Privacy & Data Protection

1. Who We Are

History360° is the organisation responsible for operating the History360° digital heritage platform and the History360° Ipswich experience.

For privacy and data protection enquiries, please use the contact details provided at the end of this notice.

2. Information We May Collect

You can generally explore the History360° Ipswich experience without creating an account or providing personal information.

Depending on how you interact with the service, we may process limited information such as:

• Technical information, such as IP address, browser type, device information and information relating to requests made to the website.
• Usage information, such as pages or features accessed and general interaction with the experience.
• HistoryBot interactions, including questions submitted to the AI heritage guide and associated technical information such as timestamps.
• Information you voluntarily provide, for example when you contact us by email or provide feedback or historical material.

We do not require visitors to provide sensitive personal information in order to explore the experience.

3. HistoryBot & AI Interactions

HistoryBot allows visitors to ask conversational questions about historical places and subjects within the History360° Ipswich experience.

Questions submitted to HistoryBot may be processed by the systems used to operate the service. Depending on the platform configuration, interaction information may be retained for purposes such as maintaining the service, investigating technical issues, improving responses and developing the History360° platform.

Visitors should avoid submitting unnecessary personal information, confidential information or sensitive personal information when interacting with HistoryBot.

HistoryBot is an interpretive digital heritage tool. It should not be used as a means of submitting confidential personal information or information that you would not wish to be processed by an online service.

4. Why We Use Information

Personal information may be processed for the following purposes:

• To operate and provide the History360° service.
• To maintain the security and reliability of the platform.
• To prevent misuse, spam and attempts to compromise the service.
• To understand how the experience is being used.
• To investigate technical problems and improve functionality.
• To improve the quality and reliability of HistoryBot.
• To respond to enquiries and communications sent to us.

5. Lawful Basis for Processing

Where the UK GDPR applies, we process personal information using the lawful basis appropriate to the particular processing activity.

This may include legitimate interests where processing is necessary to operate, secure and improve the History360° platform and those interests are not overridden by the rights and interests of individuals.

Where consent is required, such as for certain non-essential cookies or similar technologies, we will seek consent before carrying out the relevant processing.

6. Cookies & Analytics

History360° may use essential cookies or similar technologies required for the operation and security of the website.

Where non-essential analytics or similar technologies are used, they will be deployed in accordance with applicable UK privacy and electronic communications requirements, including obtaining consent where required.

The specific cookies and technologies used may vary as the platform develops. Where appropriate, information about these technologies and the choices available to visitors will be provided through the site's cookie controls.

7. Third-Party Services

Some History360° functionality may rely on carefully selected third-party service providers. These may provide services such as security, spam prevention, analytics, hosting, infrastructure or AI processing.

Where third-party providers process personal information on our behalf, we take appropriate steps to ensure that the processing is carried out in accordance with applicable data protection requirements.

The services used by a particular History360° tenant may vary depending on the features enabled for that experience.

8. Data Sharing & International Transfers

We do not sell personal information.

Personal information may be shared with service providers where this is necessary to operate the History360° platform, provide specific functionality, maintain security or fulfil another legitimate purpose described in this notice.

Some service providers may process information outside the United Kingdom. Where this occurs, appropriate safeguards will be used where required by applicable data protection law.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, taking into account operational, security, legal and regulatory requirements.

Retention periods may therefore differ depending on the type of information and how it is used.

Where a specific retention period applies, this will be documented within our operational data retention arrangements and reviewed periodically.

10. Security

We use appropriate technical and organisational measures designed to protect information against unauthorised access, alteration, disclosure, loss or destruction.

These measures may include encrypted connections, access controls, system monitoring and appropriate restrictions on access to operational information.

No internet-based service can be guaranteed to be completely secure. We nevertheless continually review and improve the security of the History360° platform.

11. Your Data Protection Rights

Depending on the circumstances and the lawful basis for processing, UK data protection law gives individuals a number of rights in relation to their personal information.

These may include the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of personal information in appropriate circumstances.
• Request restriction of processing in certain circumstances.
• Object to certain processing.
• Request portability of information where the relevant legal conditions apply.
• Withdraw consent where processing is based on consent.

Not all rights apply in every circumstance. The applicable rights depend on the nature and lawful basis of the processing.

To exercise a relevant right, please contact us using the details provided below.

12. Children & Educational Use

History360° may be used in educational settings and may therefore be accessed by children and young people.

We do not require children to create accounts or provide personal information simply to explore the public heritage experience.

Visitors should avoid submitting personal or sensitive information through HistoryBot or other interactive features.

13. Acceptable Use & Security

The platform may record technical information necessary to identify and investigate misuse, security incidents or attempts to disrupt the service.

Attempts to exploit the service, circumvent security controls, introduce malicious code or otherwise misuse the platform may result in restricted access or other appropriate action.

14. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we can investigate and attempt to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

15. Changes to This Privacy Notice

This privacy notice may be updated as the History360° platform, its features and the services supporting it develop.

Where changes are significant, we will take appropriate steps to bring them to users' attention.

16. Contact Us

If you have questions about this privacy notice, wish to exercise a data protection right, or have concerns about how information is handled within the History360° platform, please contact us at:

hello.history360@outlook.com