Giffords Circus Privacy Policy

PRIVACY POLICY

Here at Giffords Circus, we take your privacy seriously. We promise to respect any personal data you share with us and keep it safe. We aim to be clear when we collect your data and not do anything you wouldn’t reasonably expect. This policy explains who we are, what information we collect, which partners we work with, and your rights with regards to any information you share with us. It also describes why developing a better understanding of our customers and supporters through their personal data allows us to make better decisions about shows and programming, and, ultimately, helps us to reach our goal of making work of the highest quality available to all.

We work with DigiTickets for our online box office services as third party ticket providers, therefore our privacy policy reflects their privacy policy, which can be viewed here https://www.digitickets.co.uk/privacy-policy

Please read this information carefully, as by providing your data to us you acknowledge you have read this policy and understand we will process your data in accordance with its terms.

We promise to use the information we collect about you in accordance with the General Data Protection Regulation (2018) (GDPR), the Data Protection Act (2018) and the Privacy and Electronic Communications Regulations (PECR, 2003). We aim to be clear when we handle your data, and not do anything you wouldn’t reasonably expect.

What information do we collect?

You may be required to give us your information in order to book tickets, sign up to a newsletter, make a donation or join a membership scheme, update your preferences, sign up for an event, visit our offices, apply for a job, book a conference or communicate with us. When you book tickets we need to collect information about you to process the transaction and fulfil your order.

We may collect the following information from or about you:

• Name
• Postal address
• Telephone number(s)
• Email address
• Ticketing history
• Billing/payment information (we keep the last four digits of a card number to help us
• identify transactions)
• Donation history
• Communications preferences
• Access requirements (for you or your party)
• Allergies and dietary requirements (for you or your party)
• Qualitative opinions or attitudes about our services and programme through surveys
• Any other information you provide to us by email, letter, telephone, social media, via our websites or apps, or in person
• CCTV security recordings, and possible photography or video at performances/events
• Information that is publicly available

Sensitive Information: As recorded above, this includes health information such as disability needs (e.g. to assist with seating) or allergies (e.g. for a catering requirements) which we may require. We may ask for other information specific to a job or volunteering role you are applying for. From time to time we might ask customers to take part in surveys to assess age, gender and ethnicity, amongst other aspects; this is optional, rather than mandatory, and you always have the right to decline providing us with this information.

Online Information: Through our websites and apps, we may receive and store certain details through “cookies” which record how the sites are being used to help us provide improved services, analyse usage and enable transactions. Cookies are small text documents that are stored by your web browser on your computer or mobile device when you visit our website. They enable an enhanced experience for you by storing things such as your user details or preferences. The benefit for us is that they track your use of our site, so we can analyse trends and improve our service. They don’t tell us who you are. Our website can only see cookies that it has created, not those issued from any other website. You can decide whether or not to allow cookies on your computer.

When we send you emails, we may include a web beacon. This helps us keep a record of the emails we send you, and we may track whether you receive or open them so we can make sure we are sending you the most relevant information. When you click on a link in an email, we may record this individual response to allow us to customise our offerings to you. Web beacons collect only limited information, such as a cookie identifier, time and date of a page being viewed, and a description of the page on which the Web Beacon resides (the URL). Web Beacons can be refused when delivered via email. If you do not wish to receive Web Beacons via email, you will need to disable HTML images or refuse HTML (select Text only) emails via your email software.

We use social media to provide updates on our activities and to promote events and projects. We may tailor adverts on social media and elsewhere online relevant to your interests. Depending on your own privacy settings, you may control Giffords Circus permission to access information via social media platforms.

We use some online tracking and analysis services such as Google Analytics to find out how our websites are being used, which activities are working best, and how we can improve customer experience.

From time to time, for certain marketing campaigns, you may receive personalised online advertising after visiting our website. Many of these online adverts allow a facility to opt-out completely or refine your preferences to make advertising more relevant to you.

Data from third parties: We may also obtain or collect personal information about you from other third-party sources, for example:

• a family member, friend, carer, or colleague contact us on your behalf, for instance to purchase a gift membership
• we may ask parents/guardians to supply information about under 16s for workshops or projects
• if we run an event in partnership with another third-party organisation, your details may be shared to help us run that event
• if we engage an external supplier for photography or video.

Why do we collect this information, and how do we use it?

We will use your information: with your consent (where we require it); for performance of your contract; where we need to comply with a legal obligation; or for our legitimate interest or that of a third party.

The information will be used in developing a good understanding of visitors, participants, ticket-buyers and supporters through personal data allows us to make better business decisions enabling us to operate, market our services, and fundraise more efficiently. We believe this will help us reach our goal of ensuring everyone is welcome at Giffords Circus.

We use the information we collect about you:

• to contact you if there is any important change to your booking or visit
• to fulfil our contract with you
• to keep a record of the relationship we have with you
• to process a transaction and carry out completion of a purchase (your personal information and card details may be passed to third party service providers; card details will only be used in this way for the purpose of handling an individual transaction)
• to inform you about relevant events, services, or activities we believe will be of interest, as well as opportunities to support our work as an arts charity
• to provide a personalised service and ensure the best possible experience when you visit us
• to administer any donations you may make, including processing Gift Aid if relevant
• to ensure that the information we already hold is accurate and up to date
• to improve our products, services, and information in the future
• we may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you.
• to send you surveys and for market research purposes
• to assist us with reporting and analysis for our own needs or the needs of any funding partners (e.g. the Arts Council)
• to ensure we know how you prefer to be contacted
• to protect against fraud or unlawful activity
• to ensure compliance with policies, procedures, and laws
• to process any recruitment information, whether directly or via an agent
• to share with approved suppliers (for instance for research and direct mail)
• from time to time, to undertake customer research to help us understand how we can improve our services or information
• to promote Giffords Circus and its activities (e.g. imagery, quotes from social media etc)
• from time to time, to make recommendations to you about other relevant cultural activities by approved partner organisations (NB: these organisations would not be in possession of your data unless you purchase a ticket from them)

Building profiles of supporters and targeting communications: We use profiling and screening techniques to ensure communications are relevant and timely, and to provide an improved experience to our customers and supporters. From time to time we may make data available to agencies for analysis and research purposes (for instance, comparison sales trends over time, postcode mapping etc). This assists with marketing activities, reporting to funders and strategic planning, helping us to make better business decisions.

When building a profile, we may analyse geographic, demographic and other information relating to you in order to better understand your interests and preferences in order to contact you with the most relevant communications. In doing this, we may use additional information from third party sources when it is available. Such information is compiled using publicly available data about you, for example addresses, listed Directorships or typical earnings in a given area.

There are some membership and donation communications that we are required to send regardless of your contact preferences. These are essential communications deemed necessary to fulfil our contractual obligations to you. This would include payment confirmation, thank you letters, group booking, ticket offers, Gift Aid confirmation letters and querying returned mail or bounced payments with you.

Sharing your data with third parties: We will not share any of your personal details with any other third parties without your agreement, unless required in order to fulfil our contract with you, or allowed by law (for instance, if a safeguarding issue arises). In general, the third-party providers used by us to fulfil our contract with you will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. These providers include our Ticketing System provider, other database software suppliers, email distribution service and mailing house. We have agreements in place with each to ensure that your data is secure at all times and cannot be accessed or used for any other purpose. We may share personal information with other organisations, particularly The Audience Agency, who use this to analyse ticket sales for national and regional research into patterns of arts attendance in England (for instance, comparison of sales trends over time and geographical comparisons). This assists with reporting to stakeholders and strategic planning, helping us to make better business decisions. Your personal data is never sold on to any other agencies or companies.

Our website may contain links to and from the websites of other organisations. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

How can you update your preferences?

With your permission, we will tell you about our future events, ticket offers, our other relevant services or opportunities to support our work. You can set and update your personal contact and interest preferences at any time, by visiting your account online at https://giffordscircus.com/book-tickets/  or in person at our Giffords Circus onsite box office or over the phone on 01453 800 200. Every email we send to you will contain an option to unsubscribe, or you can contact us via the details below. In accordance with this Privacy Policy we will always contact you if there is any important change to your booking. Alternately, you can email us at [email protected] with any changes you would like to make to your preferences.

How we keep your data safe?

We are located in the UK. Your data is held in the UK and only accessed by authorised and trained staff. Only employees and approved contractors / developers we may appoint from time to time, and who need the information to perform a specific job, are granted access to personally identifiable information. We will not share any details with any other third parties without your agreement, unless required by law. We will ensure information is held securely, and only those who need access to it can see it. We will delete this information when we no longer need it.

Where we appoint an external party to analyse or process data any such arrangements will be subject to a formal agreement between Giffords Circus and that organisation, to protect the security of your data.

The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff maybe engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Data retention: We will retain your information for as long as is necessary to provide you with the services you have requested or require from us unless (a) we must keep it to comply with applicable laws or evidence compliance with such applicable laws; (b) there is an outstanding issue, claim or, dispute requiring us to keep such information until the issue, claim, or dispute is resolved; or (c) the information must be kept for our legitimate business interests, such as fraud prevention and enhancing users’ safety and security. We will store data in our ticketing system for a maximum of 5 years after your last transaction or communication with us. If you have made a donation and a Gift Aid declaration, we are obliged to keep the declaration and the details of the person who made it, for six years. For data supplied as part of a job application to us, we will keep your details for six months, then delete it.

Changes to this policy

We may change or update this Privacy Policy from time to time. Any significant changes will be communicated on our website or by contacting you directly.

Your rights

You have rights including the following:

• to be informed of the ways in which we use your information, as we seek to do in this policy
• to request us to stop processing your personal data for marketing purposes
• you can request a copy of the personal information we hold about you
• you can request that inaccuracies are corrected
• you can withdraw any consent to direct marketing (please see the section “Why do we collect this information, and how do we use it?” above to see when we are relying on your consent)
• the right to object to our using your information on the basis of our legitimate interests (refer to the section headed “Why do we collect this information, and how do we use it?” above to see when we are relying on our legitimate interests) (or those of a third party) and there is something about your particular situation which makes you want to
• object to processing on this ground
• in certain circumstances you can request that we limit or cease processing or erase your personal data
• you can lodge a complaint with the Information Commissioner’s Office or the relevant authority in your country of work or residence
• Please note that we may need to retain certain information for our own record-keeping and research purposes. We may also need to send you service-related communications.

Do you have any questions or concerns?

Please contact us if you have any questions about this policy, or wish to be removed from any communications or data processing activities:

• You can update your communication preferences online at https://giffordscircus/book-tickets/ 
• Email us on: [email protected] or [email protected]
• Or write to us at: Giffords Circus, Fennells Farm, Lypiatt, Stroud, GL6 7NE.

Subject Access Request: If you wish to make a subject access request (SAR), you can contact us through any of these channels in writing. Whilst you are not required to complete it, we can supply you with a SAR form. We will try to respond to all legitimate requests within 30 days. Occasionally it may take us longer if your request is particularly complex or if you have made a number of requests in which case we will keep you notified and updated. We will require specific details and proof of identification. This is a free service though we reserve the right to charge for reasonable administrative costs if your request is clearly unfounded, repetitive or excessive.

September 2021

 

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

DigiTickets

Examples include:

• dtAnonymousID

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to distinguish individual visitors and record their activity on the Website (pages viewed, events, approximate location, device and referral source) so we can analyse and report on how the Website is used. This data is collected against a randomly generated identifier stored in the cookie, not your name or contact details.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 25 August 2026