Our privacy policy was updated on 19th May 2023 to enable research for fundraising. There will also be an amendment to our Ethical Fundraising Policy to include a new Charity Donations Acceptance Policy. These policies are available on request from fundraising@barntheatre.org.uk
How we use the data we collect
For reference, throughout this document, ‘The Barn Theatre’ refers to all the parties below and acts as data collection and management agent on behalf of The Barn Theatre Project, The Barn Cinema, Barn At Home, Cotswold Cabaret, Ingleside House, Barn Media, Barn Digital Media, Teatro Bar & Restaurant, Barn Academy, TinkCo, Barnfest and other affiliated organisations.
We are committed to protecting you and your family’s personal information when you are using any of our services. We want the services we provide to be safe and enjoyable environments for our audiences, customers and visitors. This Privacy Notice relates to our use of any personal information that we collect from you via the following services:
- our various websites
- Cookies collected on our various websites
- social media
- our emails to you and yours to us
- your visit to The Barn Theatre & Affiliated Venues
- Other methods of data collection
It also relates to our use of any personal information you provide to us by phone, SMS, email, in letters and other written correspondence, and in person.
In order to provide you with access to book tickets and stay in touch with us about what we are doing, we need to collect information about you.
This Privacy and Cookies Policy explains the following:
- what information The Barn Theatre may collect about you;
- how The Barn Theatre will use information we collect about you;
- when The Barn Theatre uses your details to contact you;
- when The Barn Theatre will disclose your details to anyone else;
- your choices and rights regarding the personal information you provide to us;
- the use of Cookies on our website and how you can reject Cookies.
The Barn Theatre is committed to safeguarding your personal information. Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal information, including the Data Protection Act 1998 and the General Data Protection Regulation 2018. No website can be completely secure; if you have any concerns that your customer account could have been compromised, e.g. someone could have discovered your password, please get in touch straight away by contacting our Box Office.
Our website contains hyperlinks to websites owned and operated by third parties. These third party websites have their own privacy policies, and are also likely to use Cookies, and we therefore urge you to review them. They will govern the use of personal information you submit when visiting these websites, which may also be collected by Cookies. We do not accept any responsibility or liability for the privacy practices of such third party websites and your use of such websites is at your own risk.
Who we are and who is collecting it
The Barn Theatre Project is a charity, Charity no. 1174253, Company no. 10492115.
We aim to be entirely upfront and open about the customer data that we use. Collecting this data makes it easy for you to book shows and events, keep up to date with our activities, and engage with us in other ways like invite you to exclusive events, activities or supporting our continued future. We do not obtain any personal data that we think would be likely to cause individuals to object to or complain about, but we are always open to discuss with you any of the information we hold.
It is possible that The Barn Theatre may, from time to time, expand or reduce its business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. Data provided by Users will, where it is relevant to any division so transferred, be transferred along with that division and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was supplied by you. In the event that any Data submitted by Users will be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your Data deleted or withheld from the new owner or controller.
The information that we collect, process, hold and share
- Personal Information
- Full Name and Title
- Email Address
- Phone Numbers and Mobile Number
- Date of Birth
- Delivery Address
- Billing Address
- Access requirements
- Genre Preferences
- Membership Level
- Purchase History
- Donation History and Pledges
- Gift Aid status
- Gender
- Marketing Preferences including for Third Parties
- Card Details (for purchases and for your account)
- Bank Details (for Direct Debits, renewing memberships, future purchases and other purchasing activities)
- Email and Newsletter records including emails sent, emails opened by you, and links opened by you
- Publicly Accessible Profile Information from the internet including but not limited to Facebook, Instagram and Twitter
- Images of you when you visit the Theatre (CCTV or as a member of the audience for promotional use)
- Anonymised Information
- IP address
- Operating system
- Cookies
- Inplayer:_gid _fbp _gcl_aw _ga _gac_UA-55616959-1
- Spektrix: _cfduid
- Barn Theatre: wordpress_test_cookie _cfduid QueueNumber _ga SessionId SpektrixRequestVerificationToken SpektrixClientName _gid CookieDetection ReturningCustomerCookie wp-postpass_c42acc897b23e8cd0f38845fa82bc84e
- Google analytics cookies
Why we collect and use this information
-
We use your data for these specific purposes, unless you ask us not to:
- To enable you to book and pay for tickets via our website, over the telephone and in person by setting up a customer account in your name.
- To enable you to donate to us with a single payment or regular direct debit agreement or recurring card payment.
- To enable us to contact you to provide important information in advance of your booked event, such as details of the location of the event or if the event has been cancelled.
- To enable us to email you with a survey after seeing a show in order to evaluate the success of an event and improve the theatre’s programme and facilities.
- To enable us to contact you about similar shows and events at The Barn Theatre or affiliated venues including but not limited to; The Barn Cinema, Ingleside House, Teatro, Cotswold Cabaret and TinkCo.
- To enable us to email you with our upcoming shows and events at The Barn Theatre and affiliated venues, providing we have your consent to do so.
- To enable us to call you with details of how you can support us, or of specific offers or events that may be of interest.
- To enable us to text you with offers or details of upcoming shows and events.
- To enable us to contact you about how you can support us, if we have your consent to do so, or to thank you for donating to us and telling you how your money will be well spent.
- To share your personal information with other organisations who would like to contact you, if you have provided your consent.
- To allow you to enquire about our affiliated partners including but not limited to; Restaurant, Hotel, Wedding Events and Media services.
- To evaluate the services and events we provide, in order to improve them for the future; and to report on them to our funders.
- To identify recurring visitors and to analyse their browsing habits within the websites (Cookies)
- To store saved shopping carts as you navigate around the websites (Cookies)
- To identify people on our system who may be interested in becoming a member, supporting the charity or increasing their support, based on their ticket purchasing and donation history.
- On occasion, for promoting our shows and events or for archival, live stream, Video-on-Demand or reference purposes, by the use of photographs and videos taken of our audiences and theatre-users.
- For storing CCTV images of people within the premises for security
- To help us investigate complaints, legal claims or important incidents
How we collect and use this information
-
The Barn Theatre is the data controller for all the data we store. We use Data Processors to help us collect, process, and safely store the data that we obtain.
- We use our websites to sign you up to our E-Newsletter databases.
- We use Spektrix Ltd to process our Box Office ticketing system, and to report on your order history, donation history, membership status, and to show trends in sales patterns.
- We use Inplayer to process our Barn At Home digital streaming services and report on your order history, donation history, membership status, and to show trends in sales patterns.
- We use DotDigital (Formerly Dotmailer) to send Newsletters, information, advertisements and keep in touch via email.
- We may use other similar services provided by other parties, but which do not adversely affect your rights on the terms of this notice.
- We do not use any services that include automated decision making of any significance to the individual. The consequences of being subjected to the automated profiling systems that we have in place is limited to specific marketing or fundraising campaigns directed at specific customer types based on their purchase and donation history or post code area. This will not override your marketing preferences which can be updated at any time by contacting box office.
The legal basis on which we use this information
-
There are three legal bases under which we may process your data.
Contract Purposes
When you make a purchase from us or make a donation to us, you are entering into a contract with us. In order to perform this contract we need to process and store your data.- To confirm your booking by way of a confirmation email, sending your tickets to you in the post, or to confirm your identity when collecting your tickets.
- To enable us to contact you to provide important information in advance of your booked event, such as details of the location of the event or if the event has been cancelled.
- To enable you to book and pay for tickets and merchandise via our website, over the telephone and in person by setting up a customer account in your name.
- To provide you with a digital stream, where applicable, of online content purchased via our website.
Explicit Consent
When appropriate, we will ask you for your explicit consent before using your personal information in that specific situation. We will update your consent periodically. You have the right to withdraw consent at any time, and this can be done by contacting our Box Office:- To enable us to contact you about how you can support us.
- To thank you for donating to us.
- To share your personal information with other organisations who would like to contact you, if you have provided your consent.
Legitimate Business Interests
We collect and process your personal information for purposes that are in our legitimate organisational interests. We do this carefully, and in a way that we believe there is no overriding prejudice to you by using your personal information in this way. You have the right to object, amongst other rights explained later in this document.- To enable us to contact you about similar products and services (shows, events and merchandise) available at The Barn Theatre.
- To enable us to email you with a survey after seeing a show in order to evaluate the success of an event and improve our programme and facilities.
- To enable us to call you with details of how you can support us, or of specific offers or events that may be of interest.
- To enable us to text you with offers or details of upcoming shows and events.
- To enable our affiliated organisations including but not limited to Restaurant, Wedding and Event services and Hotel to email, call and text you with offers and information.
- To allow you to enquire about our affiliated organisations including but not limited to Restaurant, Wedding and Event services, Hotel.
- To drive evaluation and statistics of the services and events to in order to improve them for the future.
- To analyse the data we hold about you in order to identify and prevent fraud.
- To analyse the way in which our website is used and the content and links that you interact with, in order to improve our website services.
- To store saved shopping carts as you navigate around the website.
- To analyse the way in which our emails to you are received by you, and the content and links that you interact with, in order to improve our communications with you.
- To analyse the data we hold about you to ensure that the content and timing of our communications to you are as relevant as possible.
- To maintain notes of our customers according to customer booking and donation history, and other personal customer account data that you provide us, as well as publicly available internet research for the purposes of our marketing communications to you, and to enable us to communicate in a relevant way with you.
- To promote our shows and events by the use of photographs and videos taken of our audiences.
- To record and store CCTV media within the premises for security purposes.
- To record audience reactions for promotional materials, video-on-demand or live streaming events.
Children
-
We take the protection of children and their personal data very seriously. For this reason, as we are unable to verify parental consent, no-one under the age of 13 is allowed to use our website or services. Children under the age of 13 must ask their parents or an adult to make bookings for them.
Web Browser Cookies
-
The Barn Theatre may set and access Cookies on your computer. A Cookie is a small file that resides on your computer’s hard drive and often contains a unique identifier and is accessible only by the website that placed it there, not any other sites. You may restrict your internet browser’s use of Cookies.
- You may delete Cookies, however you may lose any information that enables you to access the website more quickly.
- You can choose to enable or disable Cookies in your web browser. By default, your browser will accept Cookies, however this can be altered.
- For further details please consult the help menu in your browser. Disabling Cookies may prevent you from using the full range of services available on the website.
Collecting this information
-
Whilst the majority of the personal information you provide to us is mandatory, some of it is provided to us on a voluntary basis, and we will make this clear to you when we collect the data from you by marking the ‘Required’ fields. Anything that does not say ‘Required’ or have a ‘*’ next to it is voluntary.
Not providing information
- You may access certain areas of the website without providing any data at all. However, to use all services and systems available on the website you may be required to submit customer account information or other data.
You do not have to provide us with all the information we may ask you for. It is up to you.
Any information that we ask for other than those listed below is entirely voluntary. Not providing any of the voluntary information will not preclude you from any of the products or services we offer or effect you in any other way.
In order to sign up to our e-Newsletters, we only require:
- First Name
- Last Name
- Email Address
In order to create a customer account, we only require:
- First Name
- Last Name
- Email Address
- Phone Number
- Billing Address
Once a customer account has been created, we need to store the following information on your account:
- Purchase History
- Membership Level
- Donation History
- Gift Aid declaration
In order to book and pay for tickets, we only require:
- Your customer account details
- Card Type
- Card Number (our staff members are not able to see your full card number)
- Expiry Date
- Start Date (only if required by your bank)
- Issue Code (only if required by your bank)
- Security Code (we never store your 3 or 4 digit security code)
All debit and credit card information is processed securely, and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). We optionally allow you to store your card details for use in a future transaction. This is carried out in compliance with PCI-DSS.
For our affiliated organisations including but not limited to Restaurant, Hotel, Wedding and Event services, we may need your personal data in order to provide a quotation, and a contractual agreement when you make a booking. If you do not provide your Personal Data we will be unable to create a quotation or agreement and you will not be able to book your event with us.
Storing this information
-
We store your personal data securely using suitable physical, electronic and managerial procedures to safeguard and secure all and any customer data and personal information. We will ensure that any third parties we use for processing your personal data do the same. We limit internal access to your personal data to only those who require it. We ensure that high standards of security and protection are met by abiding by our Data Protection Policies and Procedures, and these are governed by the Senior Management Team and the Board of Trustees.
Under The Barn Theatre’s code of conduct, all our staff are required to protect your information, and inform you of how your information will be used. This includes, in most circumstances, allowing you to decide if and how your information can be shared. Everyone working for The Barn Theatre and affiliated organisations is subject to the duty of confidentiality. Information provided in confidence will only be used for the purposes advised and consented to by the service user, unless it is required or permitted by the law.
Whenever your information is stored online, we have a data sharing agreement with the data processor which states the requirements of high level security for your personal data. Should there be a breach of this data, they are obliged to inform us immediately and we will then inform you if it is necessary under Data Protection guidance. It is your right to be informed.
When we do send you information, we do so securely and are committed to reporting any breaches of data during its transit. Whenever possible all information that identifies you will be removed.
We will not transfer, process or store your data anywhere that is outside of the European Economic Area.
Retention periods
-
We will only retain information for as long as necessary. The Barn Theatre will retain data for as long as deemed necessary in order to provide you with services and facilities. We are bound by law to retain certain financial records, and these circumstances override our other retention periods.
We will ask you to check and update your contact preferences periodically so that we know our database is up to date. You can withdraw your consent, or make changes to your contact preferences at any time.
- We actively maintain customer data, including communications with you, previous records or ticket, donations, membership status and other purchase histories to allow you to sign in to your account even if you have not booked with us for a while, and to continue to allow you to update and make changes to your marketing preferences. This also allows us to look up your customer account if you book with our box office staff. If your account has had no activity for some time, before it has gone 6 years with no activity.
- We retain personal data for our affiliated organisations including but not limited to Restaurant, Hotel, Wedding and Event services.
- We retain CCTV and Promotional images.
- We retain any complaints, queries or written communications with you.
- Google Analytics retains some data that can identify you as a returning user to the site. This data is purged periodically by Google, in line with their current policies.
- We will also retain data for statistical purposes in order to allow us to effectively promote and market future events.
When personal data is no longer required by the organisation, it is deleted or securely destroyed.
You have the right to request we remove the information we store about you. Please contact us, and we will be happy to arrange this for you if you want us to. Any objections you make to any processing of your data will be stored against a record on our system so that we can comply with your request.
Who we share personal information with and how this will affect you
- We do not sell any of your information for the purposes of marketing or fundraising. We do not share your personal information with third parties, outside of our affiliated/co-production businesses or from time to time for research specific to our fundraising, unless you have given us specific consent to do so, or if we are required to do so in order to deliver a Box Office service at another venue, or due to our obligations to comply with current legislation and bank transactions, or our duty to comply with a Court Order. However, we do employ the services of other party’s software and services in order to collect and store your personal information, for example we use Spektrix and Inplayer as our ticketing systems software provider for booking tickets and creating customer accounts that can be accessed on our website. The providers of such services may have access to certain personal data provided by you. Any data used by such parties is used only to the extent required by them to perform the services that The Barn Theatre requests. Any use for other purposes is strictly prohibited within a data sharing agreement between us and the provider. Furthermore, any data that is processed by third parties must be processed within the terms of this policy and in accordance with the United Kingdom Data Protection Act 1998 and General Data Protection Regulation 2018.
-
Fundraising Research:
As a charity we need to fundraise and we undertake in-house research and from time to time engage specialist agencies such as Prospecting for Gold to gather information about you from publicly available sources, for example, Companies House, the Electoral Register, company websites, ‘rich lists’, social networks such as Linkedin, political and property registers and news archives.
We may also carry out wealth screening to fast track the research using our trusted third party partners. You will always have the right to opt out of this processing. We may also carry out research using publicly available information to identify individuals who may have an affinity to our cause but with whom we are not already in touch. This may include people connected to our current major supporters, trustees or other lead volunteers. We also use publicly available sources to carry out due diligence on donors in line with the charity’s Gift Acceptance Policy and to meet money laundering regulations.
This research helps us to understand more about you as an individual so we can focus conversations we have with you about fundraising and volunteering in the most effective way and ensure that we provide you with an experience as a donor or potential donor which is appropriate for you. If you would prefer us not to use your data in this way, please email us at fundraising@barntheatre.org.uk
Your rights
-
You have the right to:
- object to processing of personal data that is likely to cause, or is causing, damage or distress;
- object to the processing of your data where The Barn Theatre is relying on its legitimate interest as the legal grounds for processing;
- prevent processing of your personal data;
- port your data using an open format document, like a .csv Excel document;
- object to decisions being taken by automated means;
- in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
- claim compensation for damages caused by a breach of the Data Protection regulations.
The best person to contact regarding data protection at The Barn Theatre is Rachel Wright, Executive Director. Email:rachel@barntheatre.org.uk | Address: The Barn Theatre, 3 Beeches Road, Cirencester, Gloucestershire, GL7 1BN. | Tel 01285 648255.
Right to lodge a complaint
- If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office at ico.org.uk/concerns.
How to access your personal information (Subject Access)
-
You have the right to see the information that The Barn Theatre holds about you, and why we hold it. You also have the right to rectify any inaccurate information we hold about you. Requests must be made in writing (not verbally). You will need to provide:
- Full name, address, email address, phone number, customer ID, so that your identity can be verified against our records and your information located
- Copy of Photographic ID
- An indication of what information you are requesting to enable us to locate this in an efficient manner
A request for information must be made with the appropriate person: Rachel Wright, Executive Director. Email:rachel@barntheatre.org.uk | Address: The Barn Theatre, 3 Beeches Road, Cirencester, Gloucestershire, GL7 1BN. | Tel 01285 648255.
There is no fee for Subject Access Requests. The Barn Theatre reserves the right in certain situations to refuse the request, otherwise we will comply within one calendar month.
The request’s response will cover the following detail;
- Any personal data that is being processed
- A description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people
- A copy of the information comprising the data; and details of the source of the data
This document was last reviewed August 2021 by: Rachel Wright, Executive Director and Chris Cleal, Operations Director.
Entire Policy Document
How we use the data we collect
For reference, throughout this document, ‘The Barn Theatre’ refers to all the parties below and acts as data collection and management agent on behalf of The Barn Theatre Project, The Barn Cinema, Barn At Home, Cotswold Cabaret, Ingleside House, Barn Media, Barn Digital Media, Teatro Bar & Restaurant, Barn Academy, TinkCo, Barnfest and other affiliated organisations.
We are committed to protecting you and your family’s personal information when you are using any of our services. We want the services we provide to be safe and enjoyable environments for our audiences, customers and visitors. This Privacy Notice relates to our use of any personal information that we collect from you via the following services:
- our various websites
- Cookies collected on our various websites
- social media
- our emails to you and yours to us
- your visit to The Barn Theatre & Affiliated Venues
- Other methods of data collection
It also relates to our use of any personal information you provide to us by phone, SMS, email, in letters and other written correspondence, and in person.
In order to provide you with access to book tickets and stay in touch with us about what we are doing, we need to collect information about you.
This Privacy and Cookies Policy explains the following:
- what information The Barn Theatre may collect about you;
- how The Barn Theatre will use information we collect about you;
- when The Barn Theatre uses your details to contact you;
- when The Barn Theatre will disclose your details to anyone else;
- your choices and rights regarding the personal information you provide to us;
- the use of Cookies on our website and how you can reject Cookies.
The Barn Theatre is committed to safeguarding your personal information. Whenever you provide such information, we are legally obliged to use your information in line with all applicable laws concerning the protection of personal information, including the Data Protection Act 1998 and the General Data Protection Regulation 2018. No website can be completely secure; if you have any concerns that your customer account could have been compromised, e.g. someone could have discovered your password, please get in touch straight away by contacting our Box Office.
Our website contains hyperlinks to websites owned and operated by third parties. These third party websites have their own privacy policies, and are also likely to use Cookies, and we therefore urge you to review them. They will govern the use of personal information you submit when visiting these websites, which may also be collected by Cookies. We do not accept any responsibility or liability for the privacy practices of such third party websites and your use of such websites is at your own risk.
Who we are and who is collecting it?
The Barn Theatre Project is a charity, Charity no. 1174253, Company no. 10492115.
We aim to be entirely upfront and open about the customer data that we use. Collecting this data makes it easy for you to book shows and events, keep up to date with our activities, and engage with us in other ways like invite you to exclusive events, activities or supporting our continued future. We do not obtain any personal data that we think would be likely to cause individuals to object to or complain about, but we are always open to discuss with you any of the information we hold.
It is possible that The Barn Theatre may, from time to time, expand or reduce its business and this may involve the sale of certain divisions or the transfer of control of certain divisions to other parties. Data provided by Users will, where it is relevant to any division so transferred, be transferred along with that division and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was supplied by you. In the event that any Data submitted by Users will be transferred in such a manner, you will be contacted in advance and informed of the changes. When contacted you will be given the choice to have your Data deleted or withheld from the new owner or controller.
The information that we collect, process, hold and share
- Personal Information
- Full Name and Title
- Email Address
- Phone Numbers and Mobile Number
- Date of Birth
- Delivery Address
- Billing Address
- Access requirements
- Genre Preferences
- Membership Level
- Purchase History
- Donation History and Pledges
- Gift Aid status
- Gender
- Marketing Preferences including for Third Parties
- Card Details (for purchases and for your account)
- Bank Details (for Direct Debits, renewing memberships, future purchases and other purchasing activities)
- Email and Newsletter records including emails sent, emails opened by you, and links opened by you
- Publicly Accessible Profile Information from the internet including but not limited to Facebook, Instagram and Twitter
- Images of you when you visit the Theatre (CCTV or as a member of the audience for promotional use)
- Anonymised Information
- Inplayer:_gid _fbp _gcl_aw _ga _gac_UA-55616959-1
- Spektrix: _cfduid
- Barn Theatre: wordpress_test_cookie _cfduid QueueNumber _ga SessionId SpektrixRequestVerificationToken SpektrixClientName _gid CookieDetection ReturningCustomerCookie wp-postpass_c42acc897b23e8cd0f38845fa82bc84e
- Google analytics cookies
- IP address
- Operating system
- Cookies
Why we collect and use this information
We use your data for these specific purposes, unless you ask us not to:
- To enable you to book and pay for tickets via our website, over the telephone and in person by setting up a customer account in your name.
- To enable you to donate to us with a single payment or regular direct debit agreement or recurring card payment.
- To enable us to contact you to provide important information in advance of your booked event, such as details of the location of the event or if the event has been cancelled.
- To enable us to email you with a survey after seeing a show in order to evaluate the success of an event and improve the theatre’s programme and facilities.
- To enable us to contact you about similar shows and events at The Barn Theatre or affiliated venues including but not limited to; The Barn Cinema, Ingleside House, Teatro, Cotswold Cabaret and TinkCo.
- To enable us to email you with our upcoming shows and events at The Barn Theatre and affiliated venues, providing we have your consent to do so.
- To enable us to call you with details of how you can support us, or of specific offers or events that may be of interest.
- To enable us to text you with offers or details of upcoming shows and events.
- To enable us to contact you about how you can support us, if we have your consent to do so, or to thank you for donating to us and telling you how your money will be well spent.
- To share your personal information with other organisations who would like to contact you, if you have provided your consent.
- To allow you to enquire about our affiliated partners including but not limited to; Restaurant, Hotel, Wedding Events and Media services.
- To evaluate the services and events we provide, in order to improve them for the future; and to report on them to our funders.
- To identify recurring visitors and to analyse their browsing habits within the websites (Cookies)
- To store saved shopping carts as you navigate around the websites (Cookies)
- To identify people on our system who may be interested in becoming a member, supporting the charity or increasing their support, based on their ticket purchasing and donation history.
- On occasion, for promoting our shows and events or for archival, live stream, Video-on-Demand or reference purposes, by the use of photographs and videos taken of our audiences and theatre-users.
- For storing CCTV images of people within the premises for security
- To help us investigate complaints, legal claims or important incidents
How we collect and use this information
The Barn Theatre is the data controller for all the data we store. We use Data Processors to help us collect, process, and safely store the data that we obtain.
- We use our websites to sign you up to our E-Newsletter databases.
- We use Spektrix Ltd to process our Box Office ticketing system, and to report on your order history, donation history, membership status, and to show trends in sales patterns.
- We use Inplayer to process our Barn At Home digital streaming services and report on your order history, donation history, membership status, and to show trends in sales patterns.
- We use DotDigital (Formerly Dotmailer) to send Newsletters, information, advertisements and keep in touch via email.
- We may use other similar services provided by other parties, but which do not adversely affect your rights on the terms of this notice.
- We do not use any services that include automated decision making of any significance to the individual. The consequences of being subjected to the automated profiling systems that we have in place is limited to specific marketing or fundraising campaigns directed at specific customer types based on their purchase and donation history or post code area. This will not override your marketing preferences which can be updated at any time by contacting box office.
The legal basis on which we use this information
There are three legal bases under which we may process your data.
Contract Purposes
When you make a purchase from us or make a donation to us, you are entering into a contract with us. In order to perform this contract we need to process and store your data.
- To confirm your booking by way of a confirmation email, sending your tickets to you in the post, or to confirm your identity when collecting your tickets.
- To enable us to contact you to provide important information in advance of your booked event, such as details of the location of the event or if the event has been cancelled.
- To enable you to book and pay for tickets and merchandise via our website, over the telephone and in person by setting up a customer account in your name.
- To provide you with a digital stream, where applicable, of online content purchased via our website.
Explicit Consent
When appropriate, we will ask you for your explicit consent before using your personal information in that specific situation. We will update your consent periodically. You have the right to withdraw consent at any time, and this can be done by contacting our Box Office:
- To enable us to contact you about how you can support us.
- To thank you for donating to us.
- To share your personal information with other organisations who would like to contact you, if you have provided your consent.
Legitimate Business Interests
We collect and process your personal information for purposes that are in our legitimate organisational interests. We do this carefully, and in a way that we believe there is no overriding prejudice to you by using your personal information in this way. You have the right to object, amongst other rights explained later in this document.
- To enable us to contact you about similar products and services (shows, events and merchandise) available at The Barn Theatre.
- To enable us to email you with a survey after seeing a show in order to evaluate the success of an event and improve our programme and facilities.
- To enable us to call you with details of how you can support us, or of specific offers or events that may be of interest.
- To enable us to text you with offers or details of upcoming shows and events.
- To enable our affiliated organisations including but not limited to Restaurant, Wedding and Event services and Hotel to email, call and text you with offers and information.
- To allow you to enquire about our affiliated organisations including but not limited to Restaurant, Wedding and Event services, Hotel.
- To drive evaluation and statistics of the services and events to in order to improve them for the future.
- To analyse the data we hold about you in order to identify and prevent fraud.
- To analyse the way in which our website is used and the content and links that you interact with, in order to improve our website services.
- To store saved shopping carts as you navigate around the website.
- To analyse the way in which our emails to you are received by you, and the content and links that you interact with, in order to improve our communications with you.
- To analyse the data we hold about you to ensure that the content and timing of our communications to you are as relevant as possible.
- To maintain notes of our customers according to customer booking and donation history, and other personal customer account data that you provide us, as well as publicly available internet research for the purposes of our marketing communications to you, and to enable us to communicate in a relevant way with you.
- To promote our shows and events by the use of photographs and videos taken of our audiences.
- To record and store CCTV media within the premises for security purposes.
- To record audience reactions for promotional materials, video-on-demand or live streaming events.
Children
We take the protection of children and their personal data very seriously. For this reason, as we are unable to verify parental consent, no-one under the age of 13 is allowed to use our website or services. Children under the age of 13 must ask their parents or an adult to make bookings for them.
Web Browser Cookies
The Barn Theatre may set and access Cookies on your computer. A Cookie is a small file that resides on your computer’s hard drive and often contains a unique identifier and is accessible only by the website that placed it there, not any other sites. You may restrict your internet browser’s use of Cookies.
- You may delete Cookies, however you may lose any information that enables you to access the website more quickly.
- You can choose to enable or disable Cookies in your web browser. By default, your browser will accept Cookies, however this can be altered.
- For further details please consult the help menu in your browser. Disabling Cookies may prevent you from using the full range of services available on the website.
Collecting this information
Whilst the majority of the personal information you provide to us is mandatory, some of it is provided to us on a voluntary basis, and we will make this clear to you when we collect the data from you by marking the ‘Required’ fields. Anything that does not say ‘Required’ or have a ‘*’ next to it is voluntary.
Not providing information
You may access certain areas of the website without providing any data at all. However, to use all services and systems available on the website you may be required to submit customer account information or other data.
You do not have to provide us with all the information we may ask you for. It is up to you.
Any information that we ask for other than those listed below is entirely voluntary. Not providing any of the voluntary information will not preclude you from any of the products or services we offer or effect you in any other way.
In order to sign up to our e-Newsletters, we only require:
- First Name
- Last Name
- Email Address
In order to create a customer account, we only require:
- First Name
- Last Name
- Email Address
- Phone Number
- Billing Address
Once a customer account has been created, we need to store the following information on your account:
- Purchase History
- Membership Level
- Donation History
- Gift Aid declaration
In order to book and pay for tickets, we only require:
- Your customer account details
- Card Type
- Card Number (our staff members are not able to see your full card number)
- Expiry Date
- Start Date (only if required by your bank)
- Issue Code (only if required by your bank)
- Security Code (we never store your 3 or 4 digit security code)
All debit and credit card information is processed securely, and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). We optionally allow you to store your card details for use in a future transaction. This is carried out in compliance with PCI-DSS.
For our affiliated organisations including but not limited to Restaurant, Hotel, Wedding and Event services, we may need your personal data in order to provide a quotation, and a contractual agreement when you make a booking. If you do not provide your Personal Data we will be unable to create a quotation or agreement and you will not be able to book your event with us.
Storing this information
We store your personal data securely using suitable physical, electronic and managerial procedures to safeguard and secure all and any customer data and personal information. We will ensure that any third parties we use for processing your personal data do the same. We limit internal access to your personal data to only those who require it. We ensure that high standards of security and protection are met by abiding by our Data Protection Policies and Procedures, and these are governed by the Senior Management Team and the Board of Trustees.
Under The Barn Theatre’s code of conduct, all our staff are required to protect your information, and inform you of how your information will be used. This includes, in most circumstances, allowing you to decide if and how your information can be shared. Everyone working for The Barn Theatre and affiliated organisations is subject to the duty of confidentiality. Information provided in confidence will only be used for the purposes advised and consented to by the service user, unless it is required or permitted by the law.
Whenever your information is stored online, we have a data sharing agreement with the data processor which states the requirements of high level security for your personal data. Should there be a breach of this data, they are obliged to inform us immediately and we will then inform you if it is necessary under Data Protection guidance. It is your right to be informed.
When we do send you information, we do so securely and are committed to reporting any breaches of data during its transit. Whenever possible all information that identifies you will be removed.
We will not transfer, process or store your data anywhere that is outside of the European Economic Area.
Retention periods
We will only retain information for as long as necessary. The Barn Theatre will retain data for as long as deemed necessary in order to provide you with services and facilities. We are bound by law to retain certain financial records, and these circumstances override our other retention periods.
We will ask you to check and update your contact preferences periodically so that we know our database is up to date. You can withdraw your consent, or make changes to your contact preferences at any time.
- We actively maintain customer data, including communications with you, previous records or ticket, donations, membership status and other purchase histories to allow you to sign in to your account even if you have not booked with us for a while, and to continue to allow you to update and make changes to your marketing preferences. This also allows us to look up your customer account if you book with our box office staff. If your account has had no activity for some time, before it has gone 6 years with no activity.
- We retain personal data for our affiliated organisations including but not limited to Restaurant, Hotel, Wedding and Event services.
- We retain CCTV and Promotional images.
- We retain any complaints, queries or written communications with you.
- Google Analytics retains some data that can identify you as a returning user to the site. This data is purged periodically by Google, in line with their current policies.
- We will also retain data for statistical purposes in order to allow us to effectively promote and market future events.
When personal data is no longer required by the organisation, it is deleted or securely destroyed.
You have the right to request we remove the information we store about you. Please contact us, and we will be happy to arrange this for you if you want us to. Any objections you make to any processing of your data will be stored against a record on our system so that we can comply with your request.
Who we share personal information with and how this will affect you
We do not sell any of your information for the purposes of marketing or fundraising. We do not share your personal information with third parties, outside of our affiliated/co-production businesses or from time to time for research specific to our fundraising, unless you have given us specific consent to do so, or if we are required to do so in order to deliver a Box Office service at another venue, or due to our obligations to comply with current legislation and bank transactions, or our duty to comply with a Court Order.
However, we do employ the services of other party’s software and services in order to collect and store your personal information, for example we use Spektrix and Inplayer as our ticketing systems software provider for booking tickets and creating customer accounts that can be accessed on our website. The providers of such services may have access to certain personal data provided by you. Any data used by such parties is used only to the extent required by them to perform the services that The Barn Theatre requests. Any use for other purposes is strictly prohibited within a data sharing agreement between us and the provider. Furthermore, any data that is processed by third parties must be processed within the terms of this policy and in accordance with the United Kingdom Data Protection Act 1998 and General Data Protection Regulation 2018.
Your rights
You have the right to:
- object to processing of personal data that is likely to cause, or is causing, damage or distress;
- object to the processing of your data where The Barn Theatre is relying on its legitimate interest as the legal grounds for processing;
- prevent processing of your personal data;
- port your data using an open format document, like a .csv Excel document;
- object to decisions being taken by automated means;
- in certain circumstances, have inaccurate personal data rectified, blocked, erased or destroyed; and
- claim compensation for damages caused by a breach of the Data Protection regulations.
The best person to contact regarding data protection at The Barn Theatre is Rachel Wright, Executive Director. Email:rachel@barntheatre.org.uk | Address: The Barn Theatre, 3 Beeches Road, Cirencester, Gloucestershire, GL7 1BN. | Tel 01285 648255.
As a charity we need to fundraise and we undertake in-house research and from time to time engage specialist agencies such as Prospecting for Gold to gather information about you from publicly available sources, for example, Companies House, the Electoral Register, company websites, ‘rich lists’, social networks such as Linkedin, political and property registers and news archives.
We may also carry out wealth screening to fast track the research using our trusted third party partners. You will always have the right to opt out of this processing. We may also carry out research using publicly available information to identify individuals who may have an affinity to our cause but with whom we are not already in touch. This may include people connected to our current major supporters, trustees or other lead volunteers. We also use publicly available sources to carry out due diligence on donors in line with the charity’s Gift Acceptance Policy and to meet money laundering regulations.
This research helps us to understand more about you as an individual so we can focus conversations we have with you about fundraising and volunteering in the most effective way and ensure that we provide you with an experience as a donor or potential donor which is appropriate for you. If you would prefer us not to use your data in this way, please email us at fundraising@barntheatre.org.uk
Right to lodge a complaint
If you have a concern about the way we are collecting or using your personal data, we request that you raise your concern with us in the first instance. Alternatively, you can contact the Information Commissioner’s Office at ico.org.uk/concerns.
How to access your personal information (Subject Access)
You have the right to see the information that The Barn Theatre holds about you, and why we hold it. You also have the right to rectify any inaccurate information we hold about you. Requests must be made in writing (not verbally). You will need to provide:
- Full name, address, email address, phone number, customer ID, so that your identity can be verified against our records and your information located
- Copy of Photographic ID
- An indication of what information you are requesting to enable us to locate this in an efficient manner
A request for information must be made with the appropriate person: Rachel Wright, Executive Director. Email:rachel@barntheatre.org.uk | Address: The Barn Theatre, 3 Beeches Road, Cirencester, Gloucestershire, GL7 1BN. | Tel 01285 648255.
There is no fee for Subject Access Requests. The Barn Theatre reserves the right in certain situations to refuse the request, otherwise we will comply within one calendar month.
The request’s response will cover the following detail;
- Any personal data that is being processed
- A description of the personal data, the reasons it is being processed, and whether it will be given to any other organisations or people
- A copy of the information comprising the data; and details of the source of the data
This document was last reviewed August 2021 by: Rachel Wright, Executive Director and Chris Cleal, Operations Director.
Upcoming Shows
Weakest Link
18th January 2025
A CHRISTMAS CAROL
1 December – 4 January
THE LAST FIVE YEARS
20 October – 15 November
HAYWIRE
01 September – 11 October
THE BARN THEATRE
5 Beeches Road
Cirencester
Gloucestershire
GL7 1BN
BOX OFFICE
Tel: 01285 648255
Email: boxoffice@barntheatre.org.uk