• People directly
• CCTV footage, or other recorded images

Who we share information with

Data Processors

• AWS - who provide us with transactional email services
• Basecamp - who provide us with project management software
• Clear Bank - who provide banking services
• Cloudways - who host our website
• ClickSend - who provide us with transactional SMS services
• Cookiebot - who manage and track your consent to cookies on our website
• Crisp - who provide us with customer service software
• DotDigital - who provide us with marketing services
• Dropbox Sign - who provide us with digital contract management services
• Fastmail - who host our corporate email accounts
• GoCardless - who provide us with bank transfer processing for group bookings
• Google Analytics - who provide us with services to analyse the effectiveness of our website and marketing
• Hoxton Mix - who digitise physical mail sent to our mailing address
• MailerSend - who provide us with transactional email services
• Mailgun - who provide us with transactional email services
• Meta - who provide us with marketing services
• Planday - who provide us with staff rota services
• Royal Mail - who provide us with delivery services
• Savvycal - who provide us with appointment booking services
• Soho66 - who manage our phone lines
• Spektrix - who provide us with box office services
• Square - who handle our in-venue payments and online payments for food, beverage and merchandise
• Stripe - who handle our online payments for ticketing
• The Audience Agency - who provide us with analytics and data regarding our guests
• TickX - who provide us with online ticket booking services
• Tide - who provide banking services
• TikTok - who provide us with marketing services
• TrustPulse - who provide us with marketing services
• Typeform - who provide us with contact forms
• VisitOne - who provide us with eTicket delivery and marketing services
• Xero - who provide us with accountancy software and invoicing services
• Zapier - who provide us with business automation services

Other organisations

• Insurance companies
• Warranty and guarantee providers
• Emergency services (where necessary)
• Publicly on our website, social media or other marketing and information media (where appropriate)

Sharing information outside the UK

Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.

Where necessary, our data processors may share personal information outside of the UK. When doing so, they comply with the UK GDPR, making sure appropriate safeguards are in place. Please contact us for more information.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal data.
• Your right to rectification - You have the right to ask us to rectify personal data you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal data in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.
• Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal data you gave us to another organisation, or to you, in certain circumstances.
• Your right to withdraw consent – When we use consent as our lawful basis you have the right to withdraw your consent.

You don’t usually need to pay a fee to exercise your rights. If you make a request, we have one calendar month to respond to you.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint