Giffords Circus Privacy Policy

PRIVACY POLICY

Here at Giffords Circus, we take your privacy seriously. We promise to respect any personal data you share with us and keep it safe. We aim to be clear when we collect your data and not do anything you wouldn’t reasonably expect. This policy explains who we are, what information we collect, which partners we work with, and your rights with regards to any information you share with us. It also describes why developing a better understanding of our customers and supporters through their personal data allows us to make better decisions about shows and programming, and, ultimately, helps us to reach our goal of making work of the highest quality available to all.

We work with DigiTickets for our online box office services as third party ticket providers, therefore our privacy policy reflects their privacy policy, which can be viewed here https://www.digitickets.co.uk/privacy-policy

Please read this information carefully, as by providing your data to us you acknowledge you have read this policy and understand we will process your data in accordance with its terms.

We promise to use the information we collect about you in accordance with the General Data Protection Regulation (2018) (GDPR), the Data Protection Act (2018) and the Privacy and Electronic Communications Regulations (PECR, 2003). We aim to be clear when we handle your data, and not do anything you wouldn’t reasonably expect.

What information do we collect?

You may be required to give us your information in order to book tickets, sign up to a newsletter, make a donation or join a membership scheme, update your preferences, sign up for an event, visit our offices, apply for a job, book a conference or communicate with us. When you book tickets we need to collect information about you to process the transaction and fulfil your order.

We may collect the following information from or about you:

• Name
• Postal address
• Telephone number(s)
• Email address
• Ticketing history
• Billing/payment information (we keep the last four digits of a card number to help us
• identify transactions)
• Donation history
• Communications preferences
• Access requirements (for you or your party)
• Allergies and dietary requirements (for you or your party)
• Qualitative opinions or attitudes about our services and programme through surveys
• Any other information you provide to us by email, letter, telephone, social media, via our websites or apps, or in person
• CCTV security recordings, and possible photography or video at performances/events
• Information that is publicly available

Sensitive Information: As recorded above, this includes health information such as disability needs (e.g. to assist with seating) or allergies (e.g. for a catering requirements) which we may require. We may ask for other information specific to a job or volunteering role you are applying for. From time to time we might ask customers to take part in surveys to assess age, gender and ethnicity, amongst other aspects; this is optional, rather than mandatory, and you always have the right to decline providing us with this information.

Online Information: Through our websites and apps, we may receive and store certain details through “cookies” which record how the sites are being used to help us provide improved services, analyse usage and enable transactions. Cookies are small text documents that are stored by your web browser on your computer or mobile device when you visit our website. They enable an enhanced experience for you by storing things such as your user details or preferences. The benefit for us is that they track your use of our site, so we can analyse trends and improve our service. They don’t tell us who you are. Our website can only see cookies that it has created, not those issued from any other website. You can decide whether or not to allow cookies on your computer.

When we send you emails, we may include a web beacon. This helps us keep a record of the emails we send you, and we may track whether you receive or open them so we can make sure we are sending you the most relevant information. When you click on a link in an email, we may record this individual response to allow us to customise our offerings to you. Web beacons collect only limited information, such as a cookie identifier, time and date of a page being viewed, and a description of the page on which the Web Beacon resides (the URL). Web Beacons can be refused when delivered via email. If you do not wish to receive Web Beacons via email, you will need to disable HTML images or refuse HTML (select Text only) emails via your email software.

We use social media to provide updates on our activities and to promote events and projects. We may tailor adverts on social media and elsewhere online relevant to your interests. Depending on your own privacy settings, you may control Giffords Circus permission to access information via social media platforms.

We use some online tracking and analysis services such as Google Analytics to find out how our websites are being used, which activities are working best, and how we can improve customer experience.

From time to time, for certain marketing campaigns, you may receive personalised online advertising after visiting our website. Many of these online adverts allow a facility to opt-out completely or refine your preferences to make advertising more relevant to you.

Data from third parties: We may also obtain or collect personal information about you from other third-party sources, for example:

• a family member, friend, carer, or colleague contact us on your behalf, for instance to purchase a gift membership
• we may ask parents/guardians to supply information about under 16s for workshops or projects
• if we run an event in partnership with another third-party organisation, your details may be shared to help us run that event
• if we engage an external supplier for photography or video.

Why do we collect this information, and how do we use it?

We will use your information: with your consent (where we require it); for performance of your contract; where we need to comply with a legal obligation; or for our legitimate interest or that of a third party.

The information will be used in developing a good understanding of visitors, participants, ticket-buyers and supporters through personal data allows us to make better business decisions enabling us to operate, market our services, and fundraise more efficiently. We believe this will help us reach our goal of ensuring everyone is welcome at Giffords Circus.

We use the information we collect about you:

• to contact you if there is any important change to your booking or visit
• to fulfil our contract with you
• to keep a record of the relationship we have with you
• to process a transaction and carry out completion of a purchase (your personal information and card details may be passed to third party service providers; card details will only be used in this way for the purpose of handling an individual transaction)
• to inform you about relevant events, services, or activities we believe will be of interest, as well as opportunities to support our work as an arts charity
• to provide a personalised service and ensure the best possible experience when you visit us
• to administer any donations you may make, including processing Gift Aid if relevant
• to ensure that the information we already hold is accurate and up to date
• to improve our products, services, and information in the future
• we may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you.
• to send you surveys and for market research purposes
• to assist us with reporting and analysis for our own needs or the needs of any funding partners (e.g. the Arts Council)
• to ensure we know how you prefer to be contacted
• to protect against fraud or unlawful activity
• to ensure compliance with policies, procedures, and laws
• to process any recruitment information, whether directly or via an agent
• to share with approved suppliers (for instance for research and direct mail)
• from time to time, to undertake customer research to help us understand how we can improve our services or information
• to promote Giffords Circus and its activities (e.g. imagery, quotes from social media etc)
• from time to time, to make recommendations to you about other relevant cultural activities by approved partner organisations (NB: these organisations would not be in possession of your data unless you purchase a ticket from them)

Building profiles of supporters and targeting communications: We use profiling and screening techniques to ensure communications are relevant and timely, and to provide an improved experience to our customers and supporters. From time to time we may make data available to agencies for analysis and research purposes (for instance, comparison sales trends over time, postcode mapping etc). This assists with marketing activities, reporting to funders and strategic planning, helping us to make better business decisions.

When building a profile, we may analyse geographic, demographic and other information relating to you in order to better understand your interests and preferences in order to contact you with the most relevant communications. In doing this, we may use additional information from third party sources when it is available. Such information is compiled using publicly available data about you, for example addresses, listed Directorships or typical earnings in a given area.

There are some membership and donation communications that we are required to send regardless of your contact preferences. These are essential communications deemed necessary to fulfil our contractual obligations to you. This would include payment confirmation, thank you letters, group booking, ticket offers, Gift Aid confirmation letters and querying returned mail or bounced payments with you.

Sharing your data with third parties: We will not share any of your personal details with any other third parties without your agreement, unless required in order to fulfil our contract with you, or allowed by law (for instance, if a safeguarding issue arises). In general, the third-party providers used by us to fulfil our contract with you will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. These providers include our Ticketing System provider, other database software suppliers, email distribution service and mailing house. We have agreements in place with each to ensure that your data is secure at all times and cannot be accessed or used for any other purpose. We may share personal information with other organisations, particularly The Audience Agency, who use this to analyse ticket sales for national and regional research into patterns of arts attendance in England (for instance, comparison of sales trends over time and geographical comparisons). This assists with reporting to stakeholders and strategic planning, helping us to make better business decisions. Your personal data is never sold on to any other agencies or companies.

Our website may contain links to and from the websites of other organisations. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

How can you update your preferences?

With your permission, we will tell you about our future events, ticket offers, our other relevant services or opportunities to support our work. You can set and update your personal contact and interest preferences at any time, by visiting your account online at https://giffordscircus.com/book-tickets/  or in person at our Giffords Circus onsite box office or over the phone on 01453 800 200. Every email we send to you will contain an option to unsubscribe, or you can contact us via the details below. In accordance with this Privacy Policy we will always contact you if there is any important change to your booking. Alternately, you can email us at info@giffordscircus.com with any changes you would like to make to your preferences.

How we keep your data safe?

We are located in the UK. Your data is held in the UK and only accessed by authorised and trained staff. Only employees and approved contractors / developers we may appoint from time to time, and who need the information to perform a specific job, are granted access to personally identifiable information. We will not share any details with any other third parties without your agreement, unless required by law. We will ensure information is held securely, and only those who need access to it can see it. We will delete this information when we no longer need it.

Where we appoint an external party to analyse or process data any such arrangements will be subject to a formal agreement between Giffords Circus and that organisation, to protect the security of your data.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Data retention: We will retain your information for as long as is necessary to provide you with the services you have requested or require from us unless (a) we must keep it to comply with applicable laws or evidence compliance with such applicable laws; (b) there is an outstanding issue, claim or, dispute requiring us to keep such information until the issue, claim, or dispute is resolved; or (c) the information must be kept for our legitimate business interests, such as fraud prevention and enhancing users’ safety and security. We will store data in our ticketing system for a maximum of 5 years after your last transaction or communication with us. If you have made a donation and a Gift Aid declaration, we are obliged to keep the declaration and the details of the person who made it, for six years. For data supplied as part of a job application to us, we will keep your details for six months, then delete it.

Changes to this policy

We may change or update this Privacy Policy from time to time. Any significant changes will be communicated on our website or by contacting you directly.

Your rights

You have rights including the following:

• to be informed of the ways in which we use your information, as we seek to do in this policy
• to request us to stop processing your personal data for marketing purposes
• you can request a copy of the personal information we hold about you
• you can request that inaccuracies are corrected
• you can withdraw any consent to direct marketing (please see the section “Why do we collect this information, and how do we use it?” above to see when we are relying on your consent)
• the right to object to our using your information on the basis of our legitimate interests (refer to the section headed “Why do we collect this information, and how do we use it?” above to see when we are relying on our legitimate interests) (or those of a third party) and there is something about your particular situation which makes you want to
• object to processing on this ground
• in certain circumstances you can request that we limit or cease processing or erase your personal data
• you can lodge a complaint with the Information Commissioner’s Office or the relevant authority in your country of work or residence
• Please note that we may need to retain certain information for our own record-keeping and research purposes. We may also need to send you service-related communications.

Do you have any questions or concerns?

Please contact us if you have any questions about this policy, or wish to be removed from any communications or data processing activities:

• You can update your communication preferences online at https://giffordscircus/book-tickets/ 
• Email us on: info@giffordscircus.com or boxoffice@giffordscircus.com
• Or write to us at: Giffords Circus, Fennells Farm, Lypiatt, Stroud, GL6 7NE.

Subject Access Request: If you wish to make a subject access request (SAR), you can contact us through any of these channels in writing. Whilst you are not required to complete it, we can supply you with a SAR form. We will try to respond to all legitimate requests within 30 days. Occasionally it may take us longer if your request is particularly complex or if you have made a number of requests in which case we will keep you notified and updated. We will require specific details and proof of identification. This is a free service though we reserve the right to charge for reasonable administrative costs if your request is clearly unfounded, repetitive or excessive.

September 2021

 

DigiTickets Privacy Policy

Who we are

In this privacy policy references to "we", "us" and "our" are to Giffords Circus. References to "our Website" or "the Website" are to giffordscircus.digitickets.co.uk.

Information collected and its use

The information we collect via the Website may include:

1. Any personal details you knowingly provide us with through forms and our email, such as name, address, telephone number etc.
2. In order to effectively process credit or debit card transactions it may be necessary for the bank or card processing agency to verify your personal details for authorisation outside the European Economic Area (EEA). Such information will not be transferred out of the EEA for any other purpose.
3. Your preferences and use of email updates, recorded by emails we send you (if you select to receive email updates on products and offers).
4. Your IP Address, this is a string of numbers unique to your computer that is recorded by our web server when you request any page or component on the Website. This information is used to monitor your usage of the Website.
5. Information about your device such as your web browser, screen resolution and operating system. This information is used to ensure we continue to support the different devices used by our customers.
6. Data recorded by the Website which allows us to recognise you and your preferred settings, this saves you from re-entering information on return visits to the site. Such data is recorded locally on your computer through the use of cookies. Most browsers can be programmed to reject, or warn you before downloading cookies, information regarding this may be found in your browsers 'help' facility.

We do not store any credit card details.

What we do with your information

Any personal information we collect from this website will be used in accordance with the Data Protection Act 1998 and other applicable laws. The details we collect will be used:

1. To process your order, to provide after sales service (we may pass your details to another organisation to supply/deliver products or services you have purchased and/or to provide after-sales service);
2. In certain cases we may use your email address to send you information on our other products and services. In such a case you will be offered the option to opt in/out before completing your purchase.

We may need to pass the information we collect to other companies for administrative purposes. We may use third parties to carry out certain activities, such as processing and sorting data, monitoring how customers use the Website and issuing our e-mails for us. Third parties will not be allowed to use your personal information for their own purposes.

Cookie Policy

Like many websites we use cookies to store and then retrieve small bits of information on your computer when you visit. This information is used to make the site work as you expect it to. It is not personally identifiable to you, but it can be used to give you a more personalised web experience.

Some of the information stored is put there by other companies whose software we have added to the site, and this can also impact your experience of other websites you may visit after leaving ours.

If you continue to use this site without taking action to prevent the storage of this information, you are effectively agreeing to this use.

If you want to learn more about the general uses of cookies, including how to stop them being stored by your computer, please visit Cookiepedia - all about cookies.

Below is a list of the different types of cookies used on this site, and an explanation of what they are used for. If you would like any more information, please get in touch.

Cookie	Name	Expiration Time	Purpose
Shopping Basket	PHPSESSID	24 minutes	This cookie is used to keep track of what items are in a user's shopping basket.
Cookie Consent	dtAnalyticsConsent	1 year	This cookie is used to monitor the users consent for analytical cookies on our site. No user data is collected without this being enabled.
Google Analytics	_ga _ga_container-id	2 years	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Read Google's overview of privacy and safeguarding data
	_gid	24 hours
	_gat_tracker-name	1 minute
Microsoft Clarity	_clck	1 year	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site and how they interact with the website. Read Microsoft Clarity's Cookie Overview and Data Retention Policy.
	_clsk	1 year
	CLID	1 year
	ANONCHK	1 year
	MR	1 year
	MUID	1 year
	SM	1 year
New Relic	__cfduid	1 year	This cookie is used to collect information about visitor's experience of the site in terms of performance. This helps us to monitor that our systems are working quickly and effectively, and to identify any problematic areas. Visit the New Relic website

Your Rights

You have the right to request a copy of any information that we currently hold about you. In order to receive such information please send your contact details including address to the following address:
Giffords Circus
Giffords Circus, Fennells Farm, Lypiatt, Stroud
GL6 7NE

Other websites

This privacy policy only covers this website. Any other websites which may be linked to by our website are subject to their own policy, which may differ from ours.