1. Privacy Policy

SC&AA is an arts and community organisation committed to transparency and we believe that individuals (data subjects) should always know what data we collect from them and how we use it. This way they have control and can decide if they’d like to be involved. Under the General Data Protection Regulation (GDPR) 2018 it is important that those data subjects are aware of their legal rights with respect to data protection and how to exercise them.

All personal data collected and stored by SC&AA follows the guidelines of the 1998 Data Protection Act and GDPR regulations 2018.

SC&AA’s Privacy Policy extends to its website, email mailing lists and the personal information collected from participants in their best interest and for their safety. Our website may at times contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website.

 

  1. Volunteers, Trustees and Employees

SC&AA holds personal information on volunteers, trustees and employees in order to contact them and for payment purposes.

 

  1. Website

Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behavior of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:

  1. Your data will be made available to our website provider
  2. The data that may be available to them include any of the data we collect as described in this privacy policy.
  3. Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
  4. They will store your data for a maximum of 7 years.
  5. This processing does not affect your rights as detailed in this privacy policy.

 

  1. Online Tickets and Box Office Sales

SC&AA’s website is a booking site and we ask customers to book tickets online ahead of our events. SC&AA uses Stripe to process payments online. This gathers personal data i.e. full name, email address and payment card details for payment reasons. Stripe complies with GDPR and all its requirements.

Customers’ phone numbers are only taken by SC&AA if there is a waiting list for tickets. These are not held following the event and this information is not passed on to a third party.

 

  1. Venue Hire

For venue booking, SC&AA holds personal information for contact and payment purposes. This information will be reviewed annually and deleted if not required.

 

  1. Email Mailing List

SC&AA clearly invites individuals to join its mailing list through its website. We only collect email addresses for our own marketing purposes. This data is the personal data we need for the purpose of adding individuals to our email mailing list. SC&AA’s distribution list is stored on a secure MailChimp server.

SC&AA uses MailChimp, an email marketing service, to process its data and send regular e-news to its data subjects. This includes upcoming events and project news with digital images and sometimes video links. Data subjects are always offered the choice to unsubscribe in the e-flyer. MailChimp will not under any circumstances, sell on this data.

MailChimp is committed to achieving compliance with the GDPR. It has updated its Data Processing Agreement and third-party vendor contracts to meet the GDPR’s requirements.

 

  1. Information from other sources

SC&AA does not obtain information about its data subjects from third party sources, such as public databases, social media platforms, third party data providers or joint marketing partners.

 

  1. Use and Disclosure of Personal Information

SC&AA will not disclose the personal information of its data subjects. We will only pass this information on to medical services or Police in an emergency.

Your data may also be available to our website provider to enable us and them to deliver their service to us, carry out analysis and research on demographics, interests and behavior of our users and supporters to help us gain a better understanding of them to enable us to improve our services. This may include connecting data we receive from you on the website to data available from other sources. Your personally identifiable data will only be used where it is necessary for the analysis required, and where your interests for privacy are not deemed to outweigh their legitimate interests in developing new services for us. In the case of this activity the following will apply:
  1. Your data will be made available to our website provider 
  2. The data that may be available to them include any of the data we collect as described in this policy.
  3. Our website provider will not transfer your data to any other third party, or transfer your data outside of the EEA.
  4. They will store your data for a maximum of 7 years.
  5. This processing does not affect your rights as detailed in this privacy policy.