Privacy Notice
Shakespeare Link is committed to protecting your privacy and ensuring all personal information is safe and secure. This Privacy Policy explains what data we collect and how/why we use it. This notice describes the use (“processing”) of Personal Data by Shakespeare Link on and off this website. Shakespeare Link is the Data Controller under the UK Data Protection Act 2018.
Personal data means any data that allows you to be identified. We process personal data including:
· contact information;
· marketing preferences and consents;
· purchase and booking information
· technical information about your computer, your approximate location and data on how you used the site and its content, and interactions with emails we’ve sent;
The data is gathered either from you, or via our website and other services such as social media.
What we use your data for:
We use personal data to:
· Fulfill bookings and ticket purchases;
· Maintain this website, including keeping it secure and working properly;
· Market our products, services and events.
We do so based on:
· Your consent;
· Performance of a contract or intention to enter into a contract (i.e. buy something from us, including tickets);
· Legitimate interest.
Who we share your Personal data with, and where it goes:
Except as described below or if we specifically tell you otherwise, Personal Data won’t be shared with third parties except where you’ve told us that we can.
We use the following services:
· Meta (including Facebook and Instagram)
· Google (including YouTube and Google Analytics)
· PayPal
Each of these companies is a separate Data Controller. Please review their own Privacy Notices. Information about how you use the website will be shared with them, and they may track your actions on this and other sites.
We also use other providers for ‘back office’ activities including marketing/emailing. These ‘Data Processors’ are subject to contractual arrangements as required under the DPA 2018.
Some of our service providers operate in the US, meaning that your data may be processed outside of the UK. Where this is the case Shakespeare Link will have a contractual agreement in place protecting your data.
How long do we keep your data?
For marketing information, we keep your data until you tell us not to, or we don’t believe you are likely to want to receive it any longer.
Comments on our Social Media pages, and technical identifiers may be retained by some service providers indefinitely, subject to the site operator’s own Privacy Notice.
You can remove comments on social media at any time and it will cease to be processed by Shakespeare Link, but may be retained by the site operator.
Your rights:
Your rights under UK Data Protection law can be found here. They include the right to:
· opt out of receiving direct marketing information;
· be informed of the processing of your personal data;
· request a copy of your personal data;
· request that Shakespeare Link amends, deletes or ceases to process your personal data;
Exemptions apply to each of these rights, and additional data rights may also apply under limited circumstances. To exercise these rights, or if you are unhappy with how we process your data, please contact info@shakespearelink.org.uk
If we’ve been unable to resolve your complaint, or to find out more about your Privacy rights you can also contact the Information Commissioner’s Office.
Additional information
How we protect your data:
Shakespeare Link seeks to limit the use of personal data and provides all employees and volunteers with information on their role in protecting personal data. We take appropriate and proportionate security measures. In the event of a data breach, Shakespeare Link has access to professional advice and support.
Companies processing personal data on our behalf have appropriate contractual terms in place including security requirements.
What automated decision making and/or profiling we do with user data:
We do not undertake any automated decision-making.
Service providers acting as separate Data Controllers may use targeting features to ensure that advertisements are reaching target audiences. These may target ads based on location, age, gender, geographic location, or specifically expressed interests. While this data is processed via our site because of the embedded services, we DO NOT process that data for our own purposes. Some web-browsers allow you to block tracking cookies.