Privacy Policy

1. Introduction

Welcome to our website. Watford Palace Theatre respects your privacy. By continuing to browse and use this site, you agree to comply with and be bound by the following terms and conditions.

Watford Palace Theatre (“we”, “us”) is committed to protecting and respecting your privacy. By using our website or interacting with us, you agree to the terms of this Privacy Policy.

We are a Company Limited by Guarantee (Registered No. 3218719) and a Registered Charity (No. 1056950), based at 20 Clarendon Road, Watford, Hertfordshire, WD17 1JZ, United Kingdom.

The term “you” refers to our users, audience members, supporters, or visitors.

This Privacy Policy explains how we collect, use, store, and protect your personal information, in accordance with UK data protection law, including the Data Protection Act 2018, Privacy and Electronic Communications Regulations (PECR), and UK GDPR.

2. Information We Collect

We may collect personal and non-personal information when you interact with us, including via:

• Ticket bookings, purchases, donations, or memberships
• Sign-ups for newsletters or e-communications
• Visitor surveys, competitions, or campaigns
• Participation in projects, classes, or events
• Website interactions (cookies, analytics)

2.1 Personal Information

Examples of personal information we may collect:

• Name, title, date of birth
• Postal address, email address, phone number
• Ticket purchase and attendance history
• Gift Aid status
• Contact and communication preferences

2.2 Non-Personal Information

Examples of non-personal information we may collect:

• IP address and device location
• Pages visited and time spent on site

Aggregate, anonymised analytics to improve website performance and content

3. Cookies and Website Tracking

We use cookies to understand website usage, improve performance, and ensure security. Cookies do not identify you personally; all data is aggregated and anonymous.

You can manage your cookie preferences through your browser or via the links provided on our website.

4. Legal Basis for Processing Personal Data

We process personal data under the following UK GDPR lawful bases:

1. Contract – to fulfil bookings, memberships, donations, and related services.
2. Legitimate Interests – to operate and improve our charitable activities, prevent fraud, and understand audiences, provided this does not override your rights.
3. Consent – to send marketing or fundraising communications. You can withdraw consent at any time.
4. Legal Obligation – to comply with statutory or regulatory requirements (e.g., Gift Aid, safeguarding, accounting).

5. How We Use Your Information

We use your data to:

• Process bookings, payments, memberships, and donations
• Respond to enquiries, requests, and participation in events
• Personalise website content and communications
• Maintain records of interactions and supporter relationships
• Prevent fraud and ensure website security
• Conduct internal audience research to improve services (with consent where required)
• Communicate marketing, fundraising, or programme updates, where consented

6. Sharing Your Information

We do not sell your personal information. We may share it with trusted third parties who help us deliver services, including:

• Ticketing and marketing providers (e.g., Spektrix)
• Payment processors
• IT and technical service providers for security and operational purposes
• Publicly funded arts organisations (National Portfolio Organisations) to better understand audiences
• Regulatory or legal bodies when required by law

All third parties are contractually obliged to:

• Comply with data protection legislation
• Use information only for the agreed purpose

Implement appropriate security measures

7. Fundraising and Supporter Profiling

We may analyse supporter interests and demographics (age, location, publicly available information) to make communications relevant and appropriate.

No third-party profiling companies are used; this is conducted internally by Watford Palace Theatre staff only.

8. Children and Vulnerable Adults

We are committed to safeguarding children, young people, and vulnerable adults:

• Under 16s must obtain parental/guardian consent before providing personal information
• Carer signatures are required for vulnerable adults participating in projects or activities

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccuracies
• Request deletion where lawful
• Restrict processing in certain circumstances
• Object to processing for direct marketing or legitimate interests
• Data portability where applicable
• Withdraw consent for marketing at any time

To exercise any of these rights, contact [email protected] or write to:

Data Protection, Watford Palace Theatre, Clarendon Road, Watford WD17 1JZ

You have the right to complain to the Information Commissioner’s Office if we have not been able to satisfactorily resolve a problem about our handling of your personal information. For more information about your Data Protection rights, please visit the website of the Information Commissioner’s Office (ICO) at ico.org.uk

10. Data Retention

We retain personal data only as long as necessary:

• Financial, donation, and Gift Aid records: statutory period
• Membership and supporter records: while active or until deletion requested
• Survey/project data: for duration of project or research purpose

Data is regularly reviewed and securely deleted or anonymised when no longer needed.

11. Updating Communication Preferences

You can update your preferences or unsubscribe at any time:

• Online via My Account
• Clicking “unsubscribe” in emails
• Email: [email protected]
• Mail: Data Protection, Watford Palace Theatre, Clarendon Road, Watford WD17 1JZ

Transactional communications (ticket confirmations, membership updates) will continue regardless of marketing preferences.

12. External Links

Our website may contain links to third-party sites. We are not responsible for their privacy practices. Please consult their privacy notices if providing information on other websites.

13. Policy Updates

We may update this Privacy Policy from time to time. The latest version is always published on our website.

Last updated: 5 December 2025