This statement explains how History360 (“we”, “our”, “us”) collects, uses and protects information across the Ipswich edition of our virtual heritage platform. We design our services with privacy in mind and comply with the UK General Data Protection Regulation (UK GDPR) and relevant UK data protection law.

1. Information We Collect

We minimise the data we collect. Personal data is not required to access the tour. Our website uses:

• reCAPTCHA to prevent misuse and unauthorised access.
• Google Analytics to monitor website usage and improve performance.
• Chatbot interaction logs (e.g., questions and timestamps) to improve historical accuracy. No sensitive personal data is stored.

2. How We Use Information

We use information solely to:

• Enhance website functionality and visitor experience.
• Monitor usage patterns and optimise performance.
• Support internal analytics and service improvement processes.

We do not sell, rent, or share user information for commercial purposes.

3. Cookies and Similar Technologies

We use essential cookies for security and limited analytics cookies to understand usage across the Ipswich virtual tour. These cookies do not store personally identifiable information.

4. Security

We apply industry-standard technical and organisational measures, including encryption in transit and restricted access controls. While no system is entirely risk-free, we continually monitor and strengthen our security posture.

5. Acceptable Use

Misuse of our website or services — including attempts to exploit the chatbot, disrupt operations, or breach applicable laws — will not be tolerated. We reserve the right to restrict access or take legal action where necessary.

6. Data Retention

Information collected for analytics or service improvement is retained only as long as necessary for those purposes, and is routinely reviewed and deleted under our retention policy.

7. Your Rights

Under UK GDPR, you may request details about how your data is processed or request deletion of information you have voluntarily provided. You can contact us via the details below.

8. Governing Law

This Privacy Policy is governed by the laws of England and Wales, with exclusive jurisdiction applying to the courts of England and Wales.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be published here with an updated effective date.

10. Contact Us

For questions about this Privacy Policy or data protection practices, please email us at support@example.com.

Effective Date: 12 November 2025