Privacy Policy (Customers)
At the Drayton Arms Theatre we take your privacy seriously and we respect your privacy and data protection rights.
This privacy policy describes the way in which the Drayton Arms Theatre deals with the information and data you provide to us.
Please take time to read this privacy notice in full, together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you, to ensure that you understand and are happy with how we collect and process your personal data.
This privacy notice supplements the other notices and is not intended to override them.
Who are we?
The Drayton Arms Theatre is a trading name for The Drayton Arms, 153 Old Brompton Road, London, SW5 0LJ. The Drayton Arms is operated and managed by Mitchells & Butlers Leisure Retail Limited (company number 01001181 with its registered office at 27 Fleet Street, Birmingham B3 1JP). Further details can be found at www.mbplc.com.
Why do we need personal data?
When you use our websites or social media channels we collect technical information about your visit to ensure you are receiving the best possible service and the information is displayed in the most accessible format for your device. Upon confirmation of your consent we also use your name and email address to keep you informed of our upcoming productions in our e-mailing list.
Who is the Data Controller?
e-mailing list & technical data - The Drayton Arms is the data controller for any data you provide upon giving consent to recieve our email updates on upcoming productions.
box office data - As a theatre who operates entirely as a receiving venue, in which a formal direct hire contract agreement has been signed between the Drayton Arms Theatre and the visiting theatre company, the theatre company acknowldeges that they are the data controller for the data you supply in order to purchase a ticket. Upon purchasing a ticket you are entering into a direct contract with the theatre company to attend the relevant performance. The Event Organiser / Data Controller is named as part of the booking process.
What data do we collect?
e-mailing list - If you have given us your consent to join our email marketing list and receive updates on future productions we will collect the following identity data;
technical data - In order to ensure you receive the most accessible version of our website and the best performance we collect the following information for diagnostic purposes;
box office data - In the interests of transparency we feel it is necessary to display the list of data in which the ticketing provider (TicketSource) is processing and the theatre company is controlling whe you are purchasing tickets;
How do we collect data?
e-mailing list - We collect data for our e-mailing list via a GDPR compliant signup form with MailChimp.
technical data - We collect technical data about your visit to our website through the use of cookies and session data.
box office data - This data is collected by the data processors TicketSource on behalf of the theatre company you are purchasing tickets with. To read further information on how TicketSource collects and processes this data please refer to the TicketSource customer privacy policy; https://www.ticketsource.co.uk/kb/terms-of-use/customer-data-privacy-policy
How we use your data
e-mailing list - We use your email address to send you our monthly productions newsletter. This is processed under the lawful basis of consent. Upon signing up to our e-mailing list you will be able to read our privacy policy and how we will use your data. A record of your consent will be retained in our MailChimp account and at any time you can remove consent by clicking the unsubscribe link in any of our emails.
technical data - We use the information collected from our website to monitor the health and status of our website. To identify areas of our website that could be improved or streamlined.
box office data - All theatre companies are contracted to give the Drayton Arms Theatre access to your data under the lawful basis of legitimate interest on the grounds of safety and security of our venue. We are required to access a list of attendees for each performance in order to provide a Front of House service to allow access into the theatre. This information is destroyed as soon as the performance has finished unless we are required to keep it for a safety or security concern. I.e. A theft were to take place in the theatre whilst the performance was in progress.
How we protect your data
e-mailing list - All our data for our e-mailing list is stored within our secure MailChimp account. We use complex passwords and this is also further secured with two-factor authentication. Access is strictly limited to theatre staff only. No access is given to our e-mailing list by any of the theatre companies who hire the theatre.
technical data - All our technical data is stored within our encrypted database using complex passwords. To increase this protection access is only granted to trained staff and passwords are regularly cycled.
How long we retain your data
e-mailing list - We retain your data for our e-mailing list as long as you choose to still receive communications from us. In the event you unsubscribe from our mailing list your data is instantly removed from our lists and you will only be able to resubscribe by signing up again through our website link. On a yearly basis we will review our e-mailing list and if we discover that you have not opened any of our emails since the last review date we will also remove your data from our e-mailing list and assume you no longer wish to hear from us. In this instance we may send you one final reminder email to ask if you wish to remain on our e-mailing list.
technical data - We retain technical data for the operation of our website for two years to allow us to compare visitis to our websites on a year on year period.
Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. If you wish to exercise any of the rights set out above, please contact us by email: enquiry@thedraytonarmstheatre.co.uk
You have the rights to:
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests.
Data Sharing
In order to make certain services available to you, we may need to share your personal data with some of our service providers, for example the processing of a telephone booking to purchase a ticket to an upcoming show. The Drayton Arms Theatre only allow our service providers to handle your personal data when we have confirmed that they apply appropriate data protection and security controls. We will never sell or rent our customer data to other organisations for marketing purposes.
Contacting Us
If you have any concerns, or would like more details about how we process your personal data, you can contact us using enquiry@thedraytonarmstheatre.co.uk
Our full details are:
Data Protection Officer
data.protection@mbplc.com
27 Fleet Street, Birmingham B3 1JP
You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the supervisory authority for data protection issues in the UK (phone: 0303 123 1113 or at www.ico.org.uk/concerns). However, we would appreciate the chance to deal with your concerns before you approach the ICO, so please feel free to contact us in the first instance.
UPDATED 24/05/2018