You privacy and the security of the information you provide is important to us. This policy details how and why we use your personal data, and the rights you have.
We process, or use, your personal data strictly in accordance with the UK General Data Protection Regulation (UK GDPR), Data Protection Act 2018, and Privacy and Electronic Communications Regulations 2003 (PECR).
We collect your name and contact information, and any additional information you provide with your booking such as accessibility requirements.
Additionally, when you make a donation with Gift Aid, we collect your home address (house number or name) and postcode, and must store this by law for six years from the date of your donation.
We collect your eMail address, and optionally name.
We collect your name, social media username (such as your @twitter name or Facebook name), and details of your enquiry. If you send us photographs then these may also contain your personal data.
We generate log files, which will include an IP address assigned to you or, more likely, the company that provides you with Internet access.
We also use something called 'cookies'. A cookie is a small text file that allows us to distinguish you from other visitors.
A cookie can't read file on your computer, and doesn't provide any personal data about you. The cookie is never linked to your personal data.
To make full use of the features of our website, and to book tickets, your computer will need to accept cookies. We use technologies, such as cookies, to customise content, analyse traffic to our website, and provide integration with social media.
Please note, if you choose to block all cookies, our site will not function as intended and you will not be able to book tickets online. If you have blocked all cookies, and wish to book tickets, you will need to re-enable cookies.
To find out more about cookies visit allaboutcookies.org
We use your personal data to provide you with the services, events, or information you have requested and to administer donations, improve our communications, and ensure you are kept informed.
We will never sell your data to anyone, however we may share generalised information with organisations such as SCDA, NODA, Creative Scotland or similar to analyse audiences and help support funding applications or ticket sales. This data is entirely anonymised and would include data such as audience members' distance from the theatre, or how many shows you attend.
We may be required by law to share your personal data under some circumstances to competent requests from authorities such as the Police or a Court.
We process data to send you relevant marketing information, such as upcoming shows or programmes of events at The Little Theatre. This is in the legitimate interests of the Theatre and Nairn Drama.
You can let us know how you would prefer to receive this information, or ask that we do not contact you at all with marketing communications.
Members of Nairn Drama Club provide additional information to Nairn Drama Limited such as contact details for next of kin, important medical information (such as allergies), contact details, training history, and other relevant data to enable us to manage your membership and help assure your safety. For members under the age of 18, this will include personal data of both the member and parent or responisible person. This data is held in the strictest of confidence and will be deleted when it is no longer required
We use appropriate measures - both technical and organisational - to protect any data we hold from any loss, misuse, unauthorised access, or disclosure as far as is reasonably possible.
We accept and acknowledge that no-one can offer 100% security and that failure of systems, unauthorised use, or other factors may compromise the security of data. Should this happen, we will inform the affected individuals promptly and confirm the extent of the incident.
We use the approved online payment processor, Stripe (Stripe Payments UK Limited, Registered with the FCA), for processing online ticket sales. We do not have access to your credit card information at any time
Stripe will have access only to information on your Payment Form which is typically your full name and post code, they require this information to help protect cardholders from fraud.
For more information on how Stripe handle your data please refer to their Privacy Notice, where you are considered an 'End Customer'
Within the Theatre we use SumUp for in-person card payments. To learn more about how SumUp handle personal data please refer to their Privacy Notice.
You have lots of rights with respect to how your data is processed, those relevant here are;
If you wish to exercise any of these rights, please contact us.
If you have any questions regarding this policy, please contact us.
If you have a complaint about how we have handled your personal data, please contact us with your complain in the first instance.
We will respond to your complaint within seven working days. If you are unsatisfied with the response, you have the right to make a complaint to a supervisory authority, this would be the Information Comissioner's Office (ICO)