1. Introduction

Newton Abbot and District Society of Arts (nadsa) is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains what information we collect, how we use it, and what your rights are.

This policy applies to personal data collected through our website (nadsa.co.uk), ticket purchases, mailing list sign-ups and any other interactions with us.

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.

2. About Us

nadsa is a charitable music society that stages a season of concerts each year in the Newton Abbot area. For the purposes of data protection law, nadsa is the data controller, meaning that we determine the purposes and means of processing your personal data.

3. The Information We Collect

We may collect the following types of personal data:

• identity data: your name and title;
• contact data: your postal address, email address, and telephone number;
• transaction data: details of tickets or season memberships you have purchased from us;
• communication preferences: whether you wish to receive our mailings and concert information;
• technical data: if you visit our website, we may collect your IP address, browser type and browsing activity through the use of cookies (see section 9 below).

We do not knowingly collect personal data from children under 16. If you are under 16, please ask a parent or guardian to contact us on your behalf.

4. How We Collect Your Information

We collect personal data when you:

• purchase tickets or season memberships for our concerts;
• sign up to our mailing list;
• contact us by email, telephone, post or in person;
• visit our website;
• fill in forms at our events.

5. How We Use Your Information

We use your personal data for the following purposes:

• to fulfil ticket and membership orders: processing your purchases and providing you with relevant concert information;
• to communicate with you: sending you details of upcoming concerts, programme changes, cancellations and other information about nadsa’s activities;
• to send marketing communications. With your consent, we may send you information about our forthcoming season, special events and other news. You can opt out of these communications at any time (see section 8 below);
• to administer and improve our website by analysing how our website is used so that we can maintain and improve it;
• to comply with legal obligations where we are required to process your data by law.

6. Our Legal Basis for Processing Your Data

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:

• contract: where processing is necessary to fulfil a ticket purchase or membership you have entered into with us;
• legitimate interest: where processing is necessary for our legitimate interest as a charitable society by, for example, keeping you informed about our concerts and managing our administration, provided these interests do not override your rights and freedoms;
• consent: where you have given us specific consent to contact you with marketing communications. You may withdraw this consent at any time;
• legal obligation: where we are required by law to process your data.

7. With Whom We Share Your Data

We will not sell, rent, or trade your personal data to any third party.

We may share your personal data with:

• service providers who assist us in running our activities, for example, ticketing platforms or email distribution services. These providers are only permitted to use your data for the specific purposes we instruct and are required to keep it secure;
• law enforcement or regulatory bodies where we are legally obliged to do so.

Any service provider with whom we share data is required to comply with applicable data protection legislation.

8. Your Rights

Under UK data protection law, you have the following rights:

• right of access: you can request a copy of the personal data we hold about you;
• right to rectification: you can ask us to correct any inaccurate or incomplete data;
• right to erasure: you can ask us to delete your personal data where there is no compelling reason for us to continue holding it;
• right to restrict processing: you can ask us to suspend the processing of your data in certain circumstances;
• right to data portability: you can request that we provide your data in a structured, commonly used, machine-readable format;
• right to object: you can object to the processing of your personal data where we are relying on legitimate interest as our legal basis;
• right to withdraw consent: where we are processing your data based on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of any processing carried out before you withdrew your consent.

To exercise any of these rights, please contact us using the details in section 12 below. We will respond to your request within one month.

If you wish to stop receiving marketing communications from us, you can do so at any time by contacting us or using any unsubscribe mechanism provided in our communications.

9. Cookies

Our website may use cookies, which are small text files placed on your device, in order to help us understand how the site is used and to improve your browsing experience.

We may use:

• essential cookies that are necessary for the website to function properly;
• analytics cookies that help us understand how visitors interact with our website. These collect anonymous, aggregated data and do not identify you personally.

You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of some parts of our website.

10. Data Security

We take appropriate measures to protect your personal data from unauthorised access, loss, misuse or damage. However, no method of transmission over the internet is completely secure and we cannot guarantee the absolute security of data transmitted to us online.

11. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected or as required by law. When your data is no longer needed, we will delete it securely.

As a general guide:

• ticket purchasers and members: we will retain your data for up to 3 years after your last transaction or interaction with us, unless you ask us to delete it sooner;
• mailing list subscribers: we will retain your data until you unsubscribe or ask us to remove you.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights or want to update your communication preferences, please contact us via the details published on our website at nadsa.co.uk.

13. Complaints

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the opportunity to address your concerns before you approach the ICO, so please contact us in the first instance.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latestt version will always be available on our website. We encourage you to review it periodically.