Skip to content
Back to homepage

Privacy Policy

PURPOSE OF POLICY

The Belgrade Theatre is committed to protecting your personal information and being transparent about what information we hold about you. Using personal information allows us to develop a better understanding of our patrons and in turn to provide you with relevant and timely information about the work that we do – both on stage and off. As a charity, it also helps us to engage with potential donors and supporters.

The purpose of this policy is to give you a clear explanation about how we and our subsidiaries, collect and use the information we collect from you directly and from third parties.

OUR DATA PRINCIPLES

  • To provide clear, honest and open information to customers about how we use their data.
  • To give customers the choice about how we use their data.
  • To use data appropriately and in a way that would be reasonably expected by the customer (including supressing or deleting records once they are no longer required).
  • To share customer data with other arts organisations only where the customer has given their consent for us to do so, and to limit those organisations to artistic partners who have agreed to sign up to the same principles.
  • To be accountable and responsible: to take active steps to protect customer data from ‘data breaches’ and informing customers and the information commissioner as required by data protection law, should this occur.
  • To have specific enhanced procedures for the use of sensitive data (such as data relating to children or disability).
  • To ensure our staff and partners (suppliers and artists) understand these principles and their responsibilities in delivering them.

WHO WE ARE

Belgrade Theatre Trust (Coventry) Limited (the ‘Belgrade Theatre’) is a charity and is funded by the Arts Council England and Coventry City Council as well as various trusts and foundations, individual donors and corporate supporters. Our registered charity number in England and Wales is 219163 and we are also registered as a company in England and Wales under registration number 593331. Our subsidiaries include Belgrade Theatre Enterprises Ltd, through which we run commercial operations such as Belgrade Production Services (BPS) and catering, Belgrade Theatre Productions Limited and Belgrade Theatre Commercial Ltd. This policy is issued on behalf of the Belgrade Theatre and its subsidiaries, so when we mention the Belgrade Theatre, ‘we’, ‘us’ or ‘our’ in this policy, we are referring to the relevant company within our group. The Belgrade Theatre is the data controller and responsible for our website.

The Belgrade Theatre abides by data protection law, including the Privacy and Electronic Communications Regulations 2003 (PECR), the General Data Protection Regulations (GDPR) and the Data Protection Act 2018.

INFORMATION COLLECTION

We collect various types of personal information from you in a number of ways:

When you register on our website, buy tickets or memberships or make a donation, we’ll collect and store the personal information you give us. This information may include:

  • Your full name, title and date of birth
  • Your email address, postal address and telephone number
  • Technical data, such as your IP (internet protocol) address, your browser type and version and location data.
  • Usage data, such as how you use our websites and services.
  • Ticket purchase, membership & donation history
  • Gift Aid status
  • Payment card details (these are not stored, except if you have requested an Automatic Renewal Membership when they are stored securely by Sage Pay.
  • Your contact and communication preferences and any access requirements.

 

CCTV: The Belgrade Theatre has several CCTV cameras throughout the building for security purposes. Access to this footage is restricted to key personnel and is only accessed under strict guidelines in relation to security issues.

Photography & Video: We sometimes record our events and activities through photographs and film both for archive purposes and to help spread the word about the type of work we do.  Participants, performers and staff are advised of this in their contracts/registration forms. Members of the public are asked to advise the photographer/videographer if they do not wish to be captured and notices to this effect are displayed at relevant events.

Information from other sources: We may also collect information about you from other sources:

  • Ticket agents who share information with us when you book a ticket for a production or other event at the Belgrade Theatre.
  • Other arts organisations or partners that the Belgrade Theatre works with, but only if you have given them your consent. You should check that organisation’s privacy notice when you provide your information to fully understand how they will process and safeguard your data.
  • Information about how you use our data from analytics providers such as Google.

SENSITIVE PERSONAL DATA

Data protection law recognises that certain categories of personal information are more sensitive such as health information, genetic and biometric data, information about your race or ethnicity or your religious or philosophical beliefs or sexual orientation, political opinions or trade union membership. We do not usually collect this type of information about our customers unless there is a clear reason for doing so. (For example, we collect health information about participants in our programme of classes and courses or about customers who have access needs; we collect anonymised diversity information on audiences so that we can monitor how well we are doing in attracting a broad audience). Where we collect sensitive data, we will tell you that we are doing so, and will have additional security measures in place to restrict access only to people who need to see this information, and, as with other personal information that we collect, a commitment to deleting this information once the need for storing it has passed.

Children and Vulnerable Adults: We are committed to safeguarding children, young people and vulnerable adults and do all we can to ensure that all who work at the Belgrade, including volunteers, whether on stage or joining an education project, are safe and benefit from their experience. Protecting their privacy is important in achieving this.

Anyone under the age of 18 must obtain a parent or guardian’s permission every time they provide any personal information to us. We require their signature on any documentation when signing up to any Belgrade project. We also require the carer’s signature on similar documentation relating to vulnerable adults.

Access Information: Individual access requirements are requested and noted on a customer record in order for us to be able address your needs during a visit and to enable us to monitor how well we are doing in attracting a broad audience. This information will be checked periodically to ensure it is up to date and will be renewed every two years. For further information please visit www.belgrade.co.uk/your-visit/access-information.

SAFE STORAGE OF YOUR DATA

We store personal data under strict safekeeping and confidentiality measures on secure servers operated by the Belgrade Theatre and stored securely by Spektrix, our ticketing, marketing and fundraising systems provider. All Spektrix servers are located in a Tier IV data centre in the UK, which has 24/7 security and tightly restricted access control. Click Spring participant data is stored securely on a bespoke data base with its server based in the UK. Only authorised Belgrade staff who need to process your data have access to it.

MARKETING COMMUNICATIONS

Our processing of your personal data will always have a lawful basis, either because it is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate interests.

Contract: When you make a purchase from us or make a donation to us, you are entering into a contract with us. In order to perform this contract we need to process and store your data. For example we may need to contact you by email or telephone in the case of cancellation of a show, or in the case of problems with your payment.

Legitimate Interests: In certain situations we collect and process your personal data for purposes that are in our legitimate organisational interests. However, we only do this if there is no overriding prejudice to you by using your personal information in this way.

For marketing communications we use our legitimate organisational interest as the legal basis for communications by post and email. In the case of postal mailings, you may object to receiving these at any time using the contact details at the end of this policy. In the case of email, we will give you an opportunity to opt out of receiving them during your first purchase with us. If you do not opt out, we will provide you with an option to unsubscribe in every email that we subsequently send you, or you can alternatively use the contact details at the end of this policy.

We aim to communicate with you about the work that we do in ways that you find relevant, timely and respectful. To do this we use data that we have stored about you, such as what events you have booked for in the past, as well as any preferences you may have told us about.

Consent: For any situations where the two bases above are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation.

HOW WE USE YOUR DATA

Your data allows us to process any sales transactions, donations or other payments, verify your financial transactions and fulfil any requests – such as applications for memberships, donations, competition entries, participation in campaigns and the provision of information. It also allows us to provide the best possible customer service and to assist us with internal administration.

In addition to marketing communications, we also process personal information in the following ways that are within our legitimate organisational interests:

  • To ensure our website is presented in the most effective manner for you and for your computer and provide customer service in relation to your use of the website.
  • In order to improve our website and the services we offer, we may analyse information about how you use it and the content and ads that you interact with.
  • In order to provide you with a more personal service we may also use the data we hold about you to classify our audience into groups or segments, using this data and publically available information: this helps us to understand our audiences better and ensure we are sending relevant messages to you.
  • To measure and understand how our audiences respond to a variety of marketing activities so that we can ensure our marketing is well targeted, relevant and effective.
  • To keep a record of the relationship you have with us, and use that to ensure that the communications we send you are personalised, and relevant to you and your interests
  • To provide third parties with statistical information about our users, but this information will not be able to be used to identify any individual user.
  • From time to time we conduct surveys and promotions and may request information from you as part of these. Participation in these is entirely voluntary and you therefore have a choice whether or not to disclose any information which might be required.
  • The use of CCTV in and around our premises for security purposes to ensure the safety of our visitors and staff.

Any materials or information that you post to the comments section of our website may be visible to other users and is stored on our servers for the purposes of making the site and content available. We do not collect, store or use any personal information contained in any such post for any other purpose. We advise you to be selective about what information you post on the site or that you provide to other users.

As a registered charity we undertake fundraising activities and for a small number of individuals may to seek to supplement booking information with publicly available information such as age, place of residence, wealth, career, interests and public donations to other organisations. This helps us understand the background of the people who may choose to support us and helps us to make requests for donations to those who may be willing and able to give.

We may also share your personal data to comply with a legal obligation, such as when you exercise your rights under data protection law or when we have to report or respond to a request from any regulatory or government authority (such as reporting Gift Aid details to HMRC) or to meet national security or law enforcement requirements or prevent illegal activity.

 

Sharing your information with others: We will never share, sell or rent your personal information to any third parties for marketing purposes without your prior consent.  Other than as expressly set out in this Privacy Policy or as otherwise required or permitted by law, we will not share your personal information without your consent.  We may share personal data securely under the following circumstances and with the following trusted service providers:

  • When you have consented for us to share your details with a named partner company eg the producer of a show being performed at the Belgrade.
  • Advertisers that require the data to select and serve relevant adverts to you and others. This does not include identifiable information about you.
  • Social media sites for the purpose of targeted advertising and data analytics.
  • Analytics and search engine providers that help us to optimise our website.
  • Payment processors in order to complete your transaction with us.
  • Printers and mailing houses to facilitate distribution of print and correspondence.
  • Email, data delivery and website hosting service providers.
  • Marketing and database service providers to help us to provide you with a more personal service.
  • Third party data services who help us to segment and understand our audience so that we can send you the most relevant and targeted communications and tailor pricing.
  • Where required to do so by law or when requested by the police or a regulatory or government authority.
  • We make sure that any company that provides a service to the Belgrade Theatre which involves the processing of personal data enters into an agreement with us and meets our standards for data security. This agreement will require them not to use personal data for anything other than the clearly defined purpose relating to the service they are providing.

 

Transfers outside the European Economic Area (EEA): The Belgrade Theatre is committed to protecting personal data. We may need to transfer personal data outside the EEA, for example one of our service providers based outside the EEA. If we do this, we will ensure that your privacy rights continue to be protected in line with data protection law and that secure methods of transfer will be used. Please contact us if you would like further information about the specific mechanism used by us when transferring your personal data outside the EEA.

Your debit and credit card information: If you use your credit or debit card to purchase from us or to make a donation, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). You can find more about this standard from the PCI Security Standards Council. If we provide you with the option to store your card details for use in a future transaction this would be carried out in compliance with PCI-DSS and in a way that none of our staff members are able to see your full card number. We never store your 3 or 4 digit security code.

Links to Third Party Websites: The Belgrade Theatre does link to other third party websites such as YouTube and Facebook and other websites of cultural organisations in the area, which have their own terms of usage that you should be fully aware of. Please refer to the Cookies section later in this document for further information. Please note that Belgrade Theatre is not responsible for the privacy policies of third party websites and recommends that users also check the privacy policies of other websites before registering any personal data linked to these sites.

Failing to provide personal data: Some of the data we collect is required by law to fulfil our contract we have or are trying to enter into with you (e.g. booking a ticket). Failure to provide this data may mean that we are unable to complete our service e.g. if a show is cancelled and we need to get in touch with you to let you know but don’t have any contact information.

GIVING YOU CONTROL

When purchasing tickets, membership or any other services from us, you are given the opportunity to opt in to receiving email news and information from the Belgrade Theatre and occasionally also from the named company responsible for the event you are booking for.  The Belgrade Theatre will only contact you with news or information or pass on your personal information to the named company if the relevant box has been ticked.

You can update your personal information and communications preferences, or unsubscribe, at any time in the following ways:

  • Online by logging into My Account on the Belgrade website
  • Clicking on the ‘unsubscribe’ link within an email from us
  • Emailing us at dataprotection@belgrade.co.uk
  • Writing to us at Data Protection Team, Belgrade Theatre, Belgrade Square, Coventry CV1 1GS

 

How long do we keep your information? We will only keep your personal information in accordance with data protection law for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.  Where your information is no longer required, we will ensure it is disposed of, deleted or cached in a secure manner.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure of the information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

 

Your rights: You have rights under data protection law: the right to be informed, the right of access the right of correction, the right to erasure, the right to restrict processing, the right to transfer data, the right to object and rights in relation to automated decision making including profiling. You may also object to the processing of your personal information for direct marketing purposes. For further details on your rights please see the guidance from the Information Commissioner’s Office (ICO) which is the UK supervisory authority for data protection issues.  Please use the contact details for the Belgrade Theatre below if you would like to exercise any of these rights.

 

Contact details and further information: Please get in touch with us if you have any questions about any aspect of this privacy policy:

Data Protection Team
Belgrade Theatre
Belgrade Square
Coventry
CV1 1GS

dataprotection@belgrade.co.uk

If you are not satisfied by the way we have handled any issues concerning your data you have the right to make a complaint at any time to the ICO. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.  The ICO’s contact details are as follows:

Information Commissioner’ Office
Wycliffe House
Water Lane
Wilnslow
SK9 5AF

casework@ico.org.uk

Updated 10 March 2020

 

CHANGES TO OUR PRIVACY POLICY

Any changes that we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. The date of the last update is noted at the top of the document.

 

UPDATES TO YOUR DATA

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.