GDPR (General Data Protection Regulation)

  1. The personal data that Cadw is collecting is necessary to administer your membership contract with Cadw and provide you with membership benefits. Your personal data will only be kept for 12 months after the expiry date and then anonymised for auditing, reporting and evaluation purposes - no personal data will be retained after this time. During these 12 months you will be contacted occasionally by post or e-mail with information on membership renewal only.

  2. The data controller is Cadw, Welsh Government. If you have any questions please e-mail and we will respond to you within 10 working days. If you want to contact the Welsh Government with a query or concern about how your personal data is being used please contact:

  3. The expiry date is when your membership has run for 12 months, or the date your membership is cancelled. Members will receive a renewal letter and form to renew after 12 months. Those paying by Direct Debit will receive a notification letter to inform you that your membership will be renewed automatically unless you instruct us otherwise, prior to the expiry of the membership.

  4. Cadw will share your data with Equinox, a third party agency, to administer Cadw membership.

  5. You have the right to:

    • access the personal data that we are processing about you
    • require us to rectify inaccuracies in that data
    • object to or restrict processing (in certain circumstances)
    • ask for your data to be erased (in certain circumstances)
    • obtain and reuse your personal data for your own purposes across different services (in certain circumstances)
    • lodge a complaint with the Information Commissioners Office (ICO) who is our independent regulator for data protection

  6. For terms and conditions of your membership please visit:
  • Changes to this privacy policy

If this privacy policy changes in any way, we will place an updated version on this page. Regularly reviewing this page ensures you are always aware of what information we collect, how we use it and under what circumstances, if any, we will share it with other parties.



Your data is in safe hands

The personal data we collect will be processed to administer your membership contract. Cadw will not use it for any other purpose. Your data will be kept for the life of your membership and 12 months after it expires.