Cookies

Data Protection and Privacy Statement

1. Introduction

People’s Collection Wales (PCW) is a partnership between The National Library of Wales, Amgueddfa Cymru - Museum Wales, and the Royal Commission on the Ancient and Historical Monuments of Wales.

We are committed to protecting your privacy and handling your personal information in a fair, lawful, and transparent way. This statement explains what information we collect, how we use it, and the steps we take to safeguard it.

We have a legal duty to protect any personal data we collect. We use leading security technologies and encryption to protect your information, and we only collect what is necessary to operate and improve our services.

2. How We Use Your Information

We will not use your information for any purpose other than:

  • The management and maintenance of the website and archives
  • Communicating with you about your account, contributions, or service updates.

We work with trusted third-party providers to help deliver our services. These providers act only on our instructions and are not permitted to use your data for any other purpose.

3. Your Rights

Under UK data protection law, you have the right to:

  • Access the information we hold about you.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of your information where we are relying on consent or legitimate interest as our legal basis for processing.

If you have any concerns about how we handle your data, please contact us using the details below. You can also learn more about your rights on the Information Commissioner’s Office (ICO) website in the guide Your Data Matters.

4. Contacting Us

People’s Collection Wales
c/o The National Library of Wales
Aberystwyth, Ceredigion SY23 3BU

5. Our Use of Cookies

Cookies are small text files placed on your device to make our website work and to help us understand how it is used.

We use:

  • Essential cookies – needed for basic site functionality.
  • Performance and analytics cookies – to understand visitor usage and improve the service.
  • Video streaming cookies – set by Mux when you watch videos.

You can manage or delete cookies in your browser settings. For more information, see All About Cookies.

Cookies Used on This Website

Cookie ProviderNamePurposeExpiresCategoryCloudflare_cfduidCloudflare – required for security and content delivery1 yearEssentialGoogle Analytics_ga, _ga*, _gid, _gat, __utma, __utmt, __utmb, __utmc, __utmz, __utmvAnalytics cookies help us to improve our websites. They collect information about how visitors use our websites. We use this information to monitor the effectiveness of the site and its popularity. We do this by analysing the data and compiling reports and recommendations based upon it. The information is collected in a way where we can’t identify any individuals.2 yearsNon-essential (requires consent)Drupal Session IDSESS[hash] or SSESS[hash]Essential cookie used to maintain a logged-in user’s session. Required for authentication and secure access to user-specific content.End of sessionEssentialSession cookiePHPSESSIDGeneric PHP session cookie used to maintain temporary session data during a visit. May be set by certain server processes.End of sessionEssential

6. Third-Party Services We Use

  • Google Analytics – to collect anonymised visitor behaviour data.
  • Mux – to process and deliver video content. When you watch a video, Mux collects anonymised playback data (such as device type, browser, playback events, and quality) to monitor performance. Some of this data may be transferred to and processed in the United States under safeguards including the EU–US Data Privacy Framework and Standard Contractual Clauses.
  • Mailchimp – to deliver our email newsletter and monitor engagement.
  • Social media platforms (Facebook, Google, Twitter/X) – if you use sharing functions on our site, cookies from these platforms may be set.

Links to their privacy policies:

7. Data Security and Monitoring

We use security monitoring tools and anti-malware services to protect our systems, emails, and files from threats such as viruses, malicious software, or other unlawful content. We expect all users to ensure that any content they submit or email they send complies with the law.