Privacy Policy

Northern Aldborough Festival

We are committed to protecting your privacy whilst providing you with a personalised service. This privacy policy outlines the ways we may collect, store and use your data and why.

Who is Northern Aldborough Festival?

Northern Aldborough Festival is a charity (Registered Charity No. 1107488). You can contact us at the Festival Office, Aldborough Manor, Boroughbridge YO51 9EP.

Cookies

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed. If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Who we share your data with

If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

For users that register on our website, we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

What data do we collect and how?

Northern Aldborough Festival processes personal data from people when they buy from our box office or online, donate to us, become a Friend, sign up to our mailing lists, apply for jobs with us, apply or take part in artist residencies or creative programmes, enquire about hiring one of our venues, or contact us in any other way. We will store and process any personal data you provide us with along with a history of inbound and outbound communications and your purchases and donations for the purposes set out in this policy. As a charity, we rely on donations to fund a large proportion of our work. To this end, for a small number of individuals we seek additional information from publicly available sources to build a picture of your interests and preferences so that we can tailor our communications and requests for financial support appropriately, which we know is important to philanthropic donors. We may also collect personal information about you from service providers, the press, search engines, social media (e.g. LinkedIn) and reputable public data sources. Personal information we collect via these channels includes your job title, directorships, contact information, demographic data (including estimated income and property value), date and size of previous donations to other charities, and details of philanthropic activities you engage in. Northern Aldborough Festival complies with its obligations under the General Data Protection Regulation by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.

How do we use your data?

Your personal data will be treated as strictly confidential and will only be shared with other organisations where this is required to enable us to provide our services to you, for example in order to process payment for tickets. There are three bases under which we process your data:

Contract purposes. When you make a purchase from us or donate to us, we will use your data in order to fulfil our contract with you, for example to deliver tickets to you or contact you in the event of a cancellation. We will keep this data in order to make your future purchases with us easier.  Where your data is required in order for us to be able to perform our contractual obligations we will make this clear – e.g. by making fields on a web form mandatory. If you ask us to stop processing or delete your information while we still have an open contractual obligation to you, such as tickets for a performance you have not yet attended, we will only do so after the contract has been completed or cancelled and refunded if this is possible.

Legitimate business interests. We collect and process your personal data for purposes that are in our legitimate organisational interests. We process your data in order to: inform you of events, products and services we believe you will be interested in; to invite voluntary participation in research or surveys; to personalise our online services; and for administrative purposes such as accounting. We will always consider your right to privacy and ensure that our use of data is proportionate. We process some data we hold anonymously (for example sales history and approximate place of residence) to report to our charity’s funders and help us plan our future activity.

With your explicit consent. We are required by some of our contracts to ask your permission to share your data with certain organisations. If your data could fall into this category you will be asked to consent to this at an appropriate time, for example during your purchase of a ticket from a visiting organisation. If you would like to check which other organisations you have consented to have your data shared with, either log in to your Account or call the Festival Office on 01423 900979

What choices do I have about how my data is used? You have the right to object to any of this processing, with the restrictions noted earlier about contractual processing. If we judge that your account has become dormant, for example if you haven’t booked for several years, we will stop processing your data and anonymise or delete it. You may opt out of receiving information from us by e-mail using the unsubscribe link in our marketing emails, telephone, or post. Where appropriate we respect any wishes you record with the Telephone Preference Service, Mailing Preference Service and Fundraising Preference Service. You may request a copy of the information held about you by us. You may request that we amend the data we hold about you. We reserve the right to verify that any requested amendments are accurate. 
You may request that we delete your data but where we are required to maintain the integrity of our records we may choose to anonymise your data instead. If you would like to suppress all contact from us we will need to keep limited personal data in order to comply with this request. To exercise your choices, you should indicate your wishes when we collect your data or get in touch with us using the contact details at the bottom of this page.

Where do we process data?

Northern Aldborough Festival processes data at our registered offices and (under contract) at the sites of data processors and third parties appointed by us. Examples of third party data processors we use include our box office system, our payment processing system, our postal mailing house, delivery companies, our email delivery system and our online analytics software. We apply UK data protection law to our processing and instruct all third parties to do the same.

How do we keep data secure?

We take appropriate steps to maintain our contact information in a secure environment to prevent unauthorised use. Our processors are bound by contract to do the same. If you use your credit or debit card to purchase from us or to make a donation, we will ensure that this is carried out securely. Our card payments are processed by third parties who are accredited with the Payment Card Industry Data Security Standard (PCI-DSS). We may give you the option to store your card details to make future transactions with us more convenient. This will be carried out in compliance with PCI-DSS and in a way where none of our staff members are able to see your full card number. We never store your 3 or 4 digit security code.

What happens when I follow links from Northern Aldborough Festival’s website?

If you follow links to other websites from our website your data will be subject to the privacy policies of those sites. You should refer to these policies before providing your data. Northern Aldborough Festival has no control over the content of other websites.

What happens when this policy changes?

This privacy policy was published on 25 May 2018. Changes may be necessary to this policy to reflect legal or data processing developments or the changing needs of our business. If we change the policy we will provide information on our website so that users can review the changes. Any significantly different use of your data will be communicated to you.

Who should I contact if I have some concerns or complaints?

In the first instance please contact us using the contact details at the bottom of this page. If you are not happy with our response, you have the right to lodge a complaint with the supervisory authority, the Information Commissioner’s Office – www.ico.org.uk

What if my data falls into a special category?

Data protection law recognises that certain categories of personal information are more sensitive such as health information, race, religious beliefs and political opinions. We do not collect this type of information without your consent. For example, we record your request for an accessible seat along with any reasons you provide for the request. We will only use this information in order to facilitate your visit or otherwise accommodate your needs and it will not form part of any of the other processing described in this policy.

Our contact details

If would like to contact us about your data or to exercise any of your rights detailed above, please email us on festival@aldborough.com or call 01423 900979