creating possibilities for disabled children creating possibilities for disabled childrenIntroduction
Bamboozle is committed to being transparent about how we collect and use your data, and to protecting your rights and privacy.
The purpose of this statement is to give you a clear understanding of how we collect your personal information from you directly and from third parties, how we use it, and how we keep it secure. If you have any questions about the ways in which we collect and use your personal information, please contact us:
By email: info@bamboozletheatre.co.uk
By post: Bamboozle Theatre Company, Unit 10, St Mary’s Works, 115 Burnmoor Street, Leicester, LE2 7JL
By phone: 0116 2552065
Processing of data includes obtaining, disclosing, recording, holding, using, erasing or destroying personal information.
Lawful bases for processing an individual’s data
Consent: you have given clear consent for us to process your personal data for a specific purpose.
Contract: the processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).
Vital interests: the processing is necessary to protect someone’s life.
Public task: the processing is necessary for us to perform a task in the public interest or for our official functions, and the task or function has a clear basis in law.
Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests. (This cannot apply if we are a public authority processing data to perform our official tasks.)
How does Bamboozle protect your data?
We take the security of your data seriously. We have internal controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and that it is secured, managed and accessed in accordance with our Data Protection Policy, and our legal responsibilities under privacy and data protection laws.
Sharing Your Data
Only the data required will be processed and for the strict purpose which is specified; access will be restricted according to need and sensitivity.
We will always protect your personal details and will never sell them to, or share them with, other companies for marketing purposes. However, there may be occasions when we need to share your information with a third party; we have made clear where this is the case in the information below.
Some of our suppliers run their operations outside of the EEA. Although they may not be subject to the same data protection laws as companies based in the UK, we will take steps to ensure they provide an adequate level of protection in accordance with UK data protection law.
How long does Bamboozle keep data?
We will not retain personal data for longer than is necessary for the purpose it is required, and we’ll ensure it is securely deleted when no longer needed. We will review data to reduce the risk of it becoming inaccurate, out of date or irrelevant. We will delete or anonymise any personal data where the basis for holding the data is consent if you contact us to withdraw your consent to us holding the data
What information does Bamboozle collect?
We only collect the information that’s necessary to carry out our business or to deliver our charitable objectives, to provide the particular service you’ve requested and to keep you informed. The more ways that you engage with us as an organisation, the more data we will require in order to provide the necessary services required.
There are occasions where you can choose to not provide us with the information we require, but this may then impact the service we are able to provide. This is the case for example with our Family Contact Form, where the more information which you allow us to collect means that we can tailor our experiences to better suit the needs of our families. You can find out more information specifically about how we treat Family Contact Forms here.
Financial information
We only keep the financial information that we need in order to process transactions and for our accounting records. We do not take or hold any financial information to enable us to take any money from anyone’s accounts. All payments made to the company are either:
Website
When someone visits our website, we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website. If we do want to collect personally identifiable information through our website, we will be upfront about this. We will make it clear when we collect personal information and will explain what we intend to do with it.
Use of Cookies
Cookies are small text files that are placed on your computer by websites that you visit. The only cookies which we use are for Google Analytics (see above). These collect information about how visitors use our website, such as the number of visitors and the pages they have visited, which we can use to compile reports and to help us improve the website. The cookies collect this information in an anonymous form.
Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.
Mailing lists
With your consent, we will add you to our mailing lists and contact you to let you know about our shows, tours, training opportunities, events, and the latest news about the company. You may also have told a venue where we perform that you are happy for them to pass your contact information to us to be added to our mailing list.
We will record your name and email address and Business if you provide that, we will also record what aspects of our work you are interested in hearing about. This is so we can add you to the mailing lists which are relevant to you.
We use MailChimp for our email marketing. So, when you subscribe to our newsletters or download one of our information packs via MailChimp, the details you submit will be held securely by them and the information also made accessible to us. MailChimp’s servers are based in the United States, so your information may be transferred to, stored, or processed in the US. MailChimp participates in and has certified its compliance with the EU- U.S. Privacy Shield Framework, which certifies that is has adequate safeguards in place. As a respected email marketing provider MailChimp won’t share your information with any unauthorised third parties or contact you directly at any time – you can read their full privacy policy here: https://mailchimp.com/legal/privacy/
In addition to the information you supply at sign-up, MailChimp will also capture data about your interactions with our emails and website, such as which links you click within an email and which pages you go on to visit on our website after clicking those links. It does this using a combination of tracking pixels and cookies. We use this information to help improve our product and provide more personalised messaging.
By default we will retain your data in MailChimp for as long as you choose to stay subscribed or such time as we consider your account to be inactive (i.e. you are no longer opening or engaging with our emails). You can update your details or opt-out of our emails at any time using the ‘Unsubscribe’ or ‘Email Preferences’ links found at the bottom of every email we send via MailChimp. If you unsubscribe, MailChimp and Bamboozle will retain the information required for the purposes of a suppression list to ensure that no further marketing messages can be sent unless you actively choose to opt-in again.
Social media
We occasionally save anonymized social media comments or feedback. We use this information for evaluation, marketing and fundraising purposes, to help demonstrate the impact and reach of our work. This information may be shared on our website and social media channels, in materials promoting our work, at events, in documents such as annual company reports or project evaluation reports, or in funding applications or funding reports.
We also collect and track anonymised data on our social media audiences to better understand the ‘groups’ of people who engage with us online. We use this to understand more about who we are reaching through these channels. For more information on how to control your privacy settings for these services, go to the following links:
Facebook – https://www.facebook.com/help/325807937506242
Instagram – https://www.facebook.com/help/instagram/196883487377501
Twitter – https://twitter.com/en/privacy
Contacting us
If you have contacted us via email, social media or phone, your contact details and a record of your message/s may be stored in our Outlook email system and social media accounts – this includes where we might share your phone number with a colleague in order for them to respond to your enquiry. Enquiries will be stored while we handle your request. Any answers we provide may be stored. Unless you are contacting us on behalf of an organisation, we will not use this information other than to deal with your enquiry. If you are contacting us on behalf of an organisation, then we may also use this information to contact you in future, on the basis of Legitimate Interest, where we believe you would want to hear from us about future opportunities based on the original enquiry made.
Fundraising
We are a registered charity and we rely on charitable support. We collect information in order to seek out new supporters and to maintain our current relationships. We are committed to fundraising best practice and abide by the Fundraising Regulator’s key principles and behaviours of a fundraising organisation: to be legal, open, honest and respectful. We undertake to comply with relevant law and regulations, including the Proceeds of Crime Act, Data Protection, Tax and Gift Aid legislation and Charity Commission guidance.
We undertake research on our data and through publicly available information in order to ensure that we can present customers with appropriate information and opportunities to learn more, and potentially support Bamboozle, in a number of ways:
Current donors
If you have donated money to us via our website, cheque, cash, or services in kind, we will keep a record of your contact details, the details of the gift (amount, date, purpose) and your Gift Aid status. We will keep this information in line with HMRC reporting guidelines. We may also contact you on the basis of Legitimate Interest to invite you to supporter events such as our Showcase, or to share the work that we have been doing, this is because we think you would like to know about the impact of your donation(s). If you tell us that you do not want to hear about such activities, then we will not contact you about them, this includes if you select no marketing when making an online donation.
We respect the rights to anonymity if the donor so requests.
Prospect research
We will use research from a number of different publicly available sources to identify potential supporters and their interests in addition to those of our current supporters, we currently only research organisations, with our focus being Trusts and Foundations and similar bodies set up to fund charitable organisations.
If we have identified a specific company or trust and foundation through this research that we believe may be interested in supporting our work, we may contact the people specifically connected to these bodies via publicly available contact information, such as a relevant work email address. As a charity, we believe that this in the legitimate interest of our fundraising needs. We will always ensure we conduct an appropriate legitimate interest assessment to ensure that we are not infringing on your rights.
Performances and events, including training
Where Bamboozle manages audience bookings, we will collect personal information such as name, contact details, any access needs, and address (where relevant) so we can contact bookers about the performance / event. Your details will only be made accessible to members of Bamboozle’s workforce who need to access the information in order to deliver the performance/ event. We will only use these details for the purposes of delivering the events. Any details which need to be kept on a form away from Bamboozle’s buildings or own computers will be securely destroyed as soon as the event is finished.
If we collaborate or partner with another named organization to deliver a performance / event and / or find audiences, your information may need to be shared. Where this is the case, both parties will make it clear what will happen to your data when it is shared and will not disclose your personal information.
Zoom Conferencing & Remote Performances
Bamboozle uses Zoom for remote meetings, rehearsals and performances. In order to facilitate these sessions, we may collect information that you provide, such as name, email address and consent for young people to participate.
Individuals engaging through Zoom will need to sign up to the Zoom service, and for their use of the service, Zoom will be the data controller. Data processed via Zoom is processed within the USA and safeguarded by the EU-US Privacy Shield Framework that enables the safe transfer of data under EU law. Visit their website to read the ZOOM Privacy Policy: https://zoom.us/privacy
We will not record Zoom sessions unless we have the explicit consent of those participating.
Feedback, surveys and evaluation data
After our performances and events, we may want to ask for your feedback to find out what you thought for evaluation and reporting purposes, and to help us improve what we do. We will always enable you to provide this feedback anonymously if you don’t want to be identified. We will ask how you found out about the event, to help us market our work more effectively. We’ll also ask for monitoring information, including postcode; this is to help us better understand our audiences, and to ensure we are offering an equally good service to everyone in our communities and reaching as wide an audience as possible. We also sometimes need to report this information to funders, for example where their funding is specifically to benefit people within a geographical area. For the same purposes, we request anonymous data from schools about the pupils who have taken part in our events – individuals will never be able to be identified from the pupil data which we collect. Where we report monitoring information to others, it will always be anonymous. The information we collect on our feedback forms from you, including sensitive personal data, is saved securely.
We may share some of the feedback for promotional purposes on our website and social media channels, printed marketing materials, at events, with press or with partners that we work with. We may share collected information in documents such as annual company reports, project evaluation reports, or academic evaluation reports, to evaluate and monitor our work. We may also share the information with our funders or in funding applications, to help demonstrate the impact and reach of our work. In all such cases, we will do this anonymously unless you give us explicit permission to use your name.
If we run an event in partnership with another named organization, your information may need to be shared. Where this is the case, we will make it clear what will happen to your data when we share it and we will not disclose your personal information. Whenever we share your information, it will always be anonymized and we will not share anything that will identify you.
Photos & footage
Taken of people participating in Bamboozle performances, training and similar activities
We ask for explicit and informed consent of individuals, or their parent / guardian if they are under 18 or an at risk adult, to capture and share their image. An example of when we might capture photography and footage would be to document our productions and events for marketing and archival purposes, or as part of a preparation resource for a performance or event.
Our consent forms outline where and in what ways the photos may be used and allow individuals to give us permission for only certain purposes.
Taken of people participating in Bamboozle fundraising events and similar open public events
At large events where it is not possible to receive explicit consent from all attendees (for example at our gala) we will inform people that a photographer is present through advance notice wherever possible. For public, open events, where it is not possible to identify and contact all attendees individually in advance, then we will ensure clear signage to show that the event is being photographed and let people know that they can inform the photographer that they do not want their image to be taken (in such circumstances the photographer may need to capture an image of the individual, specifically for the purposes of checking that they do not appear in any photographs of the event which are processed). Unprocessed images will be deleted.
Third Parties we work with
We may also obtain your data from third parties, such as organisations with which we enter into a co-production. These organisations should not pass on your data to us without your knowledge and only if it is required in the performance of a contract. The third party will require your permission in order to share your data with us for marketing purposes and we will always notify you within 30 days of receipt of your data. You should check their Privacy Policy when you provide your information to understand fully how they will process and safeguard your data.
Your rights
Under the General Data protection regulations you have a number of individual rights. You can find out more about these rights here: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/ .
You also have the right to lodge a complaint with the Information Commissioners Office.
Are you under 18? If you are under 18, please ensure that you obtain your parent / guardian’s consent beforehand whenever you provide personal information. If you don’t have that consent, you must not provide personal information to us.
Subject Access Request
If you would like to request a copy of the information we hold on file about you (either electronically or in physical form) Bamboozle will, in compliance with the Data Protection Act in relation to subject access requests, respond within one month. Any request will be subject to adequate identity checks before processing. Access requests can be made via email to: info@bamboozletheatre.co.uk
Bamboozle will process all legitimate subject access requests free of charge unless requests made are deemed to be manifestly unfounded or excessive. In such cases, a reasonable and proportionate administrative fee will be applied to the request or, in exceptional cases, a request may be refused.
This notice was last updated November 2020.
This notice may be updated to take into account changes we have made, or to reflect changes to regulation or legislation. Updates to this notice will be posted on this page – please check back from time to time. We may also inform you of any changes where we hold an appropriate email address for you.
Unit 10 St Mary's Works | 115 Burnmoor Street | Leicester LE2 7JL | 0116 255 2065
Registered Charity Number: 1136157 | Registered in England and Wales.
Company No. 7193792
