Introduction
The Corn Exchange Theatre Company would like to describe your rights as a customer to our venue and give information of how we collect your data and use it within our organisation.
Our company is committed to abiding by all laws and this includes the Data Protection Act 2018 which incorporates the EU General Data Protection Regulation (GDPR).
By using our website and attending our venue you consent to our collection and use of your Information as described in this notice. If we change our notice, policy and/or procedures, we will post those changes on our website to keep you aware of what Information we collect, how we use it and under what circumstances we may disclose it. Your continued use of the website or attendance at our venue after this notice has been amended shall be deemed to be your continued acceptance of this notice, as amended. We encourage you to bookmark this Web page and review this notice regularly.
Who we are
The Corn Exchange Theatre Company is a registered charity (charity number 1092736) providing entertainment and access to arts for the local community.
If you need to contact someone to talk about personal data privacy you can contact our Data Protection officer at manager@stamfordcornexchange.co.uk.
Support us
We do not receive any annual government funding so we rely on donations to support investment in our building and the expansion of our charity core objectives.
You can opt in to receive information about supporting us when you register on our website. You can also tell our Box Office team or one of the team over the phone or in person.
We will keep you up to date on the different ways that you can support us. We will also send you information on relevant campaigns, how you can make a difference and invitations to supporter events.
Personal Information
Personal information or personal data is data which identifies a person (you) from the information provided or if combined with other information that we may have access to.
In summary, personal data is:
• Name and address
• Mobile phone
• Date of birth
• Email address
• Bank account details
• An IP address
In addition, there are “special categories” of personal data which means that the data, in law, is considered more sensitive, such as:
• Personal data related to your health
• Genetic data
• Religious beliefs
In the event that we need to collect Special categories information from you we will inform you as to why and ask for your permission. It maybe for wheelchair access or customer requested support.
Personal information we collect
When you visit and use our website or attend events at our venue you may provide us with, or we may collect, your information such as your address, email address and other personal information that is required to provide you with a quality service.
• When you register on our website to purchase tickets or receive an e-newsletter or press release, you may provide us with certain information including your name, email address, screen name, password, and some financial details.
• If you sign up to receive an e-newsletter, you may provide us with contact information (e.g., email, telephone and/or or physical address)
• You may provide us with Information in the course of email, customer support interactions and surveys.
We collect and maintain information that you provide to us during your use of the website or attendance at events.
We may require this information to inform you of show cancellations or rescheduled shows.
You have control over the information you provide to us, but you must understand that if you choose not to share some details with us, it may stop you from gaining access to a service or limit features that you can use on our website and the information we are able to send to you.
You may provide your information to us via a number of routes.
The information you provide to us, may come from:
• Information you have provided whilst registering for, or buying a product
• Forms on the website or on paper which you have completed
• Information provided over the telephone
• Information you have provided via email correspondence with us
We only use personal data gathered from other sources if it is legal to do so, and always with the intention of being responsible with that information. We may use such information to verify other information about you, for example to verify your email address to send you tickets or information which you have requested. If, however you believe that we have misused your personal data, please contact us and we will resolve your problem as swiftly as we can. As an independent company we do not share your data with any third party.
We will use your personal information to fulfil any contract we have with you, which will usually be when you order tickets from us and have the expectation that we will use your information to ensure you receive the right tickets at the right time.
Typically, we will use your information as necessary and as appropriate for our business purposes, including:
• administer your account where you have opened an account with us;
• register you and provide you access to the website;
• respond to enquiries or requests that you direct to us;
• fulfil your requests for tickets, e-newsletters or products we sell;
• send communications and administrative emails about the website, or our events.
We may use your information for contacting you about events and services where we have permission to do so and where the law allows this communication to take place.
• send service messages to request feedback on customer experience
• analyse, benchmark and conduct research on user data and user interactions with the website and our venue.
• in accordance with government guidance for NHS Test and Trace purposes
Information we collect through our website
When you use our website, information may be collected by us through our use of cookies, pixels, beacons, log file and other technologies. This information allows us to deliver more helpful information, services and advertisements. Our Cookie policy will give you more details.
Children under 13
We do not intentionally collect any information on children under 13 years of age. If you become aware that your child has provided us with personal information without your consent, please contact us at manager@stamfordcornexchange.co.uk to ensure this information becomes deleted.
We will not share your personal data unless there is a valid legal reason or need to do so.
There are some organisations with which we work where we must share your personal details to provide the services you require.
We may disclose your personal information if we are under a duty to disclose or share your information to comply with any legal obligation or in order to enforce or apply or fulfil our terms and conditions and other agreements or protect the rights, property, or safety of our customers, our group companies or others. This includes exchanging information with other companies and organisations for fraud protection and credit risk reduction.
It is important for us that you understand who your information may be shared with and the seriousness with which we take the confidentiality of your personal data. If you have questions about such uses of your personal data, we will be happy to tell you more.
We will not share your personal data unless there is a valid legal reason or need to do so.
Storage and security of personal information
Your personal information is kept secure at all times and we use the latest technology to ensure that all our data is kept confidential, especially personal information that we hold.
We will only keep your personal data for as long as there is a legitimate requirement to do so.
Your information may be kept in a number of places, all of which comply with data protection requirements. We use cloud providers and online application providers to help us run our business and information we manage may be transferred and store to destinations outside of the UK and Europe. All reasonable steps are taken to ensure that your personal information is managed and secured appropriately, at all times.
Confidentiality agreements, contracts and sharing agreements are all documents we use to ensure that partners, suppliers and third parties are all managing your personal data responsibly, transparently, fairly and within the law.
All transfers of personal information regardless of destination will comply with the law, at all times.
We will keep your personal data for a length of time that is in line with our need to identify you and to provide goods or services to you. If you are a customer, then we will keep personal information about you for our legitimate business purposes, such as ensuring we can identify you in the case of a complaint, to identify payments and within our finance systems for auditing and accounting purposes. We will also keep the personal information you have provided for marketing purposes for a period of time that allows us to contact you with offers, if you have agreed to be contacted, and to ensure that we do not contact you inadvertently if you have refused marketing contact.
How do I request what information you hold on me?
You have the right to request a copy of the Information that we hold about you. We may require additional verification depending on the nature of your request.
Please make a written application preferably by email to:manager@stamfordcornexchange.co.uk. or you can write to: The Manager, Stamford Corn Exchange Theatre Company, Broad Street, Stamford PE9 1PX.
What are your rights?
Under data protection legislation from the UK and Europe, you have rights over how your personal data is used. The main rights related to your personal data are listed below, but there are others which you may like to find out more about by looking up the Data Protection Act 2018 or the General Data Protection Regulation.
The right of transparency (right to be informed)
You have a right to be informed about the collection and use of your personal data. We have an obligation to be transparent and provide you with this information freely and that it is easily understood. This notice serves to provide information on collection and use of personal data, and you may contact us if you want to know more about any aspect of how we handle your personal information.
The right of access to your information
You have a right to have access to the information we hold about you and to verify that we are using your personal data lawfully. If asked we will provide confirmation of what personal data we hold, provide a copy of the data, and inform you of any other rights you may have.
The right of rectification
You have the right to have any information held about you which is inaccurate to be rectified. If you believe that we have inaccurate information then please contact us and we will do our utmost to sort it for you.
The right to be forgotten (the right to erasure)
You have, subject to certain conditions being met, the right to be forgotten. Where we can, we will remove all your details from our systems subject to being able to do so reasonably, and where no other legal or legitimate reason exists to keep your personal data. For example, if you owe money to us via an account, we would expect this to be cleared before we considered erasure of your details.
The right to restrict processing of your personal data
In some cases, you may require us to hold your data but not process it, this may be relevant if you believe inaccuracies have not been corrected and further processing would cause issues for you as an individual.
The right to data portability
Personal data portability, means that on request we will give you the information we hold about you in a form that can easily be used by other systems. This is most likely to be a spreadsheet file so that you may pass this information on to other organisations with which you would like to share the data. It may not always be possible to give you everything about you in this format, but we will always strive to provide what we can for you.
The right to object
You have a right to object to how personal data about you are processed, in some instances. You may object to us processing your personal data for our “legitimate interests”, to stop direct marketing and processing your personal data for research or statistical purposes.
Whilst we do have legitimate interests under which we process data and we do send marketing messages out to those that want them, we do not undertake research or statistical reporting.
Unless we can demonstrate compelling reasons for continuing to process your personal data, which we will explain to you, if relevant, when you object, then we will always endeavor to comply with your wishes.
The right to complain
You have a right to complain to the regulator in the country in which you reside or where you believe any misuse of your data has taken place. The UK Information Commissioner’s Office can be contacted directly if you believe that we have failed to address your concerns.
Their information may be found at www.ico.org.uk.
