There are three legal bases under which we may process your data:
When you book or purchase you are entering into a contract with us. In order to fulfil this contract we need to process and store your data. For example we may need to contact you by email or telephone in the case of the cancellation of a concert or event, in the case of problems with your payment, or to deliver benefits associated with your payment or membership. When you donate we would like to be able to thank you and may need to contact you with regard to acknowledging your gift.
Legitimate business interests
In certain situations we collect and process your personal information for purposes that are in our legitimate organisational interests. However we only do this if there is no overriding prejudice to you by using your personal information in this way. See below some of the situations in which we would use this basis; they include including marketing and fundraising communications, and other processing activities.
With your explicit consent
For any situation where the two bases above are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation. For example, we would never share your data with another organisation to contact you, unless you had given us explicit consent to do so.