Privacy Policy

The Spring Arts & Heritage Centre is committed to protecting your privacy, including online, and in the transparent use of any information you give us. This policy sets out what information we may hold about you if you provide it, and how that data will be used. If you have any queries please contact us at info@thespring.co.uk or by using the contact details at the end of this policy.

What information we collect
How we keep your data secure
How we will use your data
Photography and filming
Website, cookies and browsing
Third parties and data processing services
Maintaining your personal information
Your rights
Contact details

What information we collect

Information you give us
You give us your personal information when you buy a ticket in person, on the phone or online. You also give us your information when you sign up to our mailing or e-mail list, make a donation or communicate with us. We will store personal information you provide including name, address, telephone number and email address. We will also store a record of your purchases and donations.

Information about your interactions with us
We will keep a record of emails we send you and we may track whether you receive or open them, which links you have clicked on and whether you have made a subsequent purchase online. When you visit our website, we may analyse how you interact with our content.

Sensitive information
Data Protection law recognises that certain categories of personal information are more sensitive such as health information, race, religious beliefs and political opinions.
We do not usually collect this type of information about our patrons unless there is a clear reason for doing so.

How we keep your data secure
Your personal data will be held on The Spring’s system or on systems managed by suppliers on behalf of The Spring. All details provided when purchasing tickets including personal details and purchase history are held by Ticketsolve (ticketsolve.com) who act as a data processor for The Spring Arts & Heritage Centre. Access to Ticketsolve.com is strictly controlled and only accessed by people who need it to do their job.

View the Ticketsolve privacy notice here

How we will use your data

Communication about events you are attending
We will contact you by email or telephone with any essential information regarding any event you have purchased tickets for e.g. cancellations, timings, reschedules etc. and to collect feedback following the event under the fulfilment of contract basis.
If you do not provide us with your personal information when purchasing your ticket, we will not be able to contact you regarding any changes to your event.
If we run an event in partnership with another named organisation your details may need to be shared in order that they can help us run the event.

Marketing communications
We want to communicate with you about the work that we do in a way that is relevant and reasonable. To do this, we use data we have stored about you such as contact details, previous purchases and preferences. We will provide you with information on forthcoming events, offers and our fundraising efforts where appropriate.

The first time you give us your details, we will ask you if you consent to receiving different types of marketing communication from us. If you give your consent but then change your mind at any time, you can let us know you would like to opt-out.

• In the case of postal communication about our events and services, you can choose to not receive these at any time by using the contact details at the end of this policy.
• In the case of email communication about our events and services, we will provide you with an option to unsubscribe in every email that we subsequently send you, or you can alternatively use the contact details at the end of this policy.
• In the case of fundraising communications by post and email, you can choose to not receive these at any time by using the contact details at the end of this policy or by unsubscribing in any fundraising email that we send you or by using the contact details at the end of this policy

If we already hold your details
If we have held your contact details from before 25 May 2018 and you are currently opted in to receive marketing communications from us, we will continue to contact you using our legitimate organisational interest until we are able to update your consent preferences or hear from you otherwise.

• In the case of postal communication about our events, services and fundraising activities, we will continue to contact you under legitimate interest as you will have opted-in to receive postal mail from us when you first gave us your details or at any point up until 25 May 2018. You can choose to not receive these at any time by using the contact details at the end of this policy.
• In the case of email communication about our events and services, we will continue to contact you under legitimate interest (soft-opt in) as you will have opted-in to receive emails from us when you first gave us your details or at any point up until 25 May 2018. We will provide you with an option to unsubscribe in every email that we subsequently send you, or you can alternatively use the contact details at the end of this policy.

We will not be able to let you know about our fundraising activities via email until we are able to gain your consent under the GDPR.

Other processing activities
In order to offer you the best service possible, we may share data from Ticketsolve with the Arts Council platform Illuminate. This will then be analysed and compared with publicly available information e.g. census records. All data in Illuminate is processed in an anonymised way.

Debit and credit card information
If you use your credit or debit card to purchase from us or to make a donation at the Box Office or over the telephone, we will ensure that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). We do not store card details after the transaction is complete.

Photography and filming

From time to time The Spring may take photographs or record film of events or activities. These are used for marketing purposes, to document our work and to report to our funders. All images are stored securely. Whenever photography or filming is taking place we ensure clear signage is placed in appropriate areas. At any time, you can ask the photographer or a member of staff not to be included in the photographs.

The Spring operates a CCTV system for the safety and security of people, both visitors and staff, museum exhibits, property and buildings. It may be used to investigate security incidents in order to obtain evidence, should such incidents occur. You may, at any time, request access to footage that features you. Requests must be made in writing to the Director and are subject to the conditions laid out in The Spring’s CCTV policy.

Website, cookies and browsing

Our website uses cookies. These cookies collect information about how visitors use a website, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works.

You can prevent the action of cookies by adjusting the settings on your browser. Be aware that disabling cookies will affect the functionality of the website and may result in the disabling of certain features and functionality.

We use third party services to collect standard internet log information and details of visitor behaviour patterns. You can read more information on these below.

Third parties and data processing services

Visiting artists and companies
When booking tickets for some events you may be asked if you consent to having your contact details shared with the visiting artist or company providing the performance you are booking. This allows them to analyse their audiences and contact you directly about their work. If you choose to opt-in we will pass your details on to those companies. They in turn will provide you with their own privacy policy within 30 days and provide a means for you to opt-out of receiving further information from them.

We will share your data with certain data processors to allow us to deliver our services to you. More information on each of our current data processors is below.

Realex
Any online payments are processed securely via Global Payments (Realex).
View the Realex privacy notice here:

Survey Monkey
Our post-event and service feedback is collected using surveymonkey.com, a standard feedback online platform. As a default, responses are recorded anonymously. Where users choose to submit their contact details (usually name, email address and telephone number) at the end of the survey, these will be stored securely on our Survey Monkey account. Individual responses to surveys can be deleted by request.
View the Survey Monkey privacy notice here:

Mondo Marketing
Our printed season brochures are distributed by mailing as part of our contract with marketing agency Mondo Marketing. If you choose to receive postal mail from us including the season brochure, we will send them your name and postal address. Data is deleted after the completion of each mailing job.

MailChimp
Our email communications are processed via mailchimp.com (an industry-standard bulk email system) in order to maintain your subscription. If we email you to collect post-event feedback or if you choose to receive marketing emails from us, MailChimp will hold your name and email address, as well as records of emails we have sent to you and your activity within these emails. All email communications via mailchimp.com will provide you with a means to unsubscribe from further feedback collection and marketing email communications from us.
View the MailChimp privacy notice here: 

We ensure that our third-party service providers who handle data outside the UK or EU, for example through data servers or relays, adhere to the EU-US Privacy Shield.

Maintaining your personal information

We store your personal information so that for any subsequent purchases you make we are able to link them back to a single unique record that we hold for you on our system. If there are aspects of your record that are inaccurate or that you would like to remove, please use the contact details at the end of this policy. Customer data on Ticketsolve and MailChimp will be removed after 6 years of customer inactivity. Any contact details submitted to Survey Monkey will be deleted after 1 year.

Any objections you make to any processing of your data will be stored against your record on our system so that we can comply with your requests.

Subject access requests and the right to be forgotten

Under the GDPR, you may at any time request a copy of the information we hold on you by contacting us or ask for rectification of inaccurate personal details. You can also request the erasure of your personal data in any of the specific circumstances set out in Article 17 of the GDPR. Please use the contact details at the end of this policy if you would like to exercise this right.

Contact details

Please get in touch with us if you have any questions about any aspect of this privacy policy, and in particular if you would like to object to any processing of your personal information that we carry out for our legitimate organisational interests.

We can be contacted at the following address:
The Spring Arts & Heritage Centre
56 East Street
Havant
PO9 1BS

The Data Protection Officer is Laura Woodward, Creative Director.
By phone on 02392 472 700, or email info@thespring.co.uk

We may review and update this Privacy Policy. This version is current from June 2024. A full PDF version of this document can be downloaded here. 

The Privacy Policy forms part of The Spring’s internal Data Protection Policy, which is reviewed annually by the Trustees.