Privacy Policy
Bath Festivals
Version 3.0

1. About this Privacy Policy
2. Introduction
3. Collecting personal information
4. Using personal information
5. Sharing personal information
6. Security of personal information
7. Changes to the Privacy Policy and your duty to inform us of any changes
8. Your rights

1. About this Privacy Policy
Our Privacy Policy explains how Bath Festivals collects, uses, and discloses information about you. The terms “Bath Festivals,” “we,” “us,” and “our” include The Bath Festival and all of our subsidiaries and affiliates. We use the terms “customer,” “you,” and “your” to mean any person using our website or attending our events.
We respect the privacy of every individual who visits our website. This Privacy Policy explains how we use personal data received from our website and informs you of your data protection rights.
We will also help you to know when there is new information available in this Policy. We will tell you when this Privacy Policy was last updated, so you can take time to read it if it has changed since your last visit.
Privacy Policy last updated: May 2018

2. Introduction
Your privacy is of the utmost importance to us and we want to be transparent about the personal data we collect, why we collect it, how we collect it, and how we share it. We also want you to understand your rights and choices regarding processing, access, correction, and deletion of personal data about you.

3. Collecting personal information
Personal information, or personal data, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).
We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data includes first name and last name.
• Contact Data means the data we use to contact you including your billing address, delivery address, email address and telephone number.
• Financial Data means the data we use to process your payments for your orders including your payment card details. We do not store or process your card details ourselves, they are processed and stored via one of our contracted third-party service providers – the Box Office operated by Visit Bath.
• Transaction Data means details about transactions you have made on our website including the payments to and from you along with other details of purchases you have made from us.
• Technical Data means details about the device(s) you use to access our website including your internet protocol (IP) address, browser type and version, location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Technical Data also includes any information we hold through third party mail services – we use MailChimp for marketing and event invitations – this would include your internet protocol (IP) address, the date/time/location you accesses any email communications, contact details you have provided to us, number of times you have opened email communication and links you have clicked on.
• Profile Data includes your username (email address) and password, your login data, purchases or orders made by you, your interests, preferences, feedback and survey responses – this data is processed and stored via one of our contracted third-party service providers – the Box Office operated by Visit Bath.
• Usage Data includes information about how you use our website, events and services including your browsing patterns.
• Marketing and communications data includes your preferences in receiving marketing from us and your communication preferences.

4. Using personal information
We use the information you provide for the following purposes:
• To send you updates regarding the status of your enquiry or booking
o When you place an order we need to know your name, email address, delivery address, credit or debit card number and the card’s expiry date. This allows us to process and fulfil your order and to notify you of the status of your request. We may also ask for your telephone number which enables us to contact you urgently if there is a problem with your order.
• To keep you informed about events, news and offers that we think will be of interest to you
o If you have chosen to receive them, we will use your information to provide you with e-newsletters and brochures via post, letting you stay up-to-date about relevant offers and news.
• To improve the design, content and user experience of the www.bathfestivals.org.uk website
o We may use technology to track the patterns of behaviour of visitors to our website. This can include using a “cookie” which would be stored on your browser. You can usually modify your browser to prevent this happening. The information collected in this way can be used to identify you unless you modify your browser settings.
• Box office cookie policy – we use a mixture of essential and non-essential cookies as part of the booking process in order to ensure you have the best possible experience
o Essential cookies – in order to keep track of your order it is essential that we store a “session cookie” on your computer. This cookie will last for 24 hours.
o Non-essential cookies – we use a few non-essential cookies to customise your booking experience and help make it easier and more enjoyable for you. These extra cookies are used to store thinks like your login details, so you will be automatically logged in each time you visit our site. Before storing any of these cookies for the first time, we will alert you and ask your permission before proceeding. If you do not wish to store these cookies you will not be able to use that particular feature, but the rest of the site will continue to work correctly. If you have any questions/comments about privacy, please get in touch on info@bathfestivals.org.uk
• To understand the buying behaviour of our registered users
o Using a combination of data from both your order history and your website viewing activity, and the aggregated data of other customers, we may be able to tailor our events calendar to provide you with more of the events that they like.

5. Sharing personal information
Any information that we collect about you is used solely by Bath Festivals for the purpose of our own activities. We do not pass or sell any information about you, either personal details or behaviours, to any third party without your prior consent.

6. Security of personal information
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach immediately we are legally required to do so.
You acknowledge that the Internet is not a completely secure medium for communication and, accordingly, we cannot guarantee the security of any information you send to us (or we send to you) via the Internet. We are not responsible for any damages which you, or others, may suffer as a result of the loss of confidentiality of such information.
We reserve the right to disclose your personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order or legal process served on our website.

7. Changes to the Privacy Policy and your duty to inform us of any changes
We may need to update this Policy at any time and without notice and where we do this we will notify you by including pop up boxes on the website and/or emailing our customers. This Policy was last updated on in May 2018.
It is important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal data changes during your relationship with us and periodically review your account settings on our website.

8. Your rights
• Opting out
You can ask us to stop sending you marketing messages at any time by following the opt-out instructions on every communication we send to you.
• Cookies
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
• Rectification, access and erasure of your personal data
At any time, you can request from us information about the personal data that we process about you including correcting or deleting the data.
Bath Festivals will respond to all initial inquiries within a 10-day time period of a request to correct or delete data. We also commit to remedying any and all agreed actions with a 30-day period.
• Make a complaint
If you consider Bath Festivals to have processed your personal data in an incorrect way you can contact us. You also have the right to raise a complaint to a supervisory authority.