Skip Navigation

Privacy & Disclaimer

Your Privacy is important to us

Margam Country Park and The Orangery are owned and operated by Neath Port Talbot county borough council. Under the General Data Protection Regulation 2016 (GDPR) NPTCBC is the data controller for all the personal information which you provide to it via Margam Country Park and The Orangery and for the purposes of this privacy statement all references to Margam Country Park and The Orangery mean Neath Port Talbot County Borough Council. NPTCBC have a legal duty to protect any personal data we collect from you, to be clear about what purposes we are using it for and to make it easy for you to opt out from receiving communications from us at any time. In this context “personal data” refers to any living individual who can be identified and/or is identifiable from that data.

Our privacy policy tells you how and why we store your data, what type of data we hold and how it is used.

 

What Personal Data We Collect & How We Use It

Customer Data:

The information is gathered for the purposes of Margam Country Park and The Orangery creating a contract with customers and to finalise a booking for an event or for a Park Membership. When you purchase event tickets, or when you purchase products or services such as gift vouchers or memberships, we collect personal data such as your name, postal address, telephone number and email address. We also use your information to develop audiences, for marketing analysis and to influence event programing decisions. Furthermore we will use your data to enable us to let you know if there are any changes to our events or services (for instance, an event cancellation).

Online events are managed and sold through Eventbrite which is managed for NPTCBC by Eventbrite. Any bookings made over the telephone are processed through Global Payments. Park Membership payments are processed through Capita.

We do not have access to bank details on Eventbrite. We do not store bank details processed through Global Payments or Capita.

As a data controller the Council is required under GDPR to inform you which of the Article 6 GDPR data processing conditions it is relying upon to lawfully process your data. In regards to event ticketing/ Park Membership data please be advised that the condition we are relying on under Article 6 is that “the data processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.” (Article 6b GDPR).

We have contractual arrangements with Global Payments and Capita to ensure that your data is secure and protected at all times. Eventbrite safety transfers personal data from around the globe to our US based servers. Eventbrite is certified with the EU-US Privacy Shield Framework which means that they comply with a heightened standard when handling Personal Data transferred to the US from the European Union.

Voluntary Data and Marketing:

We may collect personal data from you when you voluntarily complete customer surveys, provide feedback, book for workshops and free events, and participate in competitions, to help us improve our services and events programme. Personal data collected for these specific purposes will be destroyed after 6 years.

We will also collect personal data about you, for marketing purposes, so that we can inform you of other events and services we think may be of interest to you, providing that you have opted in to receive marketing from us. This may include information about performances, exhibitions, volunteering opportunities, films, membership and anything else which form part of NPT Theatre’s regular activities.

We will only do this if you have given your consent when asked at the initial point of contact.

We use a third-party provider, My Emma, to deliver our marketing emails. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter.

You can unsubscribe to any of our emails at any time by clicking the unsubscribe link at the bottom of any of our emails.

Margam Country Park and The Orangery will not share your personal data for marketing purposes with any external companies.

As a data controller the Council is required under GDPR to inform you which of the Article 6 GDPR data processing conditions it is relying upon to lawfully process your personal data for voluntary and/ or marketing purposes. In this respect please be advised that the Article 6 condition we are relying on is that “the data subject has given consent to the processing of his/her data for one or more specific purposes.” (Article 6a GDPR).

Third Parties:

Many of the events at Margam Country Park and The Orangery are presented in partnership with other companies, organisations and event promoters. We will inform them of the number of tickets booked for one or more performances. We will not share your name, contact details or any of your personal data with them.

We do not sell personal details to any organisation for any purpose.

Privacy Statement

If you are a user with general public and anonymous access, the Margam Country Park Website does not store or capture personal information but merely logs the user's IP address, which is automatically recognised by the web server*. The system will record your e-mail address and other information if volunteered to us by you: This shall be treated as proprietary and confidential. It may be used for internal review and to notify you about updates to the Website. This privacy statement only covers the Margam Country Park Website at www.margamcountrypark.co.uk. This statement does not cover links within this site to other Websites.

Cookies

What is a cookie?

Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another  website that recognises that cookie. Cookies are useful because they allow a website to recognise a user’s device.

You can find more information about cookies at:

Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience. They can also help to ensure that adverts you see online are more relevant to you and your interests.

You may delete and block all cookies from this site, but parts of the site will not work.

Most web browsers allow some control of most cookies through the browser settings.

Cookies used on our site

Name Category Domain Source Details More info
CookieControl Necessary .www.margamcountrypark.co.uk Civic This cookie is set in order to remember the user's preferences in regards to cookies. www.civicuk.com/cookie-control/v8/documentation
ASP.NET_SessionId Necessary .www.margamcountrypark.co.uk NPT Set automatically by the software that drives our website, this cookie is essential to the correct working of our website as you browse from page to page, and will expire when your visit is over. social.technet.microsoft.com/wiki/contents/articles/19364.asp-net-web-applications-how-to-avoid-session-hijacking.aspx
__RequestVerificationToken Necessary .www.margamcountrypark.co.uk NPT Set automatically by the software that drives our website, this cookie is essential to the correct working of our website as you browse from page to page, and will expire when your visit is over.  
yourAuthCookie Necessary .www.margamcountrypark.co.uk NPT Set when you log in to password protected areas of the site.  
ORA_WWV_APP_XXX Necessary appsportal2.npt.gov.uk NPT Security cookie for applications where XXX is a numeric reference for NPT to distinguish services.  
nptLang Preferences .www.margamcountrypark.co.uk NPT NPT uses this to store your language setting.  
nptSitesQSLang Preferences .www.margamcountrypark.co.uk NPT Used to store the user's language choice  
__cfduid Analysis .crazyegg.com Cloudflare Used to identify individual clients (anonymously) behind a shared IP address and apply security settings on a per-client basis. Helps Cloudflare detect malicious visitors to our Customers’ websites and minimizes blocking legitimate users. It may be placed on the devices of our customers' End Users to identify individual clients behind a shared IP address and apply security settings on a per-client basis. It is necessary for supporting Cloudflare's security features. support.cloudflare.com/hc/en-us/articles/200170156-Understanding-the-Cloudflare-Cookies
_ceir Analysis .www.margamcountrypark.co.uk Crazy Egg Track whether a visitor has visited the site before www.crazyegg.com/cookies
_cer.s Analysis .www.margamcountrypark.co.uk Crazy Egg Visitor activity recording session unique ID, tracking host and start time www.crazyegg.com/cookies
_cer.v Analysis .www.margamcountrypark.co.uk Crazy Egg Visitor activity recording unique ID, visit time and visit count www.crazyegg.com/cookies
fr Social Media .facebook.com Facebook User and browser ID; timestamp; miscellaneous other data. Facebook's primary advertising cookie, used to deliver, measure and improve the relevancy of ads. www.facebook.com/policy/cookies
1P_JAR Analysis .google.com Google These cookies are used to gather website statistics and track conversion rates.  
ANID Analysis, Social Media .google.com Google The NID cookie contains a unique ID Google uses to remember your preferences and other information, such as your preferred language (e.g. English), how many search results you wish to have shown per page (e.g. 10 or 20), and whether or not you wish to have Google’s SafeSearch filter turned on. policies.google.com/technologies/types?hl=en-GB
CONSENT Analysis, Social Media .google.com Google Stores the user’s cookie consent state for the current domain.  
NID Analysis, Social Media .google.com Google The NID cookie contains a unique ID Google uses to remember your preferences and other information, such as your preferred language (e.g. English), how many search results you wish to have shown per page (e.g. 10 or 20), and whether or not you wish to have Google’s SafeSearch filter turned on. policies.google.com/technologies/types?hl=en-GB
_ga Analysis .margamcountrypark.co.uk, .objective.co.uk Google Analytics Used to distinguish users. developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
_gali Analysis .margamcountrypark.co.uk, .objective.co.uk Google Analytics Used by Google Analytics to determine which links on a page that are being clicked. developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
_gat Analysis .margamcountrypark.co.uk, .objective.co.uk Google Analytics Used to throttle request rate. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_. developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
_gid Analysis .margamcountrypark.co.uk, .objective.co.uk Google Analytics Used to distinguish users. developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
_hjid Analysis .npt.gov.uk HotJar This cookie is set when the customer first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies
_hjIncludedInSample Analysis .npt.gov.uk, .appsportal2.npt.gov.uk HotJar web analytics functionality and services from Hot Jar help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies
JSESSIONID Necessary .nr-data.net, ip.e-paycapita.com NPT a cookie generated by Servlet containers like Tomcat or Jetty and used for session management in J2EE web application for HTTP protocol. javarevisited.blogspot.com/2012/08/what-is-jsessionid-in-j2ee-web.html
ORA_WWV_APP_323 Necessary appsportal2.npt.gov.uk NPT Oracle Application Express session cookie values  
SF_USERS Necessary appsportal2.npt.gov.uk NPT Oracle Application Express session cookie values  
lang Social Media cdn.syndication.twimg.com Twitter Helps us to determine the language settings of the user’s browser, to better serve relevant information in the right language.  
player Social Media .vimeo.com Vimeo We use Vimeo to embed videos onto our website. These cookies are used by Vimeo to collect analytics tracking information. vimeo.com/cookie_policy
vuid Social Media .vimeo.com Vimeo Vimeo Analytics unique id. We use Vimeo to embed videos onto our website. These cookies are used by Vimeo to collect analytics tracking information. vimeo.com/cookie_policy
GPS Social Media .youtube.com Youtube / Google Registers a unique ID on mobile devices to enable tracking based on geographical GPS location. policies.google.com/privacy
IDE Social Media .doubleclick.com Youtube / Google One of the main advertising cookies on non-Google sites is named ‘IDE‘ and is stored in browsers under the domain doubleclick.net. policies.google.com/technologies/types?hl=en-US
PREF Social Media .youtube.com Youtube / Google Registers a unique ID that is used by Google to keep statistics of how the visitor uses YouTube videos across different websites. support.google.com/youtube/answer/171780?hl=en-GB
developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=en-GB
VISITOR_INFO1_LIVE Social Media .youtube.com Youtube / Google Tries to estimate the users' bandwidth on pages with integrated YouTube videos. support.google.com/youtube/answer/171780?hl=en-GB
YSC Social Media .youtube.com Youtube / Google Registers a unique ID to keep statistics of what videos from YouTube the user has seen. support.google.com/youtube/answer/171780?hl=en-GB

We use Google Analytics and Crazy Egg to collect information about how people use this site. We do this to make sure it is meeting its users’ needs and to understand how we could do it better. Google Analytics stores information about which pages you visit, how long you are on the site, how you got here and what you click on. This information cannot be used to identify you and we do not allow Google to use our analytics data. Crazy Egg stores information about where you click within a page. Again, the information cannot be used to identify you and we do not share it with anyone

To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.

Disclaimer

The Margam Country Park Website and materials relating to Neath Port Talbot County Borough Council information, products and services (or third party information, products and services), are provided 'as is' without any representation or endorsement made and without warranty of any kind whether express or implied, including but not limited to the implied warranties of satisfactory quality, fitness for a particular purpose, non-infringement, compatibility, security and accuracy. We do not warrant that the functions contained in the material contained in this site will be uninterrupted or error free, that defects will be corrected, or that this site or the server that make it available are free of viruses or represent the full functionality, accuracy, reliability of the materials. In no event will we be liable for any loss or damage including, without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from use or loss of use of, data, or profits, arising out of or in connection with the use of The Margam Country Park Website.

© Margam Country Park