ABOUT RACHEL SOUHAMI

I am an exhibition and museum consultant, with over 25 years’ experience working with museum and heritage organisations, funders and design companies. My work includes vision and strategic development, partnership working, operational planning, master planning, concept development and overseeing design development. I am registered with the Information Commissioner’s Office (ICO) as a data controller, registration number ZB366495. This privacy policy outlines why I collect personal data, how I use it, keep it safe and the rights of those whose data I hold.

For questions about this policy, please contact me via the form on my contact page.

This policy was last updated on 18 August 2022. It may be updated to reflect changes in my work, regulation or legislation. Please check back.

PERSONAL DATA I COLLECT

Information you provide to me in correspondence
I process the personal data you give to me when you contact me by email, Twitter, web form, telephone, in-person networking or otherwise. This may include: your name, email address, job title, organisation, telephone number, Twitter handle.

Information I gather from public records and independent sources
I research and identify people who may be able to collaborate on projects. To do this, I will research personal data from public sources such as websites, which may include: names, organisation, email address, Twitter handle.

Information shared with me by clients or other third parties to allow me to perform a contract
I may be given your details by my client or other third party working on the same project so that I can contact you to perform my work. This may include your name, role, organisation, email address, phone number.

Information I require to pay you
If I use your services as a consultant or contractor, or need to reimburse your expenses, I will collect the following information:

• Bank details (account name, account type, sort code, account number)
• Your business or home address (e.g. on your invoice or on an expenses form)
• Your VAT registration number, if applicable

Information I receive when you post a comment on the this website
When you leave a comment on this website, WordPress collects and sends to me: your name or WordPress user name, the URL of your WordPress blog (where applicable), your email address, the IP address of the computer you sent the message from. If I choose to publish your comment, only your name and comment appear publicly.

PURPOSES AND LAWFUL BASIS FOR PROCESSING YOUR DATA

Where you give your consent, to:

• Send you updates via this website.

You may withdraw your consent at any time by clicking on “unsubscribe” at the bottom of any of the emails you receive from the website.

Where I have, or am about to enter into, a contract, to:

• To reply to you when you make an enquiry about my services.
• To provide a quote for potential projects
• Where a contract requires me to contact individuals on behalf of my client e.g. to organise an event, to edit a document, to collaborate on the development of an exhibition.
• Process your details so I can pay you if you are a contractor, consultant or are claiming expenses.

Where I need to comply with a legal or regulatory obligation, to:

• Retain your data so that I can comply with UK tax law.

Where it is in my legitimate interest, to:

• Reply to correspondence from you.
• Contact you about work I have performed for you, for example, seeking a reference or testimonial.
• Maintain your details in order to perform my work.
• Maintain your details in order to use a service you provide.
• Decide whether to post a comment you have submitted to my website.
• Use your details such as name, organisation in publications such as reports or case studies in order to disseminate the outcome of my work.
• Maintain an archive of my work.
• Recognise those who have provided support and thank them.

HOW I PROTECT YOUR PERSONAL DATA

Security

I take the security of your personal data seriously. I minimise the personal data I collect and hold and it is stored on encrypted devices.

Data retention

I keep your data only for as long as I need it to fulfil my services and contractual obligations, to comply with HMRC or other legal requirements, to meet my legitimate interests or until you withdraw your consent.

Data sharing

In line with my legal obligations I may share personal data about clienets, consultants and contractors with HMRC. I share personal data with third parties who process data for the purposes of providing services to you, such as email providers and WordPress. I will share data with the appropriate authorities (e.g. police, law enforcement agencies and other parties) where I have a legal obligation, for example where data is required in relation to a criminal offence.

International transfers

I do not transfer your data outside of the UK.

YOUR RIGHTS

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

Your right of access – You have the right to ask me for copies of your personal information.

Your right to rectification – You have the right to ask me to rectify personal information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.

Your right to erasure – You have the right to ask me to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask me to restrict the processing of your personal information in certain circumstances.

Your right to object to processing – You have the the right to object to the processing of your personal information in certain circumstances.

Your right to data portability – You have the right to ask that I transfer the personal information you gave me to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact me via the form on my contact page if you wish to make a request.

HOW TO COMPLAIN

If you have any concerns about my use of your personal information, you can make a complaint to me using the form on my contact page.

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:           

Helpline number: 0303 123 1113

ICO website: https://www.ico.org.uk