This privacy notice was last updated on 30 March 2023

Purpose of Privacy Notice

We are committed to protecting your personal information and being transparent about what information we hold about you.

Using personal information allows us to develop a better understanding of our patrons and in turn to provide you with relevant and timely information about the work that we do – both on and off stage. As a charity, it also helps us to engage with potential donors and supporters and to report back to our funders.

The purpose of this policy is to give you a clear explanation about how we collect and use the information we collect from you directly and from third parties.

We use your information in accordance with all applicable laws concerning the protection of personal information. This policy explains:

• What information we may collect about you
• How we may use that information
• In what situations we may disclose your details to third parties
• Our use of cookies
• Information about how we keep your personal information secure and your rights to be able to access it

We may change portions of this privacy notice from time to time, so be sure to check it on a regular basis. If we make a change that significantly affects your rights or, to the extent we are permitted to do so, significantly changes how we use your personal information, we will notify you by way of a prominent posting on our websites and/or e-mail and/or by post within a reasonable period prior to the change becoming effective.

If you have any queries about this policy, please contact us using the details in the Who We Are section below.

Who We Are

National Theatre of Scotland is a charity, core funded by the Scottish Government. We also receive funding from various trusts, foundations and individual donors and supporters. Our registered charity number in Scotland is SC033377 and we are also registered as a company limited by guarantee and registered in Scotland under registration number SC234270.

We are the data controller for the personal information you share with us and we otherwise collect in respect of you. We operate in accordance with current data protection legislation.

Should you wish to contact us you can -

Email us: info@nationaltheatrescotland.co.uk

Call us: +44 (0) 141 221 0970

Write to us:
National Theatre of Scotland
Rockvilla
125 Craighall Road
Glasgow
G4 9TL

Information Collection

We collect various types of personal information in a number of ways which are listed below.

For information about how we actively use (process) that data, please refer to the section headed "Data Processing".

Information You Give Us

For example, when you register on our website, subscribe to our e-mails, buy tickets, make a donation or when you join our Theatre For A Fiver scheme, we will store personal information you give us such as your name, email address, postal address and telephone number. We will also store a record of your purchases and donations. All this information is stored in the Spektrix platform headquartered in the UK. You can access your account through our website: www.nationaltheatrescotland.com

About Your Interactions With Us

When you interact with us, whether by phone, e-mail or via other means, for example to request information or make a complaint, we collect information relating to those communications. We use this information to answer any issues or concerns and to provide you with the products, information and services you require from us.

When you visit our website, we collect information about how you interact with our content and adverts. When we send you a mailing we store a record of this, and in the case of emails, we keep a record of which ones you have opened and which links you have clicked on.

When you access our social media channels, including Twitter, Instagram, YouTube, Facebook and TikTok we only receive personal information that you share with us voluntarily and that is compatible with your privacy settings. To find out more about how these social media companies process your personal information, we recommend that you read their individual privacy policies.

Under 18s

If you are under 18, please ensure that you obtain your parent/guardian’s consent whenever you provide personal information to us. If you don’t have that consent, you must not provide personal information to us.

Information from Third Parties

We occasionally receive information about you from third parties. For example, we may use third party research companies to provide general information about you, compiled using publicly available data. We may also receive information about you from venues where you have booked a National Theatre of Scotland performance or event. This is for research and reporting purposes only, unless you have given consent to receive communications from us.

Special Categories of Personal Data

Data Protection law recognises that certain categories of personal information are more sensitive such as information pertaining to health, race, religious beliefs and political opinions. We do not usually collect this type of information about our patrons unless there is a clear reason for doing so. For example, we sometimes collect health information about participants in our programme of classes and courses.

Cookies

Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to distinguish you from other users which helps to provide you with a better experience when you browse that website.

You can choose whether or not to allow the setting of cookies using the privacy settings of your browser; however, session cookies must be enabled in order for our online service to process your booking correctly. Find out more about how to control cookies here.

Session Cookies

These cookies are necessary to provide our online booking service and they enable you to navigate our website and use its features, such as the shopping basket. Session cookies are created temporarily. Once you close the browser, all session cookies are deleted.

Analytical cookies

These cookies allow us to recognise and count the number of visitors in an anonymous form and to see how visitors move around our website when they’re using it. This helps us improve website visitor journeys.

We also make use of analytical cookies to track the effectiveness of our online advertising campaigns. These cookies are used for analysis purposes to help optimise online advertising campaigns and ensure you receive ads for shows that are relevant to you.

You can check your ‘cookie’ file in your devise and delete those you do not want. You can also disable cookies in your web browser so your computer will not receive them. If you wish to find out more cookies please check the Help option on your web browser, or go to www.allaboutcookies.org

Hotjar

We use Hotjar in order to better understand our users’ needs and to optimise our service and their experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on web pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to improve our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymised user profile. Hotjar is contractually bound to not sell any of the data collected on our behalf.

For further details, please see the ‘About Hotjar’ section of Hotjar’s support site.

Marketing/Advertising cookies:

We use these cookies to deliver personalised advertisements and promotional content based on your interests and browsing behaviour. Examples of advertising platforms where we show personalised ads based on the data from these cookies are, but not limited to, Facebook, Instagram and the Google Display Network.

These cookies may be placed from our own website, or from a third-party source (such as the advertising platform that will ultimately be used to show personalised ads).

BASIS

There are three basis under which we may process your data:

CONTRACTUAL PURPOSES

When you make a purchase from or make a donation to us, you are entering into a contract with us. In order to perform this contract, we need to process and store your data. For example, we may need to contact you by email or telephone in the case of cancellation of a performance, or in the case of problems with your payment.

LEGITIMATE BUSINESS INTERESTS

In certain situations we collect and process your personal data for purposes that are in our legitimate organisational interests. However we only do this if there is no overriding prejudice to you by using your personal information in this way. We describe below all of the situations where we may use this basis for processing.

WITH YOUR EXPLICIT CONSENT

For any situations where the two above basis are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation.

DATA PROCESSING

MARKETING COMMUNICATIONS

We aim to communicate with you about the work that we do in ways that you find relevant, timely and respectful. To do this, we use data that we have stored about you, such as whic events you have booked for in the past, as well as any preferences you may have told us about.

We will only do this with your consent or where we otherwise have a legitimate interest to do so and are permitted by applicable law. We may share personal information with third parties to help us with our marketing and promotional projects, or sending marketing communications. Where permitted by law we use our legitimate organisational interest as the legal basis for communications by post and email. In the case of postal mailings, you may object to receiving these at any time using the contact details in this Privacy Notice. We will provide you with an option to unsubscribe in every email that we send you, or you can alternatively use the contact details set out in this Privacy Notice.

We may also contact you about our work by telephone, however we will always get explicit consent from you before doing this. Please bear in mind that this does not apply to telephone calls that we may need to make to you related to your purchases or enquiries (as above).

We may also analyse data we hold about you to ensure that the content and timing of the communications we send you are as relevant to you as possible.

OTHER MARKETING PROCESSING ACTIVITIES

We also process personal information in the following ways that are within our legitimate organisational interests:

We classify our audience into groups and segments on the basis of booking history and ticket purchases, attendance over time and information that is provided when you create an account, such as your postcode.

We conduct analytics to better understand our development as an organisation. We use anonymised data for this analytical research. We consider the growth and sales rate of our tickets and combine this with other relevant data such as interaction with our website and social media.

We conduct in-depth audience research by email, online and/or in person after each tour. This research is based on a random sample of our attendees who self-select to take part. You are under no obligation to participate. Full details of the process are provided when we approach you to participate.

In order to improve our website we may analyse information about how you use it and the content and advertisments that you interact with.

FUNDRAISING ACTIVITIES

We conduct research to support a number of our fund-raising and income generation activities as a charity to ensure our fund-raising campaigns, events and fund-raising communications are targeted in the most effective way. This also includes evaluating the effectiveness of these campaigns and making changes where required; determining whether certain individuals may be interested in supporting us; ensuring we conduct campaigns and fund-raising activity in compliance with law and industry codes of practice; and ensuring that we have reasonable knowledge of prospective donors to minimise the risk of reputational damage to National Theatre of Scotland.

We may conduct analysis of our audience by attendance, donations, postcode and other information on our own database to contact individuals who might be interested in supporting our fund-raising campaigns (which could include donations and individual giving schemes) to the extent permitted by applicable data protection laws. The analysis activity where our audience is segmented is not targeted at specifically identifiable individuals in the first instance and communications sent to individuals thereafter are done so in accordance with consent or our legitimate interests.

We may carry out research on information in our own database such as connections to ticket buying and history of giving to National Theatre of Scotland and we may seek additional information from third party sources.

We endeavour to make sure that any research and data collection we do is only sourced from publicly available sources where an individual would, in our view, have reasonable expectation that their information may be freely read by the public, or the individual has freely made information available in respect of their business and philanthropic interests.

We carefully balance our legitimate interests against your interests as an individual. You can exercise your rights over your personal information at any time.

In all of the above cases we will always prioritise your rights and interests. You have the right to object to any of this processing at any time. If you wish to do this, please use the contact details at the end of this policy.

THIRD PARTIES

There are certain circumstances under which we may disclose your personal information to third parties. These are as follows:

To our own service providers who process data on our behalf and on our instructions for example, our ticketing system software provider. In these cases, we require that these third parties comply strictly with our instructions and with data protection laws around the security of personal data.

Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies). Your personal information may also be processed if it is necessary in the defence of a legal claim. We will not delete personal information if relevant to an investigation or a dispute, it will continue to be stored until those issues are fully resolved.

To venues with whom we have data sharing agreements in place, when you have bought tickets to see one of our shows taking place in their venue directly via our website. In this instance we will be sharing your contact details and all data relating to the ticket you bought for this show. This is for analysis, research and reporting purposes only, these companies will not contact you unless you have expressly agreed for them to do so during the booking process.

National Theatre of Scotland currently has data sharing agreements with:

• Macrobert Arts Centre
• Lyceum Theatre
• Aberdeen Performing Arts
• The Tron Theatre
• Eden Court Theatre
• Perth Theatre and Concert Hall
• Dundee Rep Theatre
• Beacon Arts Centre
• Capital Theatres

Finally, your personal data may be shared if it is made anonymous and aggregated, as in such circumstances the information will cease to be personal data.

Your personal information will be held at all times within the EEA.

YOUR RIGHTS

You have certain rights in relation to your personal information. The availability of these rights and the ways in which you can use them are set out below.

Some of these rights will only apply in certain circumstances. If you would like to exercise, or discuss any of these rights, please contact us using the details below or in one of the ways provided in the Who We Are section of this Privacy Notice.

Access: you are entitled to ask us if we are processing your information and, if we are, you can request access to your personal information. This enables you to receive a copy of the personal information we hold about you and certain other information to check that we are processing it lawfully.

Correction: you are entitled to request that any incomplete or inaccurate personal information that we hold about you is corrected.

Erasure: you are entitled to ask us to delete or remove personal information in certain circumstances. There are also certain exceptions where we may refuse a request for erasure, for example, where the personal data is required for compliance with law or in connection with claims.

Restriction: you are entitled to ask us to suspend the processing of certain aspects of your personal information, for example, if you want us to establish its accuracy or the reason for processing it.

Transfer: you may request the transfer of certain of your personal information to another party.

Objection: where we are processing your personal information based on a legitimate interest basis (or those of a third party) you may challenge this. However we may be entitled to continue processing your information based on our legitimate interests or where this is relevant to legal claims. You also have the right to object where we are processing your personal information for direct marketing purposes.

Automated Decisions: you may contest any automated decision made about you where this has a legal or similar significant effect and ask for it to be reconsidered.

More information regarding your legal rights in respect of personal information can be found at www.ico.org.uk/for-the-public/. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State in the European Union where you are habitually resident, where we are based, or where an alleged infringement of Data Protection law has taken place. In the UK you can make a complaint to the Information Commissioner’s Office (Tel: 0303 123 1113 or at www.ico.org.uk).

In order to initiate a request with us about your personal information, please send us a description of the information you would like to access or the rights you would like to exercise by using the contact details set out in the Who We Are section of this Privacy Notice.

As a dynamic organisation the ways in which we process data may change from time to time and we will always update our Privacy Policy to reflect any changes we make. If you have questions or would like further details on certain areas, including how we hold and process data, please contact us as per the Who We Are section of this Privacy Notice.