Skip to main content

Privacy Policy

Privacy Commitment

Last Updated 13.10.25

The Arts Theatre Cambridge (TATC) processes your data in accordance with the UK General Data Protection Regulation (GDPR) and the Data Protection Act (2018), Privacy Electronic Communications Regulation (2003) (PECR) and in line with this Privacy Policy.

We are committed to protecting and respecting your privacy. This policy sets out what personal data we collect from you, or that you provide to us, and how it will be used. Please read it through carefully and if you have any queries contact data@artstheatre.co.uk.

Where we collect information from

To provide you with the best service we can, we collect certain personal information about you. This includes when you:

  • Purchase a ticket, a catering package or other merchandise item
  • Make a donation or purchase membership of our Supporters’ Circle
  • Sign up to our e-mailing list
  • Apply for a position, paid or voluntary
  • Contact us on one of our online platforms 
  • Contact us directly by telephone, electronically, post or in person with feedback about your experience
  • Interact with us on social media
  • Browse our website
  • Visit our building (CCTV)
What we collect and how it is used

Personal Data

Personal data may include your contact details such as name, address and telephone number; your contact preferences and how you would like us to contact you; details of communications with you; details of your payment transactions related to your purchases and details of your access requirements. This information enables us to conduct business with you and provide you with the best service for your needs, and to keep you informed about Cambridge Arts Theatre’s productions and services.

We may share your information with our third-party service providers for a specific purpose (such as the distribution of our seasonal brochure).

Special Category Data

Special Category Data may be asked for in certain instances; this includes your bank details (if you set up a regular payment), ethnicity, gender identity, medical information and next of kin. 

This information is available to a restricted number of staff for whom it is deemed necessary. It is used to process some transactions, or in the case of an emergency or to administrate our HR processes when you work for us.

Children’s Data

We may collect and store data for under 16s who participate in our education activities or who attend events at Cambridge Arts Theatre. For example, our children’s pantomime auditions. This may include Special Category Data. Where possible and when appropriate, we will attempt to obtain consent from the parent/carer of the child before collecting this data. This information is available to a restricted number of staff for whom it is deemed necessary. 

How we keep your data safe and who has access

We will only keep your personal information in accordance with data protection law for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, archival or reporting requirements. Where your information is no longer required, we will ensure it is disposed of, deleted or cached in a secure manner.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorised use or disclosure of the information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

KEEPING YOUR DATA SAFE

In addition to processing data, Cambridge Arts Theatre contracts external companies to supply services or process data on our behalf such as our customer relationship management system, our bulk email provider, wealth screening and insight companies and mailing centres used for sending postal communications. These organisations only hold the data for the reason contracted by Cambridge Arts Theatre and do not sell, share or use your data for any other purpose. We take all steps reasonably necessary to ensure that your data is treated securely and in accordance with General Data Protection Regulation (2016) and the Privacy and Electronic Communications Regulations (2003).

While most of our suppliers store data at a destination within the European Economic Area (EEA), it may be transferred outside the EEA. We, and our contractors, use strict procedures and security features to try to prevent unauthorised access to your data. All suppliers that handle financial data as part of your transactions with Cambridge Arts Theatre are compliant with the Payment Card Industry Data Security Standard (PCI DSS).

We have processes in place and carry out regular reviews of who has access to data to ensure that your information is only accessible to appropriately trained staff and contractors. Special Category Data is only accessible to staff for whom it is deemed absolutely necessary.

Paper files with Personal and Special Category Data are kept to a minimum and are stored securely when not in use.

If legally required we may disclose your information to the police, regulatory bodies or legal advisors. We will only share your data in other circumstances with your consent.

Your rights

You can ask us to stop sending you marketing information at any time by logging into your online account, by following the opt-out links on any marketing message sent to you or by contacting us any time. Our contact details are at the bottom of this page.

Where you opt out of receiving marketing information, this will not apply to personal data provided to us when you purchase a ticket or other service from us. We may still have a legitimate interest to contact you about the administration of a booking, for example if an event is cancelled. 

If you opt out, it may be that we cannot provide you with certain services such as offers connected with your membership, or priority booking information.

If you wish to amend your data, or to ask us to stop using your Personal and Special Category Data for reasons other than processing your transaction, or to erase your Personal and/or Special Category Data please contact data@artstheatre.co.uk.

You have a right to ask for a copy of the information we hold about you. To request this please send an email to data@artstheatre.co.uk.

We will respond to requests within 30 days in compliance with GDPR requirements. 

You can also write to us at the following address:

Data Queries
c/o Victoria Beechey
The Arts Theatre Cambridge
6 St Edward’s Passage
Cambridge
CB2 3PJ

Changes to this Privacy Policy

We may make changes to this Privacy Policy. If we make any significant changes in the way we treat your personal information we will make this clear on the website or by contacting you directly.