Norfolk and Norwich Festival Trust (NNFT) is committed to protecting your privacy and personal information, and to be transparent about what information we hold and how we use it.
Collecting and processing personal data allows us to develop a better understanding of our audiences, participants and supporters. It allows us to provide you with timely and relevant information about the work that we present and to make important decisions about our programme of events and the opportunities that we create for people to engage with our work. As a registered charity it also helps us to engage with potential donors and supporters.

We will use any personal information that we collect about you in accordance with the General Data Protection Regulation and the Privacy and Electronic Communications Regulations 2003.

WHO WE ARE

Norfolk and Norwich Festival Trust delivers Norfolk & Norwich Festival, Festival Connect & Create, and manages Norfolk Open Studios. NNFT is a registered charity in England and Wales (number 1164424) with a wholly owned trading subsidiary registered in England and Wales (number 230 8577 07). We are an Arts Council England National Portfolio Organisation and receive annual funding from Norwich City Council, as well as a number of district councils, trusts and foundations, individual donors and corporate supporters.

WHAT INFORMATION DO WE COLLECT?

We collect various types of information in a number of ways:

Information that you give us.

For example when you register on our website, buy tickets or make a donation, we’ll store personal information you give us such as your name, email address, postal address, telephone number and card details. We will also store a record of your purchases and donations.

Information about your interactions with us.

For example, when we send you a mailing we may keep a record of this, and when we send you emails, we can see what you have opened and which links you have clicked.

Information from third parties.

We occasionally receive information about you from third parties. For example, we may use third party research companies to provide general information about you, compiled using publicly available data.
The information we hold about you may include:

• your name, postal address, email address and telephone number ticketing information, booking history including concessions and access information
•  billing address information, card details and direct debit instructions
• donation history / gift aid declaration
• your preferences for how we communicate with you about our activities
• what events and activities you have participated in
• if you are under 18, the name of your parent or guardian
• film and photography of you at public events, workshops or other activities
• information that is available publicly

Special categories of personal data (previously referred to as sensitive personal data)

We do not usually collect sensitive personal data, but there may be occasions when we need to collect and store more information; for example we might need to collect an individual’s age and health information in order for them to take part in an event or workshop, or we might also record information about access requirements to help us provide the best service. For children under 16 we will always ask for the consent of a parent or guardian to collect this information.

Film and Photography

During the course of public performances, events and workshops we may take photographs and video to document events and for use on our digital platforms, printed materials and other promotional activity. This includes, but is not limited to, our website, social media channels, leaflets, posters and media releases. We will also share these images with relevant partners and artists relating to an event or activity to use for the same purposes. We will always put up signage at events to notify audiences if this is taking place.

If we are taking close-up images at public events we will endeavour to ask for an individual’s permission. If you are aged 16 or over we will ask for your verbal consent, for anyone under 16 we will ask for written permission from a parent or guardian.
At educational workshops and participation events we will always ask for written consent for anyone aged under 18 and adults at risk. When working with schools this may be acquired through permissions that they have already sought.

Audiences at ticketed performances consent to filming, photography and sound recording of themselves as part of the audience.

If you would prefer not to be included in any image recording, please speak to a member of Norfolk & Norwich Festival staff or a volunteer. They will be wearing a staff pass at the event and will provide information on how to make sure you are not included. Notices will be posted at the entrance to any venue where photography or video recording is planned, with similar information.

HOW DO WE USE YOUR DATA?

The above information is used to select and inform you of events or activities we think may be of interest to you and to support our work as a charity.

We use your data to:

• provide you with information about events that you have booked for and contact you if there are any important changes
• respond to comments or complaints that you have made, or provide any relevant information which you have requested
• administer your ticket sale, membership or donation, including processing gift aid
• ensure we know how you prefer to be contacted
• create a profile of your interests and preferences so that we can send communications that are most relevant to you
• send you information about our events, activities and news that we think will be of interest to you
• occasionally send you information on behalf of other partners, including our artistic partners and business supporters

We may combine information you provide to us with anonymised information available from external sources (e.g. Census data) in order to gain a better understanding of our audiences and visitors. We use profiling and segmentation to ensure communications are relevant and timely, and to provide an improved experience to our customers and supporters. When building a profile we may analyse geographic, demographic and other information relating to you in order to better understand your interests and preferences in order to contact you with the most relevant communications.

For fundraising purposes, we may use third party wealth screening and insight companies to provide us with information about you and combine this with information that is publicly available (for example from LinkedIn or the Charity Commission).

THIRD PARTIES

There are certain circumstances under which we may disclose your personal information to third parties in order to fulfil our contract to you, to deliver our activities and to our subsidiaries described above.

These third-party providers will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. These providers include ticketing system provider, ticketing agents, database software suppliers, our email distribution service and mailing houses. In these cases we require that these third parties comply strictly with our instructions and with data protection laws, for example around security of personal data.

We will share your personal information when required in order to comply with any legal obligation (for example to government bodies, NHS Test and Trace and law enforcement agencies).
Our website may contain links to and from the websites of other organisations. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

We may share some information, such as full postcodes and concessions purchased, with third party organisations, to meet our funding agreements with bodies such as Arts Council England, who will use the information to analyse and segment our audiences to help us plan and communicate better. They will also use the information to analyse ticket sales for national and regional research into patterns of arts attendance in England (for instance, comparison of sales trends over time and geographical comparisons).

We may share some information with specific named ‘partner companies’ (Festival presenting partners, venues and visiting companies) whose performances you have attended. In these cases you will be asked your explicit consent at the time of booking and the partner company will be named. To check which other organisations you have consented to share your information with, log into your ticketing account or contact the Festival Box Office on 01603 531800. Please note that these ‘partner companies’ have their own privacy policies and that we do not accept any responsibility or liability for these policies. Our personal data will not be shared with third parties to use for direct marketing and will never be sold on to any other agencies or companies.

UNSUBSCRIBING AND UPDATING YOUR PREFERENCES

If there are aspects of your record that are inaccurate or that you would like to remove, or you want to change your contact preferences, you can usually do this by logging in to your account through our website.

You can also ask for your preferences to be updated at any time using the contact information below.

Every email communication you receive from us will provide you with the opportunity to opt-out of receiving subsequent communications.

If you have opt-ed out of receiving information from us, we may still use your personal information to contact you about a booking (for example to let you know if an event is cancelled or if there is a change to the programme).

MAINTAINING YOUR INFORMATION

Unless you ask us otherwise, we will continue to store your personal information. This allows us to maintain contact with you and ensure that any future bookings or engagement you have with us are linked back to one single record. You can ask for inaccuracies in your data to be corrected at any time using the contact details below.

Any objections you make to any processing of your data will be stored against your record on our system so that we can comply with your requests.

SECURITY OF YOUR INFORMATION

We have safeguards in place to keep your personal information as secure as possible and make every endeavour to ensure that any third parties we use for processing your personal information do the same. We use a secured server which supports our email servers and any cloud-based file storage system. Information can only be accessed by authorised staff within our organisation and our staff are trained to understand the importance of keeping personal data secure. Our computers are safeguarded by anti-virus software and the regular changing of security passwords.

Your debit and credit card information

If you use your credit or debit card to purchase from us or to make a donation, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). You can find more information about this standard here.

We optionally allow you to store your card details for use in a future transaction. This is carried out in compliance with PCI-DSS and in a way where none of our staff members are able to see your full card number. We never store your 3 or 4 digit security code.

COOKIES

WHAT IS A COOKIE?

Cookies are small files which help customise your experience of the Norfolk & Norwich Festival website. These small text files are stored by the web browser on your computer or mobile device. Websites are able to read and write these files, allowing them to store things such as personalisation details or user preferences. Cookies provide a “memory” for the website, enabling it to recognise a user and respond appropriately. A cookie cannot give us access to your computer or to information beyond what you provide us.

HOW DO WE USE COOKIES?

We use cookies to improve the way our website works. Some cookies are necessary, to complete the purchase of tickets, for example. Others allow us to better understand the way our website is being used, so we’re able to make improvements. We also include cookies from third-party companies, these help us understand how well our digital marketing is working, for example Facebook ads.

When opening the Norfolk & Norwich website on your computer or mobile device for the first time, you’ll receive a notice prompting you to Accept cookies, or customise the cookie settings.

Here you’ll be able to choose to ‘Accept All Cookies’, ‘Reject All’, or customize the cookies you accept.

CHANGES TO THIS POLICY

We may change this Privacy Policy from time to time. If we make any significant changes in the way we treat your personal information we will make this clear on our website or by contacting you directly.

YOUR RIGHTS

You have the right to request a copy of all of the personal information that we hold about you, and to have any inaccuracies in this data corrected. In order to do this, please use the contact information below.

We will provide a copy of the information within one month of receipt of the request. This information will be provided free of charge (unless the request is deemed to be repetitive, unfounded or excessive).

We will process any requests for information to be updated or deleted within one month of receipt of the request.

CONTACT US

Please contact us if you have any questions about this policy or our organisational Data Protection Policy, if you would like to ask for your information to be updated, for your communication preferences to be amended or for your information to be removed.

Email mail@nnfestival.org.uk

Write to Communications Department, Norfolk & Norwich Festival, Norwich Guildhall, Gaol Hill, Norwich, NR2 1JS

Phone 01603 877750 and ask to be put through to the Communications Team

11 September 2023