WHAT INFORMATION DO WE COLLECT?
Personal information means any information about an individual from which that person can be identified. It does not include data where the identity has been removed, i.e. anonymous data. We may collect, use, store and transfer different kinds of personal information about you which we have grouped together as follows:
Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
Contact Data includes billing address, delivery address, email address and telephone numbers.
Financial Data includes bank account and payment card details.
Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
Usage Data includes information about how you use our website, products and services.
We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.
IF YOU FAIL TO PROVIDE PERSONAL INFORMATION
Where we need to collect personal information by law, or under the terms of a contract we have with you and you fail to provide that information when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with a ticket). In this case, we may have to cancel a product or service you have with us but we will notify you if this is the case at the time.
HOW DO WE COLLECT YOUR INFORMATION?
Third party organisations
We use social media to broadcast messages and updates about events and news. On occasion we may reply to comments or questions you make to us on social media platforms. You may also see adverts from us on social media that are tailored to your interests.
Depending on your settings and the privacy policies used by social media and messaging services like Facebook, Instagram or Twitter, we may receive non-personally identifying demographic or analytical information from these services that enables us to better understand the reach and effectiveness of our advertising.
We use social media to broadcast messages and updates about events and news. On occasion we may reply to comments or questions you make to us on social media platforms. You may also see adverts from us on social media that are tailored to your interests. Depending on your settings and the privacy policies used by social media and messaging services like Facebook, Instagram or Twitter, we may receive non-personally identifying demographic or analytical information from these services that enables us to better understand the reach and effectiveness of our advertising.
Information available publicly
This may include information found in places such as Companies House your biography on your work website or information that has been published in articles/ newspapers.
DISCLOSURE OF YOUR DETAILS TO THIRD PARTIES
There are certain circumstances under which we may disclose your personal information to third parties. These are as follows:
To our service providers who process data on our behalf and on our instructions (for example our ticketing system software provider). We require all third parties to respect the privacy of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies).
To specific, named event organisers whose performances you have attended. In these cases, we will always ask for your explicit consent before disclosing your personal information.
We may share anonymised personal information with other organisations, who use this to analyse our audience development, ticket sales and self-generated funding to better understand our customers. We will always ask for your consent to pass on personal data to other organisations.
We do not sell personal details to third parties for any purpose.
Under the DPA you have the following rights:
to obtain access to, and copies of, the personal data that we hold about you
to require that we cease processing your personal data if the processing is causing you damage or distress
to require us not to send you marketing communications
Once the GDPR takes effect in May 2018, you will also have the following additional rights:
to require us to correct the personal data we hold about you if it is incorrect
to require us to erase your personal data
to require us to restrict our data processing activities (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal)
to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal data to another data controller
to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights
Please note that these rights are not absolute, and we may be entitled to refuse requests where exceptions apply.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.