Privacy Policy

Your Privacy

The Darwin, Shrewsbury, is committed to protecting your personal data and respecting your privacy. This privacy notice outlines the types of personal information we collect, how we use and safeguard it, and your rights under the UK General Data Protection Regulation (UK GDPR).

For more information about the UK GDPR, please visit the Information Commissioner’s Office (ICO) at www.ico.org.uk.

About Us and Contact Information

The Darwin Centre, Shrewsbury is the data controller responsible for your personal data.

Scheme Management: The Darwin is managed by Shropshire Council.
Data Management: Marketing data is processed on behalf of The Darwin by AL Marketing, acting as a data processor.

Contact Address:
The Darwin Shopping Centre
Raven Meadows
Shrewsbury
Shropshire
SY1 1PL

For privacy-related enquiries, please contact us at: info@shrewsbury-shopping.co.uk

What Personal Information Do We Collect?

We may collect and process various types of personal data, depending on how you interact with us:

  • Identity and Contact Information – including name, address, email address, phone number.
  • Marketing and Communication Preferences – such as your preferences for receiving information about news, events, and offers.
  • Technical Data – IP address, browser type, usage data, and cookies (see our https://www.shrewsbury-shopping.co.uk/cookie-policy/).
  • CCTV Footage – for security purposes when you visit the premises.

How Do We Collect Your Data?

We collect personal data in the following ways:

  • When you interact with us via our website, email, or in person.
  • When you sign up to newsletters, competitions, or events.
  • Through cookies and similar technologies (see Cookie Policy).
  • Via CCTV cameras operating in and around The Darwin for safety and security.
  • From third-party providers, such as analytics or marketing tools (where lawful).

How We Use Your Personal Data

We process your personal data for the following purposes:

  • To communicate with you and respond to your queries.
  • To send you updates, offers, or event details (where you have consented).
  • To administer competitions and promotions.
  • To maintain the safety and security of the centre and its visitors.
  • To comply with legal obligations and resolve disputes.

Lawful bases for processing include consent, contract performance, legal obligation, and legitimate interests.

We will only send you marketing communications if you have actively opted in. You can unsubscribe at any time by clicking the link in our emails or contacting us.

CCTV Usage

CCTV is used to:

  • Ensure the safety and security of visitors and staff.
  • Prevent and detect crime.
  • Support law enforcement or insurance investigations if required.

Footage may be shared with the police, insurers, or legal representatives in the event of a claim or incident.

Who We Share Your Data With

We may share your data with:

  • AL Marketing, our marketing agency, acting under contract and data processing agreements.
  • Trusted third-party service providers, such as email or hosting platforms, analytics services, and security providers.
  • Law enforcement agencies, where required by law or in relation to criminal investigations.

All partners are required to comply with UK data protection laws. We do not sell your data or transfer it outside the UK/EEA without appropriate safeguards in place.

How We Protect Your Information

We implement appropriate technical and organisational measures to safeguard your personal data. These include:

  • Secure servers and access controls.
  • Staff training and confidentiality agreements.
  • Encryption and password protections.
  • Regular data protection reviews.

In the event of a data breach, we will notify you and the ICO where legally required.

Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to meet legal, contractual, or reporting obligations.

Data Type Retention Period
Email marketing data (e.g. e-newsletter sign-up) Indefinitely, until you request removal from the mailing list.
CCTV footage Typically retained for no more than 30 days, unless required for investigation.
Contact/enquiry submissions Retained for up to 12 months after resolution or final contact.
Competition entries and event sign-ups Retained for up to 6 months following the end of the activity or event.

You may request removal from the email mailing list at any time by:

  • Clicking ‘unsubscribe’ in the latest marketing email from The Darwin.
  • Contacting the centre using the details provided above.

We conduct annual reviews of stored data to ensure it is not kept longer than necessary.

Your Rights Under UK GDPR

You have rights under the UK GDPR, including to:

  • Request access to your personal data.
  • Request correction of inaccurate data.
  • Request deletion of your data (“right to be forgotten”).
  • Object to processing or request restrictions.
  • Withdraw consent at any time (e.g. marketing opt-out).

To exercise your rights, contact us via info@shrewsbury-shopping.co.uk. We aim to respond within one month.

Complaints and Further Information

If you have any concerns or complaints about our use of your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
? www.ico.org.uk