Privacy Policy

The Lincolnshire Aviation Heritage Centre uses a secure payment system through protx.  Your card, address and personal details will not be shared with any other party. 


Lincolnshire Aviation Heritage Centre Privacy Policy

Who are we?

This is the privacy policy of Panton Bros Museum Unlimited trading as The Lincolnshire Aviation Heritage Centre.  Address: East Kirkby Airfield, Nr Spilsby, Lincs, PE23 4DE  Contact no 01790763207. 

The purpose of this policy

This privacy policy aims to inform you how the Lincolnshire Aviation Heritage Centre collects and processes your personal data, including any data you may provide when joining our mailing list, making a purchase from us, making an enquiry or engaging with us in other ways. 

Our website is not intended for children and should not be used by those under the age of 16. 

The type of data we collect about you

Personal data is any information about an individual which could make them identifiable.  We may collect and store the following types of information about you:

�        Identity data: your first name, last name, date of birth, gender, job title and employer

�        Contact data: this includes a billing address, delivery address, email address and contact telephone numbers

�        Financial data: includes bank account details and card details (when payments are made online card payments are handled by Sagepay, a secure payment gateway)

�        Transaction data:  includes details of payments to and from you and details of products and services purchased from us.

�        Technical data: includes the IP address, your log in data, browser type and version, time xone setting and location, browser plug in types and versions, operating system and platform and other technology on the devices used to access our website. 

�        Profile data: includes your username and password and purchases or orders made by you.

�        Usage data: includes information on how you use our website products and services

�         Marketing and communications data: includes your preferences in receiving marketing from us. 

We do not routinely collect special categories of personal data(this includes details of race, ethnicity, religious beliefs, sexual orientations, political views).  Nor do we collect information about criminal convictions. 


How is your personal data collected?

We use different methods of collecting information from you. 

�         Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by our websites, post, phone, email or otherwise, including face-to-face contact. This includes personal data you provide when you: a) enquire about or order our products or services or b) request marketing to be sent to you; c) enter a competition, promotion or survey; or d) give us feedback

�         Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our cookie policy on our website for further details.

�         Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below:
� Technical Data from the following parties: a) analytics providers such as Google, some of whom are based outside the EEA;
b) advertising networks, some of whom are based outside the EEA; and
c) search information providers, some of whom are based outside the EEA.


How will we use your information?

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

�         Where we need to respond to an enquiry from you.

�         Where we need to fulfil an order you have placed with us for a product or service

�         Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

�         Where we need to comply with a legal or regulatory obligation. 

�        The information you provide to us will also be used for marketing and keeping you updated with news through our email newsletter (if you agree). 

The lawful basis of this processing is:

Article 6.1 (a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

Article 6.1 (b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

Article 6.1 (c) processing is necessary for compliance with a legal obligation to which the controller is subject;

Article 6.1 (f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.  

What is our legitimate interest for holding your information? 

We may need to keep you informed with any updates of information to do with orders placed; being able to process any queries you may have to do with any orders placed; any news and events which may be of interest to you and any new products you may be interested in. 
For example if you have bought tickets to our air show we may need to update you closer to the event with travel information. 

We do not share your information with any other organisation. 

How long will we keep your information for?

We will keep your information for as long as it is required.  Online and telephone orders are usually kept in paper form for up to one year unless the purpose for the information requires us to keep it longer.  For example if you have a taxy ride booked 18 months in advance of the order being placed your personal information will be kept until that taxy ride takes place.  The details of the orders on our content management system of our website are not deleted.   

If you agree to be on our mailing list we will hold your personal information on our mailing list unless you asked for it to be removed under the �Right to be forgotten'. 

What are your rights in respect of data processing?

In some circumstances you have rights to find out what personal data information we hold about you. 

What we may need from you : We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Your right to access: You have the right to know what information we have about you and how we use it.  To receive this information you need to ask us verbally or in writing for a Subject Access Request and we will respond with the information within one month. 

Your right for rectification: The GDPR includes a right for individuals to have inaccurate personal data rectified, or completed if it is incomplete. You can make a request for rectification verbally or in writing. We will respond to your request within one calendar month


Your right for erasure/right to be forgotten:

You can request for the personal information we hold about you to be erased.  You can do this verbally or in writing and we will respond to your request within one month. 


Right to restriction:

You are can request for a restriction of how we hold your personal data so that we can hold it but not use it.  You can request this verbally or in writing and we will respond to your request within one month. 


Right to object:

You have the right to object to your data being used in certain ways, for example for direct marketing.  You can make an objection verbally or in writing and we will respond within on calendar month. 


Right to data portability:

 The right to data portability gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits this data directly to another controller.  You can request this verbally or in writing and we will respond to your request within one month. 


You can object to your personal data being used by us either verbally or in writing or you can unsubscribe from our mailing list using the unsubscribe button on the email


What Cookies does our website use? 


Cookies List




Duration of Storage




Performance tracking across the website


8 months

This cookie remembers the preference (such as zoom or volume levels) of a user when interacting with a specific feature on a web page (google maps, youtube video etc).


1 year

Used by google to track a users actions after viewing or clicking on an advert. This allows google to track the effiency of their adverts and helps target adverts to the user.



Registers a unique ID on mobile devices to enable tracking based on geographical GPS location.


2 years from set/update

Used to distinguish users and sessions. This cookie is created whenever there isnt alread a __utma cookie set. It will update every time there is information sent to Google Analytics


30 min from set/update

Used to distinguish users and sessions. This cookie is created whenever there isnt alread a __utma cookie set. It will update every time there is information sent to Google Analytics


End of browser Session

Used in conjunction with __utmb cookie to determine if the user is in a new session or visit to the website


10 min

Used to throttle request rate


6 months from set/update

Stores the traffic source or ad campain that the user used to access your website.


1 year



1 year



1 year




Used to check if the user's browser supports cookies.



It is possible to make complaints to a supervisory authority which in the United Kingdom is the ICO and this can be done through their website