Please read the full details of our Privacy Policy.

About this policy

At the Royal Shakespeare Company we take your privacy seriously. We promise to respect any personal data you share with us and keep it safe.

This policy explains who we are, what information we collect, how and why we use it, how it is stored, how we fundraise, which partners we work with, and your rights regarding any information you share with us.

We will use any personal information we collect about you in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act (DPA 2018), the Data Use and Access Act 2025 (DUAA) and the Privacy and Electronic Communications Regulations (PECR). We aim to be clear when we handle your data, and not do anything you would not reasonably expect.

By visiting www.rsc.org.uk you are accepting and consenting to the practices described in this policy.

This privacy policy outlines how we process data for our:

  • Ticket buyers, online users, members, donors, and patrons
  • Participants in our Creative Learning and Engagement and National Partnership activities
  • Volunteers and ambassadors
  • Stakeholders, suppliers, and industry contacts
  • Auditionees, job/paid for opportunity applicants, and work experience applicants

Please read this information carefully, as by providing your data to us you acknowledge you have read this policy and understand we will process your data in accordance with its terms.

Who we are

The Royal Shakespeare Company (ICO registration Z5023810) is the data controller for any personal information we process.

The Royal Shakespeare Company (RSC) is incorporated under Royal Charter and is a charity registered in England and Wales (Charity Number 212481).

RSC Enterprise Limited (CRN 2360172) is a private limited company that is a 100% owned subsidiary of The Royal Shakespeare Company that carries out a range of commercial trading activities to generate income for the RSC.

For this policy “RSC,” “we,” “us,” and “our” refer to the Royal Shakespeare Company.

Contact us

Questions, comments, and requests about this Privacy Policy are welcomed.

Email: dataprotection@rsc.org.uk

Write to: Royal Shakespeare Theatre, Waterside, Stratford-upon-Avon, Warwickshire, CV37 6BB

Data collection

You give us your information when you:

  • Visit our website
  • Create or update your MyRSC account on our website
  • Buy a ticket, make a purchase from our shop, buy something online, or book a table in our restaurant
  • Make a donation
  • Join one of our Membership or Patrons schemes
  • Hire a costume from RSC Costume Hire
  • Sign up to receive marketing communications from us
  • Sign up for one of our events or workshops
  • Take part in one of our Learning and National Partnerships activities or programmes
  • Sign up to one of our Learning CIPD courses
  • Enter a competition, promotion, or survey
  • Supply goods or services to us
  • Pay us for goods or services
  • Submit an audition
  • Apply for a fellowship
  • Apply for a bursary
  • Apply for a job/paid for opportunity
  • Apply to volunteers with us
  • Are involved in an incident e.g., an accident
  • Communicate with us by post, email, telephone, social media, via our websites, or in person
  • Visit our premises

Cookies

We receive and store certain details whenever you use the RSC website. A cookie records on your device information relating to your internet activity (such as whether you have visited our website before). The cookies we send to your device only relate to your use of our website; they do not have any other effect on your device.

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site. For more information see our Cookie policy.

Types of personal data we collect

We collect the following types of personal data:

  • Ticket buyers, online users, members, donors, and patrons

  • Participants in our Creative Learning and Engagement and National Partnership activities

  • Volunteers and ambassadors

  • Suppliers, stakeholders, and industry contacts

  • Auditionees, job/paid for opportunity applicants, and work experience applicants

Use of data

We will use your information for the purposes listed below under one of the following lawful bases:

  • Performance of a contract between us and you
  • Your consent (where we need it)
  • To comply with a legal obligation
  • Our legitimate interests (except where such interests are overridden by the interests, rights, or freedoms of the individual)

The ways in which we use your data are listed below:

  • Ticket buyers, online users, members, and donors

  • Fundraising and profiling

  • Participants in our Creative Learning and Engagement and National Partnership activities

  • Volunteers and ambassadors

  • Suppliers, customers, and industry contacts

  • Auditionees, job/paid for opportunity applicants, and work experience applicants

Sharing your data with third parties

We may share your personal information with any member of our group, which means our subsidiaries, and our ultimate holding company and its subsidiaries.

We may disclose your personal information to third parties:

  • If we are under a duty to disclose or share your personal data to comply with any legal obligation.
  • To enforce or apply terms of use or terms and conditions of supply and other agreements; or to protect the rights, property, or safety of The Royal Shakespeare Company, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
  • If we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
  • If the RSC or substantially all its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.

The personal data that we collect from you is held within the UK and/or European Economic Area (EEA), for example, the data in our Customer Relationship Management system, Tessitura. We use some suppliers who host data outside the UK. Where your data is transferred outside the UK, we will take all reasonable steps to ensure it is handled securely and in line with this Privacy Policy. This includes ensuring that appropriate safeguards are in place, such as approved data transfer agreements.

The ways in which we share data with third party organisations are listed below:

  • Ticket buyers, online users, members, and donors

  • Participants in our Creative Learning and Engagement and National Partnership activities

  • Volunteers and ambassadors

  • Suppliers, customers and industry contacts

  • Auditionees, job/paid for opportunity applicants, and work experience applicants

Keeping your data secure

We take every precaution to protect your personal data, and we hold regular security reviews to ensure that the website is safe and secure for your protection.

Your data is processed and stored in secure systems and digital environments. Access to personal data is strictly controlled; only authorised and trained employees and approved contractors/developers are granted access to personally identifiable information. This will be from time to time, and only when they need to perform a specific job or task.

If we need to share personal data with a third party, we ensure that data sharing agreements are in place.

How long we keep your data

We will keep personal data for no longer than is strictly necessary, having regard to the original purpose for which the data was processed.

Our retention periods are detailed below:

  • Ticket buyers, online users, members, and donors

  • Participants in our Creative Learning and Engagement and National Partnership activities

  • Volunteers and ambassadors

  • Suppliers, customers, and industry contacts

  • Auditionees, job/paid for opportunity applicants, and work experience applicants

Giving you control

Your individual rights

Under data protection law, you have rights including:

  • Your right of access: you have the right to ask us for copies of your personal information.
  • Your right to rectification: you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
  • Your right to erasure: you have the right to ask us to erase your personal information in certain circumstances.
  • Your right to restriction of processing: you have the right to ask us to restrict the processing of your personal information in certain circumstances.
  • Your right to object to processing: you have the right to object to the processing of your personal information in certain circumstances.
  • Your right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
  • Your right related to automated decision-making including profiling: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Where you have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.

To withdraw your consent, please contact us as set out at the beginning of this Privacy Policy. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to.

 

How to update your data

How to make a complaint

If you wish to make a complaint about how we are using your data, please email dataprotection@rsc.co.uk.

Where you take the view that your personal data is processed in a way that does not comply with the UK GDPR, you have a specific right to lodge a complaint with the Information Commissioner’s Office (ICO). They will then inform you of the progress and outcome of your complaint. You can contact the ICO at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Helpline number: 0303 123 1113
ICO website

Change to this policy

We may change or update this Privacy Policy from time to time. Any significant changes will be communicated on our website or by contacting you directly.

Last updated 12 August 2025

You might also like