MAST Mayflower Studios Privacy Statement
At MAST Mayflower Studios we take the privacy of your data very seriously. This Privacy Statement specifies how we treat personally identifiable information. We provide this Privacy Statement because you have a right to know what information we collect and how it is protected and used.
“MAST Mayflower Studios” is the trading name for Mayflower Academy Limited (company number 12809454) whose registered office is Mayflower Theatre, Empire Lane, Southampton, United Kingdom, SO15 1AP. Mayflower Academy Limited is the Data Controller of personally identifiable information collected by MAST Mayflower Studios.
We aim to be clear about our purposes when we collect your data and not do anything you wouldn’t reasonably expect. Developing a better understanding of our customers and supporters through their personal data allows us to make better decisions about shows and programming. This ultimately helps us to reach our goal of bringing entertainment and inspiration to Hampshire and the South of England by providing a diverse programme of the highest quality live theatre and the performing arts, and a community and arts education programme for all the people in the region. This Privacy Statement sets out the ways in which we use your data and how you can hold us accountable for that.
What information do we collect?
You give us your information when you buy a ticket from us by phone or online via our website; by signing up for one of our other events or workshops; by updating your preferences on our website; by making a donation or sponsoring us; or by communicating with us. We also keep your details when you sign up to receive emails from us. If you have signed up to our Access Membership, we will note this in your customer record along with your needs.
The information we hold about you may include:
- Your name
- Postal address
- Telephone number
- Email address
- Ticketing history
- Billing information
- Donation history
- Your preferences for how we communicate with you about our activities
- Your accessibility and support needs
We maintain a record of your transaction history, but we do not store your payment card number (although we store the last four digits to help us identify transactions).
We keep a record of the emails we send you, and we may track whether you receive or open them so we can make sure we are sending you the most relevant information.
We may then track any subsequent actions online, such as buying a ticket.
How do we use your data?
We use your data to:
Types of personal information
Purpose and lawful basis for processing
You purchase goods or services from us, including tickets to productions or events or donate to us.
Name, contact information and other relevant information.
We may also process sensitive information where strictly necessary. This may include medical and accessibility information, dietary requirements and a person’s identified gender.
If you are buying the goods or services on behalf of another person then we may also require their information. If they are a child then we may also require and keep a record of parental consent.
This processing is necessary for us to perform the contract with you.
For sensitive information we have received consent, which may include parental consent.
Occasionally undertake customer research to help us understand how we can improve our services or information
You register/enroll for our pair or free events, classes or workshops.
Name, age, contact information, emergency contact information, identified gender.
We may also process sensitive information where strictly necessary. This may include medical and accessibility information and dietary requirements.
If you are registering or enrolling another person then we may also require their information. If they are a child then we may also require and keep a record of parental consent.
We have a legitimate interest in processing the information to administer our events, classes and workshops.
For sensitive information we have received consent, which may include parental consent.
You request information about our goods, services and events, related topics and marketing materials.
Name, contact information, details of your enquiry.
Typically we process this information on the basis of your consent so that we can send you the requested information. We may also have a legitimate interest in keeping a record of your request and information so that we know we’ve responded to you.
We use profiling and segmentation to ensure communications are relevant and timely and to provide an improved experience to our customers and supporters.
You provide us with sensitive information about health, dietary requirements, accessibility needs, for the purposes of a visit or for your membership with us.
Health, dietary and/or accessibility information regarding you or another person.
We process this information based on your explicit consent except if we need to act in case of an emergency where you are unable to give your consent.
If you are providing the information on behalf of another person then usually you will be consenting on their behalf because you have parental responsibility.
You provide us with your information in order to enter into a prize draw, competition or to complete a survey.
Name and contact information.
For a prize draw or competition we use that information to perform the contract between us. If you are a child then we may ask for parental consent.
For surveys we have a legitimate interest in studying how our customers use our services so that we can develop and grow our operations.
We operate CCTV at our premises. These areas feature CCTV notices.
Your appearance and location.
We have a legitimate interest in using the captured footage for monitoring for and deterring crime and using the footage to help us resolve complaints and other disputes. Our use of CCTV is clearly signposted and our CCTV privacy notice can be found here.
If you have opted to receive marketing communications from us by post or email we will tell you about events and MAST Mayflower Studios related services that might be of interest to you. We will;
- Email you about shows, Engage activity, or a combination of these in a regular MAST Mayflower Studios email newsletter. On occasion emails may include a survey. You can sign up to these lists separately so that you only receive what is relevant to you. All emails carry an unsubscribe link to click if you no longer wish to receive them. If you have a MAST Membership we take this as consent to email you information about shows going on sale and other services or information related to your membership.
- Mail you about forthcoming shows, events, Engage activity, or a combination of these in the Mayflower What’s On guide.
In order to send you information that might be of interest to you we will analyse your personal information and booking patterns to create a profile of your interests and preferences. Occasionally, we may include information in these communications from partner organisations or organisations who support us.
If you have opted out of marketing communications, we may still get in touch with you for administrative purposes regarding your booking. For example we may email you to give you important information about the show you’ve booked for with any changes that affect you.
In addition to clicking the unsubscribe links in our marketing emails, you can change your marketing preferences or opt out of marketing communications in your online account at mayflower.org.uk/login or by calling the Box Office on 02380 711833.
“Mayflower Theatre” is the group trading name of Mayflower Theatre Trust (company number 02026445 and registered charity number 294745), Mayflower Theatre Enterprises Limited (company number 03193293), and Mayflower Productions (Southampton) Limited (company number 05601446). The registered office for the Mayflower Theatre companies is Mayflower House, Empire Lane, Southampton, Hampshire, SO15 1AP.
In some situations personal data will be shared with Mayflower Theatre Trust as part of the support services which Mayflower Theatre provides to MAST Mayflower Studios. This includes if you order tickets from us or submit a job application to us. Such data are processed under a Service Level Agreement which contains restrictions around how Mayflower Theatre can processor the personal data. In this situation Mayflower Theatre Trust is acting as a data processor.
We will not share any of your personal details with any other third parties unless required in order to fulfil our contract with you, to efficiently operate our business or allowed by law.
In general, the third-party providers used by us to fulfil our contract with you will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. These providers include our Ticketing System provider, email distribution service and mailing houses. We have agreements in place with each organisation to ensure that your data is secure at all times, and cannot be accessed or used for any other purpose.
Email data is held by our email distribution supplier in the US. This data transfer is safeguarded by the parties having entered into the standard contractual clauses which comply with UK data protection law.
We may share personal information with other organisations, particularly The Audience
Agency, and UK Theatre who use this to analyse ticket sales for national and regional research into patterns of Arts attendance in England (for instance, comparison sales trends over time and geographical comparisons). This assists with reporting to funders and strategic planning, helping us to make better business decisions. Your personal data is never sold on to any other agencies or companies. We may need to disclose your details if required by law to the police, regulatory bodies or legal advisors.
Use of the website mayflowerstudios.org.uk
We collect non-personally identifying information of the sort that web browsers and servers typically make available. This includes technical information, such as your IP address and your login information and information about your visit, such as records of how you navigate the pages on our site and how you interact with the pages.
A cookie is a small file, saved onto your device, which stores small pieces of information about how you have used our site or to aid the ticket buying process. We use cookie information to monitor traffic levels and to find out how our website is used, so we can keep improving. Cookies are also needed to enable your account and the booking process to work smoothly. You can disable cookies in your browser but please be aware that this may result in our website (or parts of our website) not functioning correctly.
Google Analytics Advertising
MAST Mayflower Studios may use the following features through Google Analytics Advertising:
Demographics and Interest reporting, Remarketing, Google Signals, GDN Impression Reporting and the DoubleClick Campaign Manager integration. See Google’s Privacy Notice here: https://policies.google.com/privacy?hl=en-GB
MAST Mayflower Studios and third-party vendors may be using third-party cookies (such as the Google Analytics cookie) or other first-party identifiers, and third-party cookies (such as Google advertising cookies) or other third-party identifiers together. Visitors can opt-out of these Google Analytics Advertising Features through Ads Settings, Ad Settings for mobile apps, or other available means (for example, the NAI's consumer opt-out). See https://policies.google.com/privacy?hl=en-GB#infochoices to opt out from Google Analytics cookies.
Google Signals compiles cross-device data reports on Google users that have enabled personalised advertising in their Google account settings.
Social Media and Messaging Services
Depending on your settings and the privacy policies used by social media and messaging services including but not limited to Facebook, Instagram, LinkedIn or Twitter, we may receive non-personally identifying demographic or analytical information from these services that enables us to better understand the reach and effectiveness of our advertising on these platforms. We may process this information for targeted marketing.
How we keep your data safe
Your data is always held securely. Access to customer information is strictly controlled. It is held in the UK and the processes are compliant with applicable data protection law.
We will store your data in our Ticketing System for a maximum of 10 years after your last transaction or communication with us. To determine this retention period we considered the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and the applicable legal requirements, which includes financial returns and Gift Aid declaration timescales.
Sometimes we ask you to provide sensitive information, for example if you join our Access Membership, or book for certain workshops or if you apply for a job. As with all the personal information we hold, sensitive information is held securely and restricted to those who need to use it. We will delete information when we no longer need it.
CCTV and recorded images
We monitor and record images using closed circuit television at our venue. We do this for the purposes of crime prevention and public safety.
We, or third parties authorised by us, may carry out film and/or sound recording during, before or after a performance and/or in our venue from time to time. Whilst we take reasonable steps to make sure that visitors are notified of such recording when they enter and are given an opportunity to avoid such recording, by attending you consent to you and any persons (including any children) who may accompany you, being included in such recordings and such recordings subsequently being used by us for any reasonable commercial purposes, including without limitation, for marketing and promotional purposes. We will not make any payment to you in respect of your inclusion in such recordings. If you do not wish to be recorded please inform a member of staff during your visit.
You have the following rights related to your personal data:
- The right to request a copy of personal information held about you
- The right to request that inaccuracies be corrected
- The right to request us to stop processing your personal data in certain circumstances
- The right to withdraw your consent, including where we rely on your consent to send you marketing communications
- The right to object to decisions being made about you by automated means. We will inform you if your information is subject to automated processing.
- The right to prevent us processing your information for direct marketing purposes
- The right, in certain circumstances, to have your information rectified, blocked, erased or destroyed if it is inaccurate
- The right to lodge a complaint with the Information Commissioner's Office
How can I see what information you are keeping on me?
You have the right to get a copy of the information that we hold about you, this is called a Subject Access Request. You can request a copy of your personal information in writing to MAST Mayflower Studios, Empire Lane, Southampton, SO15 1AP or email email@example.com.
Please include your full name, address and contact telephone number and details of the specific information you require, including any relevant dates. You may need to supply proof of your identification. We will usually respond to your request within one calendar month from receipt or, if later, from the date we verify your identity.
Please note this service is free of charge, however we will be allowed to charge you for our reasonable administrative costs if your request is clearly unfounded or excessive.
Changes to this policy
We may change this Privacy Statement from time to time. If we make any significant changes in the way we treat your personal information we will make this clear on our website or by contacting you directly.
Please contact us if you have any questions about our Privacy Statement, or wish to be removed from any communications or data processing activities please email firstname.lastname@example.org.
Last updated 18 November 2022.
Any amends or updates to our Privacy Statement will be posted here.