National Cultural Data Observatory

Privacy Policy

Privacy Policy for the National Cultural Data Observatory (NCDO) Microsite

Last updated: November 2025

 

1. Who we are

This microsite, www.ncdo.org.uk, is operated by The Audience Agency (“we”, “our”, “us”), a UK non-profit organisation enabling better use of data for public benefit across the arts, culture, and heritage sectors.

We are the Data Controller for any personal data collected through this site.

 

 

2. About this microsite

The National Cultural Data Observatory (NCDO) is an initiative led by project partners including Centre for Cultural Value, Leeds University, MyCake, The Audience Agency, University of Sheffield, and Culture Commons.

This website is managed by The Audience Agency on behalf of the partnership.

Any personal data collected through this site will be processed by The Audience Agency to support NCDO communications, research engagement, and collaboration across these partners.

All partners handle data under written data-sharing agreements that comply with the UK General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

 

 

3. Anonymous access

You may browse this site without disclosing personal data.
Certain features – such as signing up for updates, expressing interest, or submitting a contact form – require you to provide information.

 

 

4. What data we collect

When you use our web forms, we may collect:

  • Name
  • Email address
  • Organisation and/or role
  • Area of interest in the cultural sector
  • Any optional comments or feedback

We also collect limited technical information (e.g. anonymised IP address, browser type, pages visited) to help us maintain and improve the site.

 

 

5. How we use your data

We use your information to:

Send updates about the NCDO project and related research;

Invite participation in consultations, events, and collaborations;

Respond to enquiries or requests for information;

Generate aggregated, anonymous statistics for research and reporting;

Meet accountability requirements to funders (e.g. ESRC).

We do not sell or rent your data to third parties.

 

 

6. Lawful basis for processing

Processing is based on one or more lawful grounds under UK GDPR:

Consent – where you opt in to communications or voluntarily provide data;

Legitimate interest – supporting research and sector development aligned to our charitable objectives;

Legal obligation – where processing is necessary to comply with funding or statutory requirements.

You may withdraw consent at any time by contacting us or using the unsubscribe link in emails.

 

 

7. Data sharing and processors

Your data is stored securely within The Audience Agency’s systems hosted in the UK or EEA.
We may share data only where necessary with:

NCDO project partners (LIDA, University of Leeds, University of Sheffield, De Montfort University, MyCake Ltd, Culture Commons) for joint research and engagement purposes;

Approved data processors providing secure web-form, hosting, email or analytics services (e.g. Dotdigital, Mailchimp or HubSpot if used in future).

All processing is governed by written agreements that meet UK GDPR requirements.
We do not disclose your data to any other organisation without your explicit permission, unless required by law.

 

 

8. Automatic collection and analytics

We use cookies and analytics solely to analyse website use and improve our services. We do not link technical logs to individuals.

Google Analytics

Google Analytics sets cookies to evaluate website use and compile reports for us. Information is stored by Google on servers in the United States and may be shared only where required by law. You can refuse these cookies in your browser settings or read more at google.com/intl/en/policies/privacy.

Embedded content

Pages may include embedded media (e.g. YouTube, Twitter, LinkedIn). These services may set their own cookies; we do not pass personal data to them.

 

9. Cookies

Cookies help websites function and gather usage statistics. We use only essential and performance cookies; none collect personally identifiable information.
You can manage or delete cookies via your browser settings (see aboutcookies.org). Blocking cookies may limit site functionality.

 

10. Security

We apply technical and organisational measures to protect your data against unauthorised access, misuse or loss. All staff and processors are bound by confidentiality agreements.

 

11. Data retention

Personal data is kept only for as long as necessary to support NCDO communications and project delivery or until you withdraw consent. It is then securely deleted or anonymised.

 

12. Your rights

You have the right to:

  • Access the data we hold about you;
  • Request correction or deletion;
  • Withdraw consent;
  • Object to processing;

 

13. Privacy compliance

This policy complies with:

UK Data Protection Act 2018

UK General Data Protection Regulation (GDPR)

UK Privacy and Electronic Communications Regulations

The Audience Agency is registered with the ICO (Registration ZA009719).

14. Contact

For privacy questions or concerns: hello@theaudienceagency.org