We take our responsibilities concerning your privacy very seriously.
We record only your name and address details in order to process your orders.
No other financial or personal information about you is stored on our system.
We do not and will never divulge, sell or distribute any information we have concerning you.
New data protection legislation comes into force in May 2018.
Here is a summary of what we hold on our computers about you, what we do with it and what you can do if you have concerns.
The data we hold.
Our box office system is designed to record ticket sales and assist us with the financial control of the David Hall.
We hold the minimum personal data necessary to assist us and our customers, as follows :-
For each customer we record your…
Name, address, phone number(s) and email address.
When you order/purchase tickets we also record
the event, number and type of tickets you purchased and the total amount you were charged for the order.
We DO NOT hold any other financial data about you, eg card or bank details.
When you pay on line our computer passes you over to Stripe Payment Processing who are a commercial bank with appropriate high security data systems.
Stripe debits your bank account and credits the David Hall account. At no time do we see any of your financial details.
We simply receive a transaction reference number from them so that any future disputes may be dealt with.
If you pay by cheque, we do record the cheque number as a reference in case there’s a payment problem.
We do not store your bank code or account no.
COVID19 Special Measures and GDPR
This notice applies only to data we collect for NHS Test and Trace
To support NHS Test and Trace we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come to our premises and do not register using the QR code and Test and Trace App.
The following information will be collected:
– the names of all visitors over 16 years of age
– a contact phone number for each visitor
– the date and time of the visit
Where visitors attend as a group details are required for all group members.
Data will be held for 21 days after which it will be destroyed.
Data will be shared only with NHS Test and Trace and only if it is specifically requested by them.
Data collected specifically for NHS Test and Trace will not be used for any other purpose. Data we normally collect for other purposes (e.g. when booking tickets) is not affected.
TDH, as the data controllers for the collection of your personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation.
The NHS Test and Trace service has in place technical, organisational and administrative security measures to protect all personal information that it receives from the venue/establishment, that it holds from loss, misuse, unauthorised access, disclosure, alteration and destruction.
The use of your information is covered by the General Data Protection Regulations Article 6 (1) (c) – a legal obligation to which we, as a venue, are subject to. We are mandated by law to follow the new regulations from the government and to co-operate with the NHS Test and Trace service.
By law, you have a number of rights, such as the right to be informed, the right to access information held about you and the right to rectification of any inaccurate data that we hold about you.
Why do we need your personal data
We record your details so that we can contact you if, for example, an event gets cancelled and we need to tell you. Also to send you your confirmation/ticket email for on line purchases, enabling you to avoid queues at the box office on the night.
It means that if you are a regular customer we don’t need to ask you for all your details each time you order, simply a phone no, surname or email address to identify you.
Twice a year we also send out our latest printed programme to those people who have previously placed an order with us. If you don’t wish to receive this programme please tell us and we will ensure your choice is respected.
We do not …
- Divulge or share your data with any individual or organisation outside the Petherton Arts Trust (David Hall).
- Send unsolicited emails to you. (You may sign up to receive our regular newsletter – we use Mailchimp, a separate service provider). You may unsubscribe from this service at any time.
How long do we keep your personal data ?
As a customer we keep your address details on our database to make future transactions with you quicker and to allow us to send you details of future events. We retain your contact details only for this purpose. If you no longer wish your details to be retained please contact us and we will remove them.
Taking you off our database
Although we keep the bare minimum data necessary to identify you, it may be that you don’t want us to record even this. If so then please get in touch with us and ask for your data to be removed, (which we will do so within as soon as possible after you contact us)
ALTERNATIVELY you may book at the box office in person, when we will take your money and give you your tickets there and then without needing to record your name etc. if you don’t wish to give it. (However, if you choose to do that we won’t be able to notify you of cancellations etc.)
We strive to keep an accurate record of your details. If you believe that we have incorrect information about you, please let us know and we will happily update our records.
Our data is split between multiple secure computer systems – for the website and its orders and David Hall financial control.
Our website & Our box office/customer details database is hosted on a commercial web host computer(s). These have high levels of data security and are permanently monitored for any attempts to breach their security. All access to this data is password protected and only accessible by our data manager.
Our customer details database backup is held on a personal computer in a securely locked room, accessible only by authorised David Hall personnel. Access to data is restricted.
All information is backed up on a daily basis.
Any Questions ?
Please remember we are staffed by volunteers who may not be able to answer your question immediately but will pass on your question/request for action to someone who can. We will get back to you as soon as possible