Who we are
We are Merlin’s Magic Wand Children's Charity, a charitable trust registered with the Charity Commission for England and Wales, with charity registration number 1124081. Merlin’s Magic Wand Trustees Limited is a company incorporated in England and Wales with registered number 06511344.
We are also registered with the Information Commissioner's Officer with registration number Z1996464. This registration covers the uses of personal information set out below.
How we collect your personal information and why
Merlin's Magic Wand (we, us, our, MMW) may need to collect personal information about you, and there are different ways that we might do so; this privacy notice tells you what to expect when we collect personal information on:
1.1 Visitors to our websites
Our website (including the application forms) is managed by Semantic Ltd. As part of the service provided by Semantic Ltd, they will help to maintain the security and the performance of our website by (i) encrypting data in transit and protecting user connections (ii) using third party scanning services to scan against known web attacks (iii) investigating site errors using third party New Relic and (iv) providing secure hosting services through Microsoft Azure. Semantic Ltd's privacy notice can be found at www.semantic.co.uk/terms-in-plain-english.aspx
You can block cookies at any time by activating the setting on your browser that allows you to refuse some or all cookies. However, if you do block cookies there may be parts of our website that you will be unable to access or that will not function properly.
We use the following types of cookies:
Strictly necessary cookies.
These are cookies that are essential for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
|Site Region||Cookie Name||Expiry||Description|
|Global||ARRAffinity||1 year||Azure hosting to tie a user to a specific hosting endpoint (so the user always gets to the same version of the site)|
|Global||dontshowCookieBar||1 year||Cookie we set to hide the notification bar after first visit|
|Global||ASP.Net_SessionID||1 year||Linking the user to a session to enable certain functionality to work (e.g. contact forms)|
They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
|Site Region||Cookie Name||Expiry||Description|
|UK & Worldwide||_ga||2 years||Google Analytics|
|UK & Worldwide||_gat_UA-5349541-1||30 minutes||Google Analytics session|
|UK & Worldwide||_gid||1 day||Google Analytics|
|US & AUS||__utma||2 years||Legacy Google Analytics|
|US & AUS||__utmb||30 minutes||Legacy Google Analytics|
|US & AUS||__utmc||1 year||Legacy Google Analytics|
|US & AUS||__utmt||1 minute||Legacy Google Analytics|
|US & AUS||__utmz||6 months||Legacy Google Analytics|
2.1.3 Third party services
Our website contains links to our social media pages. Any information you provide to us via social media (including messaging, "liking", "following" and other communications) is controlled by the social media network. We currently use:
We recommend that you read their privacy notices and contact them directly if you have any concerns regarding their use of your personal information. Contacting us (other than in respect of an application)
2.3 Contacting us (other than in relation to an application)
Our website provides you with different ways to contact us. All communications are handled, reviewed and responded to internally by us.
Once a year we will delete all communications that are more than 12 months old.
Please note, however, that:
2.4 Application – personal information about children
We only accept applications that relate to children between the ages of 2 and 18. As part of the application, we will ask you for information about the child that the application relates to. The personal information we collect about the child is treated slightly differently depending on what type of information it is.
2.4.1 Special categories of data
We collect personal information about a child during the process of applying for a day out from us. If you have made an application on behalf of a child on the basis of a disability or illness then you will have explicitly consented to our use of the personal information that relates to the child's condition and you will have the right to withdraw consent (explained below). This information is what makes the child special to us and includes the following personal information, which we refer to as special categories of data:
any other information relating to the child's disability, illness or adversity that you may decide to provide in support of your application.
As a registered charity we have to make sure that we are allocating days out properly and in accordance with our charity objectives. We need the special categories of data listed above so that we can ensure that the child qualifies for a day outin accordance with our eligibility criteria and so that we are complying with our charitable aims.
We understand how important special categories of data is, so we will not share the child's special categories of data with any other person other than our external auditors, who will only use it to monitor our compliance with our charitable aims.
We will destroy the child's special categories of data on the later of:
after an audit is carried out by our external auditors
this is usually no later than 2 years after the special categories of data is collected.
Please note that our external auditors are under a professional duty of confidentiality and will not share the special categories of data or use it for any other purpose.
In very limited circumstances, where an application is being made on a last minute basis, we may need to let the attraction the child will be visiting have the reason for the last minute application; this may include special categories of data relating to the child's disability or illness. This is to ensure that the attraction expedites arranging the day out for the child.
Child's personal information (other than their special categories of data)
We will also need to collect personal information about the child in order to process the application. These will be information that is in our legitimate interests to have, including the child's adversity (where the adversity is not a disability or illness) name and age, the school the child goes to and any organisations or charities that support the child's condition (where the school or organisation name do not identify the fact that the child has a disability or illness) and the child's preferred attraction to visit, in order to:
process the application with regard to a particular attraction.
Disclosure of personal information
As mentioned in Section 2 above, we may provide certain personal information to the attraction that the child will be visiting. If you have chosen an attraction that is located outside of the European Union, then this means that the personal information will also be transferred outside the European Union. In order to protect your personal information, we have taken steps to ensure that the attractions comply with our guidelines and policies on the protection of your personal information.
We will not usually disclose your (or the child's) personal information other than as already explained in Section 2 above. However, there may be circumstances where we need to share personal information other than as anticipated in Section 2 above. These include:
Keeping personal information secure
We know that you provide your personal information in good faith and expect it to be look after. This is why we take the security of your personal information seriously. This means that we have taken steps internally in order to ensure that our systems adequately protect your personal information. This includes:
You have rights in respect of your personal information and this Section explains a bit more about those rights that are applicable to what we do with your personal information and when you can exercise them. If you would like more information about any of your rights, please contact us on the details set out below.
5.1 Withdrawing consent
Where you have explicitly consented to us processing special categories of data, you can withdraw consent to our processing the special categories of data at any time during the application process. If you wish to withdraw consent, please do so in writing either by sending your request in writing to our contact details below. Unfortunately, since we need to use the special categories of data to prove we have used our charitable funds correctly, we are unable to continue with your application if you withdraw consent. Therefore, by withdrawing consent, you acknowledge and accept that you are also waiving your right to any grant of a day out from us.
5.2 Accessing your personal information
We want you to fully understand and be comfortable with how we use your personal information. You can contact us at any time to ask whether we process any personal information about you. If we do hold or use your personal information in any way, you have the right to access that personal information. All we ask is that:
Please allow us up to 30 days from receipt of your request in order to provide a response.
5.3 Requesting more information
We hope that you can understand that it is very difficult to cover all the possible ways in which we collect and use personal information. We have tried to be as clear and as open as we can. However, if you have any questions regarding our use of your personal information, we will be happy to give you peace of mind by answering any questions or providing any additional information that we can. If you do have any specific questions, or need anything explaining, please get in touch on the contact details below.
5.4 Additional rights
From 25th May 2018, you will also have some additional rights that you may exercise as set out here. We may publish a policy, from time to time, to explain how we will handle such requests and what you can expect from us when you make a request to exercise your rights. If we do publish any such policy, we will provide a link to it here. In each instance we may ask you to make your request in writing to the contact addresses below and provide verification of your identity.
(a) your personal information is no longer required for the purposes it was collected for (for example, we need your personal information to process an application;
(b) the collection, storage or use of the personal information by us is prevented by law; or
(c) we require your personal information for the purposes of establishing, exercising or defending a legal claim such as in the conduct of legal proceedings.
(a) for the time it takes us to verify the accuracy of your personal information where you have disputed its accuracy;
(b) where the collection, storage or use of the personal information by us is unlawful but you decide not to ask for erasure;
(c) where, we no longer need your personal information but you need them for the purposes of establishing, exercising or defending a legal claim;
(d) for the time it takes to determine whether we have an overriding legitimate ground to continue to process your personal information, where you have exercised your right to object to processing.
(a) where we are using that information based on our legitimate interests, and where we do not have compelling overriding grounds to continue to use your personal information; or
(b) at any time, where we use your personal information to send you the newsletter or any other type of direct marketing, in which case it will no longer be used for that purpose, but may use it for another lawful purpose.
You are important to us, and so is protecting your personal information. We have high standards when it comes to collecting and using personal information. For this reason, we take any complaints we receive from you about our use of your personal information very seriously and request that you bring any issues to our attention.
Where you are communicating with us for the purpose of making a complaint, we will only use your personal information to handle, investigate and respond to the complaint and to check on the level of service we provide. Where the complaint is about a member of MMW's team, we may have to disclose your identity to whoever the complaint is about. You may let us know that you don't want information that identifies you to be disclosed and we will try to respect your request; however, it may not be always possible to handle a complaint on an anonymous basis.
If you are unhappy, you can also contact the Information Commissioner's office to make a complaint directly.
Updating this privacy notice
We keep our privacy notice under regular review in order to ensure that it properly reflects our use of personal information. This privacy notice was last updated on 11 December 2017.
How to contact us
You can contact us by: