitted via the internet or in email, cannot be 100% secure. As a global environment, transmitting data to us may take place outside the European Economic Area.

We will take every reasonable precaution to keep your information safe but it cannot be guaranteed and so please be aware that any information you do transmit to us is at your own risk. Once we have received your information we will use our best effort to ensure its safety within our network, which sits within the European Economic Area.

We will only hold your personal information for as long as reasonably necessary to carry out services and administer your relationship with us. Typically this is two years since your last interaction with us unless we are required to hold it longer for legal or taxation reasons. 

If we dispose of your information it will always be done securely. 

You have the right to a copy of the information we hold about you.

Should you wish to contact us regarding the use of your data for the purpose of administering your membership, or any other Cadw service, please email our marketing team at: cadwmarketing@gov.wales or call 03000 256000 

Should you wish to lodge a complaint regarding the use of your data, please write to:

You also have the right to have incorrect information corrected and the right to object to further processing of your personal information for direct marketing.

Cookies are small text files sent to your computer or mobile device by the websites that you visit. They help make websites work better and provide information to the owners of the site.

For instance, this site uses YouTube cookies to embed videos in its pages and Google Analytics cookies to track users’ behaviour whilst on the site. By understanding how people use our site, we can improve the navigation and content to better meet people’s needs.

The information collected by the Welsh Government includes IP address, pages visited, browser and operating system. The data will not be used to identify any user personally.

The cookies we use on our site are:

Cookie Name Purpose
langPrefWAG Language version

This cookie is created by the content management system and is essential for the site to display to correct language version of the site.

GoogleAnalytics __utma
__utmb
__utmc
__utmz

These cookies are used to find out how visitors use our site. We use the information to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, whether they have visited before and the pages they visit.

CookieControl civicAllowCookies
civicShowCookieIco

This cookie records whether a user has accepted the use of cookies on our site.

We also enable Google Analytics Advertising Features; this allows us to enable features in Analytics that aren't available through standard implementations. Advertising features include:

• enable Google Analytics to collect data about website traffic via Google advertising cookies and identifiers, in addition to data collected through a standard Google Analytics implementation.
• remarketing with Google Analytics
• google Display Network Impression Reporting
• google Analytics Demographics and Interest Reporting
• Integrated services that require Google Analytics to collect data for advertising purposes, including the collection of data via advertising cookies and identifiers
• you can opt out of Google Analytics data tracking by adding an opt-out browser add-on here.

YouTube VISITOR_INFO1_LIVE
PREF
use_hitbox

These cookies are essential for the display of YouTube videos on our site.

Web browsers allow some control of cookies through browser settings. To find out more about cookies and how to manage them, visit www.allaboutcookies.org

Third Party Cookies

To make it easy for you to use and share our website we embed features from other websites such as Facebook, Twitter and TripAdvisor.

Browsing the Cadw website may place cookies from these third party websites on your computer. Cadw have no control over these cookies so it is not always possible to list them, and they are liable to change without notifying us.

We may refer to companies, organisations and public bodies and enable access to their websites directly from our website. Each company, organisation or public body operates its own policy regarding the sale of personal data and the use of cookies. If you have a particular interest in, or concern regarding the way your data will be used then you are advised to read the Privacy Statement on the relevant website.

In addition to these policies your personal data is protected in the UK by the Data Protection Act 1998 and the General Data Protection Regulations. Under this legislation, we will only process any data we hold about you in a lawful and fair manner. We will keep your data securely to prevent unauthorised access by third parties. Your personal data may have to be disclosed if we are required to disclose it by law, or as a result of a lawful request by a governmental or law enforcement authority.

You do not have to register to use the Cadw website.

You do need to register in order to:

• create an online account
• join the Cadw membership scheme (including Cadw’s monument pass)
• join Cadw’s Travel Trade scheme and 
• receive email updates (Cadw’s e-newsletter).

The registration information we require as mandatory for you to register is: your username, a password, and e-mail address. This information is stored securely on our database until such time as you choose to delete your account, your details are stored securely so that you do not need to re-register when you come back to the site.

You can change your registration preferences including language preference, email address and login details at any time. If you wish to amend your profile, please use the following links:

• Cadw membership
• Cadw Tour Operator Scheme
• Cadw online ticket account (select LOGIN)
• Cadw e-newsletter subscription

If this privacy policy changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.

To enable the Welsh Ministers to exercise their functions under the Historic Environment (Wales) Act 2016, the Planning (Listed Buildings and Conservation Areas) Act 1990, the Ancient Monuments and Archaeological Areas Act 1979 and the Protection of Wrecks Act 1973, Cadw obtains and retains personal information relating to the designation of historic assets and the associated consent regimes.

For example:

• Upon being informed of a proposal for statutory protection, or a proposal to remove statutory protection, or a proposal to change a record;
• During consultation with the owner and / or occupier of a building, monument, park, garden or wreck which is proposed for statutory protection;
• Upon being notified of an application for listed building consent by a local planning authority;
• Upon being notified that the owner or occupier of a listed building is subject to enforcement procedures; and
• Upon being informed of any form of management or partnership agreement for a listed building.

The information that is retained includes your name, address, telephone number, email address and language preference (English or Welsh). The Welsh Government is the data controller for this information and we will use it in order to enable Welsh Ministers to exercise their functions in the public interest (Article 6(c) and (e) of the GDPR).

We will retain your contact details for as long as you have ownership and / or occupancy of the listed building, scheduled monument, registered historic park or garden or wreck site. Correspondence relating to such historic assets during your period of ownership or occupancy is retained as a permanent record.

In the event of any damage to a historic asset, or unauthorised works having taken place we may share this information local planning authorities or with the police. We will not share your information with any other parties without your prior permission.

Information on listed buildings

You can access descriptions and maps for all Listed Buildings &Scheduled Monuments in Wales through Cof Cymru – National Historic Assets of Wales, Cadw’s online historic environment map. If you have any questions or wish to report corrections please contact us on cadw@gov.wales

To enable the Welsh Ministers to exercise their functions under the Ancient Monuments and Archaeological Areas Act 1979 (the 1979 Act) we (Cadw) obtain and retain personal information of owners and occupiers of a scheduled monument (or any prospective scheduled monument), an applicant for scheduled monument consent, any person being investigated for undertaking unauthorised works or use of a metal detector, recipients of grant assistance; and anyone involved with any form of management, partnership or acquisition / guardianship agreement for a scheduled monument.

The information that is retained includes your name, address, telephone number, email address and language preference (English or Welsh). The Welsh Government is the data controller for this information and we will use it in order to enable Welsh Ministers to exercise their functions in the public interest (Article 6(e) of the GDPR).

We will retain your contact details for as long as you have ownership / management responsibility for the scheduled monument. Correspondence relating to the monument during your period of ownership / occupancy of the monument is retained as a permanent record.

In the event of any damage, or unauthorised works having been taken place at the site we may share this information with the police.

In the event that an application for scheduled monument consent includes details of work to take place within a Site of Special Scientific Interest (SSSI), a copy of the application will be shared with Natural Resources Wales.

If you are awarded Scheduled Monument Consent, a copy of our decision letter is sent to the following third parties:

• The local planning authority
• The Royal Commission on the Ancient & Historical Monuments of Wales
• The regional Welsh Archaeological Trust
• The Council for British Archaeology
• Natural Resources Wales (only where work is to take place within an SSSI).

We will not share your information with any other parties without your prior permission.

Information on scheduled monuments

You can access descriptions and maps for all Listed Buildings &Scheduled Monuments in Wales through Cof Cymru – National Historic Assets of Wales, Cadw’s online historic environment map.

If you have any questions or wish to report corrections please contact us on ScheduledMonuments@gov.wales

To enable the Welsh Ministers to exercise their statutory functions concerning planning applications, Cadw obtains and retains personal information, for example, as a consultee on a planning application or appeal.

The information that is retained includes your name, address, telephone number, email address and language preference (English or Welsh). The Welsh Government is the data controller for this information and we will use it in order to enable Welsh Ministers to exercise their functions in the public interest (Article 6(c) and (e) of the GDPR).

We will retain your contact details as a permanent record of the planning consultation. Correspondence relating to the consultation is retained as a permanent record.

We will not share your information with any other parties without your prior permission.

To enable the Welsh Ministers to exercise their functions under the Protection of Wrecks Act 1973, Cadw obtains and retains personal information relating to the control of access to a protected wreck site. For example, the award of a wreck diving license requires the personal details of the dive leader, named divers, and reference providers.

The information that is retained includes your name, address, telephone number, email address and language preference (English or Welsh). The Welsh Government is the data controller for this information and we will use it in order to enable Welsh Ministers to exercise their functions in the public interest (Article 6(c) and (e) of the GDPR).

We will retain your contact details and correspondence as a permanent record of access to the wreck.
In the event of any damage to the wreck site, we may share this information with the police. We will not share your information with any other parties without your prior permission.