Last updated: 2021-12-22
OUR PRIVACY COMMITMENT TO YOU
In respect of any personal information that we collect from you, the data controller (the company that is responsible for your privacy), is The Ambassador Theatre Group Limited, which includes ATG Tickets, Nova Cinema, LoveTheatre and Group Line.
Note that you are required to be at least 18 years old to use our website(s) and services, and we do not intentionally collect personal information from anyone under 18. No-one under 18 should attempt to submit any personal information to us.
ATG Tickets and Nova Cinema are owned and operated by The Ambassador Theatre Group Limited.
“ATG” and “Ambassador Theatre Group” (and “we”, “our”, “ours” and “us”) refers to The Ambassador Theatre Group Limited, a leading venue owner, producer and ticketing operator in the arts and entertainment industry, registered in England and Wales with registration number 2671052 and whose registered office is at Alexander House, Church Path, Woking, Surrey GU21 6EJ.
The UK is currently experiencing a public health emergency as a result of the coronavirus (COVID-19) pandemic. We are taking a range of additional measures to keep our team members, local community and guests safe, including following any government requirements and/or guidance as necessary. This section of our privacy notice explains how we will use your personal information in order to support these efforts.
NHS Test and Trace/Test and Protect
To support the efforts of NHS Test and Trace (for England) and Test and Protect (for Scotland), the Department of Health and Social Care (“DHSC”) and NHS Scotland have asked us to keep a temporary record of visitors to our venues for 21 days and supply such data to the NHS Test and Trace service (in relation to England) and NHS Test and Protect (in relation to Scotland) where requested by them.
The provision of such personal information is voluntary. However, we would encourage all visitors to share their details with us in order to support these NHS schemes on the basis that such information will only be used where necessary to help stop the spread of Covid-19.
Our processing of such personal information is on the basis of the legitimate interest of facilitating contact tracing in respect of Covid-19. We consider that this processing is necessary to help stop the spread of Covid-19 and keep our staff and visitors to our venues safe. Note also that the government has recommended these measures be put in place. Please note that we have procedures in place designed to protect the personal data you provide to us for these purposes (see below).
When you book a ticket for an event (either directly or with a 3rd party agent), we will collect the following data about the lead booker (as per normal requirements):
Each visitor will also be provided with the option of providing their data (as per above) in addition to the lead booker:
We encourage you to provide this information prior to attending the event/venue in order to avoid any additional delays to yours and other people’s experience at the event/venue.
The accuracy of the information provided will be the responsibility of the visitor who provides it. We will not verify any visitor’s identity for NHS test and trace purposes. We will not collect any additional data for these purposes.
How we use your data
We will keep the data collected for a period of 21 days, in line with the government’s guidance. Once this retention period has ended we will securely delete the data (unless we already collect and keep such data for other purposes, in which case it will be deleted in line with our retention policy).
For more information on how NHS Test and Trace works please visit here: https://www.gov.uk/guidance/nhs-test-and-trace-how-it-works
For more information on how NHS Test and Protect works please visit here: https://www.nhsinform.scot/campaigns/test-and-protect
For more information on how NHS Test, Trace, Protect works please visit here: https://gov.wales/test-trace-protect-coronavirus
NHS Scotland’s privacy notice on NHS Test and Protect can be found here: https://www.informationgovernance.scot.nhs.uk/covid-19-privacy-statement/
If you do not wish us to share your personal information with NHS Test and Trace or NHS Test and Protect, please contact us. See the Contact Us section below on how to do this.
Non-invasive Covid-19 Status Certification (“CSC”) checks
As part of a range of measures designed to combat the spread of Covid-19 and to protect our staff, customers and local community, venues will be carrying out CSC checks.
Compliance with our CSC checks will be a STRICT PRE-CONDITION TO ENTRY to our venues.
In order to be admitted to our venues, you will be required to show satisfactory evidence that you have either:
1. received two doses of an approved Covid-19 vaccination at least two weeks before you attend the venue; or
2. received a negative Covid-19 lateral flow or PCR test either the day before or on the day of attendance to the venue.
Evidence of vaccination can be provided by means of the NHS app, the NHS website or a copy of a letter from your GP, in each case confirming that you have received both vaccinations and the date on which the second dose was administered (which, as stated above, must have been at least two weeks before you attend the venue. Please note that the NHS vaccination card will not be accepted as evidence of vaccination status.
Evidence of a negative test result can be provided by means of an email or text message from the NHS.
We may also ask you to provide proof of identification in order to verify that the evidence provided relates to you, at our sole discretion.
Please note that children under 18 will not be required to show evidence of their CSC , but will instead be required to verbally confirm that they have not tested positive for the Covid-19 virus and are not displaying symptoms either the day before or on the day of attendance to the venue (or their parent/guardian may provide this confirmation on their behalf).
Please also note that in line with Government guidance, we are no longer able to accept proof of natural immunity as part of our CSC checks.
How we will use your personal data:
Your CSC and proof of identification (if necessary) will be used by our staff at our venues to make an immediate decision regarding whether you should be allowed entry to such venue. Your CSC information constitutes “special category” personal data under the GDPR as it relates to your health. In providing us with your CSC evidence, you will be deemed to consent to us processing your health data in order to assess whether you should be allowed to enter our venues. If you do not consent to us processing your personal data in this manner, you should not attend our venues.
It is also in our legitimate interests to process your CSC and proof of identification (if necessary) as set out above, as this will enable us to re-open our theatres whilst also helping to protect the health and safety of our customers and staff. We also believe that carrying out these checks is necessary for reasons of public interest in the area of public health. Please note that there is no processing of your personal data in this regard by automated means.
When processing your personal data in the way described in this section on non-invasive CSC checks, we owe you a duty of confidentiality and will treat all information disclosed to us as part of the CSC checks as confidential.
Whilst undergoing a CSC and identification check may be a condition of entry at the event/venue, we will not retain a record of the result of any CSC or identification check. If you receive a positive Covid-19 test result which means that you are no longer able to attend a certain event, you/your party will be entitled to a credit voucher, allowing you to rebook and see the show on an alternative date. In such a case, we will retain a record that you/your party are entitled to a credit voucher but we will not retain a record of your positive test result.
Additional Information about your Health
If you feel unwell, are displaying any symptoms of Covid-19, have been told to self-isolate or believe you could be refused entry on the basis of your own self-assessment of your heath, then you should not seek to enter any of our venues.
What information will you collect from me?
When you use our website(s) or other services, we may collect and use your information in several different ways. The main reasons are:
Please note that if you choose not to share your personal information with us, or refuse certain contact permissions, we may not be able to provide you with some services that you have asked for.
How and when we collect your personal information
Generally, we collect your information when you decide to interact with us. This could include purchasing online, over the phone, in person at a ticketing booth or self service kiosk, when you sign up to receive emails from us. We also look at how our website(s) is used, so that we can offer the best possible experience.
We collect information in a number of ways, which are listed below:
We may also receive information about you from:
What Personal information we may collect
We will collect personal information that you submit to us when you make use of our website(s) or services and/or you contact us. This information may include, but not be limited to:-
How we use the Personal information that you provide us with
Please note that if we discover any criminal activity or alleged criminal activity through our use of CCTV, fraud monitoring and suspicious transaction monitoring, we will process this data for the purposes of preventing or detecting unlawful acts. We aim is to protect the individuals we interact with from criminal activities.
What about sensitive personal information?
In the course of providing our goods or services to you, we may collect information that could reveal your religious beliefs or information about your health. Information like this is considered “sensitive personal information” under data protection laws. We only collect this information where you have given your explicit consent, it is necessary, or you have deliberately made it public.
Examples of when we may collect this information could be in the following circumstances:
If you do not allow us to process any of your sensitive personal information, this may mean that we are unable to provide all or part of the services that you have requested from us. Please be aware that in such circumstances, you may not be entitled to cancel or obtain a refund of any price that you have already paid.
Technical Information we collect from you
We automatically collect certain limited information about your device and your visits to our websites which may be considered personal information. This information may include the type of data set out below.
How we use this Technical Information
Information we receive from other sources
Certain third parties may provide us with personal information about you. In each case, it is the third party’s responsibility to ensure that is has obtained your consent to share your personal information with us. Where possible, we will ask a third party to confirm that it has the right to pass this information to us.
Third party services
You may give us permission to access your personal information in other third-party services, e.g. you may link your account to Facebook or Instagram, which allows us to access content on these platforms.
How we use third party services data
ATG group companies
The companies within the Ambassador Theatre Group work closely to deliver services to you.
How we use our Group data
Our ticketing agents
We sometimes appoint third party ticketing agents to promote and sell our products on our behalf. Where you have purchased one of our products from an agent it will be necessary for the agent to pass your details on to us so that we can fulfil your order. To contact you about any cancellations, amendments or additional information in respect of your ticket order
Collation of Personal Information
However, we share your data with other companies as an essential part of being able to provide our services to you:
We may also disclose your personal information to third parties if:
Anonymised and pseudonymised data
We may anonymise personal information so that you can no longer be identified from such information. We may also pseudonymise your personal information. This allows us to recognise where multiple behaviours are linked, without seeing any personally identifiable data.
Where you have consented or where we have a legitimate interest, we will use your personal information to contact you via email, SMS, push notification, telephone or post (depending on any preferences notified to us) with relevant information about Ambassador Theatre Group, our websites, our products, services, offers and events. Where you have asked to receive information about our corporate partners or sponsors, your personal information will be used by us to send this information to you.
How to stop electronic marketing messages
You can stop receiving electronic marketing messages (e.g. emails) from us at any time. You can do this:
Once you do this, we will update your profile to ensure that you don’t receive any further electronic marketing messages. However, please note that it might take up to 14 days for our systems to be updated, so you might continue to receive messages from us whilst we process your request.
How to stop postal marketing messages
You can stop receiving postal marketing messages from us at any time. You can do this:
Once you do this, we will update your profile to ensure that you don’t receive any further postal marketing. However, please note that it might up to 30 days (or longer if you use the Return to Sender method) for our systems to be updated, so you might continue to receive marketing from us whilst we process your request.
Your browsing and interaction on any other website, or your dealings with any other third-party service provider, are subject to that website’s or third-party service provider’s own rules and policies.
We do not monitor, control, or endorse the privacy practices of any third parties.
We encourage you to become familiar with the privacy practices of every website that you visit or third-party service provider that you deal with, and to contact them if you have any questions about their respective privacy policies and practices.
Retaining your personal information. We keep your personal information for as long as we require for the purposes for which it was collected (see above). Once the relevant purpose has been satisfied we will securely delete or anonymise your personal information unless we are required to retain a copy of such information under applicable law.
We are committed to keeping your personal information secure. We take appropriate technical and organisational measures to ensure the security of all personal information we hold (and endeavour to only work with third parties who provide equivalent protections) in accordance with industry best practices (for example, if you provide us with your credit card information, the information is encrypted to ensure its security). However, please note that there are inherent security implications of disclosing personal information online for which we cannot be held responsible.
Account details. You are responsible for keeping the log in details and password in respect of any account you hold with us confidential at all times.
You have rights in relation to the personal information we hold about you, and have the right to:
If you have a concern or wish to make a complaint about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to the UK Information Commissioner’s Office (“ICO”). You can find details about how to do this on the ICO website at https://ico.org.uk/concerns/ or by calling their helpline on 0303 123 1113.