PRIVACY POLICY
1. Introduction
Future Theatr Clwyd (“we”, “our”, “us”) is committed to protecting your privacy and safeguarding your personal data. We understand the importance of transparency and accountability under data protection laws, and we are dedicated to complying with the General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act (“CCPA”), among other applicable regulations. This Privacy Policy describes how we collect, use, disclose, and protect your personal data when you access or use our website, futuretheatrclwyd.com (the “Website”).
2. Scope of Policy and Data Controller Role
This Privacy Policy applies to all personal data collected or processed via futuretheatrclwyd.com or through other interactions with you related to the Website. For the purposes of the GDPR, Future Theatr Clwyd is the “data controller” of your personal data. If you are a California resident, we also act as a “business” under the CCPA with respect to your personal information.
3. Categories of Data Processed
We process the following categories of personal data in accordance with applicable data protection laws:
a. Usage Data
Information collected automatically when you visit our Website, including your IP address, browser type and version, geographic location, pages viewed, time spent on pages, crash reports, and session identifiers.
b. Account Data
Personal data you provide when creating a user account or making a booking, which may include your full name, residential or mailing address, email address, and telephone number.
c. Profile Data
Data derived from your interaction with us and your account, including your ticket purchase history, preferences for seats or productions, browsing behavior on futuretheatrclwyd.com, and attendance records.
d. Communication Data
Records of your communications with us, including support requests, service feedback, responses to surveys, and messages sent to [email protected].
e. Technical Data
Information related to your device and its configuration such as device type, operating system, screen resolution, language preferences, and operating system identifiers.
f. Transaction Data
Details about payments made and services purchased, including billing address, order details, payment method (note: we do not store full payment card details), and delivery records for digital and physical transactions.
g. Preference Data
Marketing and communications preferences you define, such as whether you have opted into receiving promotional material, interests in genres, artists or series, and consent records.
4. Legal Bases for Processing
We process your personal data under the following lawful bases:
– Contractual Necessity: To perform our contractual obligations to you, including ticket delivery, user account management, and service provisioning.
– Legitimate Interests: To improve our services, protect our business and users from fraud, conduct analytics, and communicate with users in connection with their use of the Website.
– Consent: For sending marketing communications or processing sensitive data, where legally required.
– Compliance with Legal Obligations: To comply with legal requirements applicable to our operations.
5. Your Rights
Subject to applicable data protection law, you may have the following rights regarding your personal data:
– Right to Access: You may request copies of the personal data we hold about you.
– Right to Rectification: You may request we correct inaccuracies or incomplete data.
– Right to Erasure: You may request deletion of your personal data under certain circumstances.
– Right to Restrict Processing: You may request limits on how we process your data in specific situations.
– Right to Data Portability: You may request that we provide your personal data in a portable format.
– Right to Object: You may object to specific types of processing, including direct marketing.
– Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
You may exercise these rights by contacting us at [email protected].
6. Security Measures
We implement appropriate technical and organizational security measures to safeguard your personal data. These include data encryption (while in transit and at rest), secure access controls, multi-factor authentication, regular system backups, firewalls, and employee training on data protection policies and confidentiality.
7. International Transfers
We may transfer your personal data to countries outside of your jurisdiction, including countries that may not provide the same level of data protection as your own. Where such transfers occur, we rely on Standard Contractual Clauses approved by the European Commission or appropriate safeguards recognized under applicable law to ensure a lawful framework for data transfers.
8. Data Retention
We retain personal data for no longer than is necessary for the purposes for which it was collected, as outlined in this policy.
– Usage Data: 2 years from date of collection.
– Account Data: Until account closure or 6 years of inactivity.
– Profile and Transaction Data: 7 years after last interaction for auditing and tax purposes.
– Communication Data: 3 years from last correspondence.
– Marketing Preferences: Retained until consent is withdrawn or for 2 years from last engagement.
We regularly review our retention policies to ensure compliance with legal and business requirements.
9. Cookie Policy
Our Website uses cookies and similar technologies for several purposes, including:
– Essential Cookies: Required for basic site functionality and to enable secure login.
– Functional Cookies: Enhance user experience by remembering user preferences.
– Analytics Cookies: Collect aggregated data about website use to understand visitor behavior and improve content.
– Performance Cookies: Monitor performance metrics such as load time and error messages to enhance functionality.
10. Cookie Management and Compliance
Upon first visit to futuretheatrclwyd.com, you will be prompted to manage your cookie preferences in accordance with GDPR and CCPA regulations. You can modify your selections at any time using the “Cookie Settings” feature on our Website or by adjusting browser settings to disable cookies. Note that disabling certain cookies may impact your Website functionality.
Under the CCPA, California residents may opt out of “sale” of personal information (as defined by CCPA). Although we do not sell personal data in the conventional sense, users may submit an opt-out request using mechanisms provided on the Website or by emailing us at [email protected].
11. Special Protections for Children Under 13
We do not knowingly collect personal data from children under the age of 13. If we learn that we have inadvertently collected personal data from a child under age 13 without appropriate consent, we will take reasonable steps to delete that information promptly. Parents or legal guardians who believe their child has provided us with personal data should contact us at [email protected].
12. Policy Updates & User Notifications
We reserve the right to revise or update this Privacy Policy at our discretion. Updates will be reflected on this page with a revised version made publicly available on futuretheatrclwyd.com. Where material changes are made that affect your rights or data usage, we will notify you by appropriate means, including direct communication or on-site notifications.
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, you may contact us at:
Email: [email protected]
Website: https://futuretheatrclwyd.com
We are committed to full compliance with applicable data privacy laws and welcome your feedback regarding our privacy practices.