The Royal Shakespeare Company ("we") are committed to protecting and respecting your privacy. We will use any information we collect about you in accordance with the Privacy and Electronic Communications Regulations 2003, the Data Protection Act 1998 and, from 25 May 2018, the General Data Protection Regulation (GDPR).
Who we are
The Royal Shakespeare Company (RSC) is incorporated under Royal Charter and is a charity registered in England & Wales (Registered Charity Number 212481).
Our principal charitable objectives laid down in the Royal Charter are to conserve, advance and disseminate the dramatic heritage of Shakespeare and to advance and improve the dramatic art, both in the United Kingdom and throughout the world. We are charged with producing and presenting dramatic performances of all kinds, and with teaching and training and other educational activities. These objectives are achieved by the production of plays by Shakespeare and by other classic playwrights and by the commissioning and production of new plays, which are presented in our theatres in Stratford-upon-Avon, in London, on tour, and broadcast to cinemas and schools throughout the United Kingdom and the rest of the world; and by educational activities in schools, colleges and for the community at large.
Our purpose is to create the finest experience of Shakespeare in performance, shared with the widest audience in Stratford-upon-Avon, London, across the UK and around the world.
RSC Enterprise Limited (Company Number (2360172) is a 100% owned subsidiary of The Royal Shakespeare Company and carries out a range of commercial trading activities to generate income for the RSC.
By visiting www.rsc.org.uk you are accepting and consenting to the practices described in this policy.
For the purpose of the General Data Protection Regulation (GDPR), the data controller is The Royal Shakespeare Company of the Royal Shakespeare Theatre, Waterside, Stratford-upon-Avon, Warwickshire, CV37 6BB.
What information do we collect?
We only collect the information that is necessary to carry out normal business operations, to provide any good or services you’ve asked for, and to keep you updated about our current and future activities. Examples of the type of personal information that we collect includes:
- name, title, date of birth and gender
- sensitive personal data, such as information about race, ethnicity and sexual orientation (you have the right not to provide us with this information)
- contact details including postal address, email, phone numbers
- if you are a teacher with whom we have professional relationship, name and address of school/college, type of school/college, teacher name, teacher email, subject and key stage taught
- transaction history, including financial and credit card information
- access requirements to enable us to determine if you require wheelchair access, audio description, BSL interpretation, or any other access requirement
- image and likeness (as captured on our CCTV cameras and in photographs and videos we may use for promotional purposes)
- technical information gathered when you visit our website; including the Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform;
- information about your visit to our website; including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
- other background personal information you may provide to us (for example when you correspond with us).
How do we collect your information?
You give us your information when you buy a ticket, make a purchase from our shop, buy something online, sign up for one of our events or workshops, make a donation, join one of our Membership or Patrons schemes, apply for a job, enter a competition, promotion or survey, or communicate with us by phone, email or otherwise.
We also keep your details when you create or update your MyRSC account on our website or sign up to receive marketing communications from us.
We receive and store certain details whenever you use the RSC website. A cookie records on your device information relating to your internet activity (such as whether you have visited our website before). The cookies we use on our website don't collect personally identifiable information about you and we won't disclose information stored in cookies that we place on your device to third parties. The cookies we send to your device only relate to your use of our website; they don't have any other effect on your device.
What we use your personal information for
We will only collect the personal data that we need and use it on relevant lawful purposes as permitted by the current data protection legislation (UK Data Protection Act/GDPR).
We will use this information:
- to carry out our obligations arising from any contracts between us and to provide you with the information, products and services that you request from us;
- to provide you with information about other goods and services we offer;
- to provide you, or permit selected third parties to provide you, with information about goods or services we feel may interest you. We will only contact you by electronic means if you have consented to this. You can update your preferences by logon to or create a MyRSC account on our website
- to analyse your information and carry out a segmentation. This is used to better understand customer behaviour and, where your consent is given, to inform you of the productions and services we believe are of most interest to you. If you do not wish us to use your data in this way, please email email@example.com and we will stop the behavioural segmentation of your data. You will still receive emails from us if you have requested to do so but these may be less targeted to you based on your past bookings.
- to notify you about changes to our service;
- to ensure that content from our site is presented in the most effective manner for you and for your computer;
- to send you invitations to take part in research surveys, research discussion groups or interviews to give your opinions about our productions and services (whether or not you have agreed to receive other communications). Some of these may be carried out by market research agencies working for the RSC. You can choose to stop receiving email invitations to take part in surveys at any time by emailing firstname.lastname@example.org
- to conduct desktop research and fundraising activities to promote the interests of the Royal Shakespeare Company as a charity;
- to administer membership records, patrons’ records and giving schemes;
- to manage our volunteers and ambassadors; and/or
- to ensure that our fundraising resources are used in the most effective and efficient manner and that any communications we may send you about fundraising are appropriate.
- to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
- to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
- to allow you to participate in interactive features of our service, when you choose to do so;
- as part of our efforts to keep our site safe and secure;
- to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you;
- to make suggestions and recommendations to you and other users of our site about goods or services that may interest you or them;
- to ensure that our fundraising resources are used in the most effective and efficient manner and that any communications we may send you about fundraising are appropriate.
Information we receive from other sources
We may combine this information with information you give to us and information we collect about you. To make sure you only receive fundraising communications which are relevant, we may undertake research to help us better understand our supporters and to contact appropriate people who may be able to support us further. This may take the form of internal profiling, screening and ranking or segmentation exercises carried out in-house. In doing so we will make use of additional publicly-available information about you.
As part of our fundraising activities we may to seek to supplement booking information with qualified information such as business network information, personal connections and other publicly-available information pertaining to: age, place of residence, wealth, career, interests and public donations to other organisations.
We achieve this by using resources to assist us in our fundraising, including the Internet for general searches, newspaper articles, the electoral roll, property and housing marketing websites, official company websites, and those of charities and other arts organisations. We may also consult third party sources and information providers who collate publicly available information about you. These include:
MINT UK – Database of UK company and director information
Trustfunding – Database of UK registered trusts, foundations and grant information
Charities Commission – the regulatory body and register of charities in England and Wales.
Who’s Who 2018 – Bloomsbury, a publication of over 33,000 biographies.
192.com - UK Electoral Roll
We may use publicly-sourced images to help identify individuals who attend our fundraising events.
We make every endeavour to ensure the information we hold about you is accurate and therefore may use publicly available information to keep the database accurate and relevant.
We have historically used third party fundraising agencies to undertake standard wealth screening exercises using portions of our ticketing and supporter information, where we held consent to carry out data processing, to support our business activities and identify appropriate levels of possible support, and projects of interest. We no longer perform such methodologies using external service providers, and any resulting data has been removed.
Use of Sensitive Personal Data
We may collect sensitive personal information about you including information about your racial or ethnic origin, your religious or other beliefs, trade union memberships you are a part of and offences or alleged offences committed by you (Sensitive Personal Data).
Such Sensitive Personal Data shall be processed and used in a manner that complies with the additional requirements relating to Sensitive Personal Data as set out in the Act. Such Sensitive Personal Data shall only be collected after having obtained your explicit consent to do so or where it is necessary to do so to comply with legal requirements including for employment law purposes. Some sensitive data is requested in our customer surveys but is analysed anonymously and is not obligatory to provide.
Our basis for processing your personal information and what we use it for
We aim to be clear when we collect your data and not to do anything you wouldn’t reasonably expect.
We may process your personal data because it is necessary for the performance of a contract. For example, if you make a purchase, sign up for an event, book an Education workshop, or book a table in our restaurant.
We may process personal data because it is in our legitimate interests to do so. Examples of these may be:
- to share information about our organisation or invite to stakeholder events with representatives from government; individuals within other arts organisations; and other interested parties
- we may use your personal information to understand your reasons for donating to us, to better understand your interests,
- to tailor our communications to you and/or to give you the best experience at our events. We may also collect information about how you use our services (including our website) to analyse our customer base and improve our processes.
- The RSC also records and uses film, photographs and audio for promotional purposes on its website, social media accounts and other formats under a legitimate interests’ basis for processing where it would not be necessary, appropriate or practicable to obtain your specific consent (for example, we may seek specific consent for prominent or impactful uses, but typically not for group shots, background inclusion or internal use).
We may also process your personal data (including sensitive personal data) where:
- it is necessary for medical purposes (for example, in a medical emergency)
- it is necessary to protect your or another person’s vital interests
- we have your consent to do so (for example to monitor the diversity of our visitors to the RSC).
We will also ask for your consent to provide you with information about productions, offers, and other services which may be of interest to you (apart from where it is appropriate for us to rely on our legitimate interests to do so). Other activities relate to tours, events, exhibitions, education work, fundraising, Membership and Patrons schemes, as well as our shops, restaurants and cafés
Giving you control
- We try to make it as easy as possible for you to tell us how you want to hear from us (by logging onto our website and updating your preferences in the “MyRSC” section) or by telling our Box Office team over the phone or in person. You can opt out from these marketing communications at any time - every email sent to you will clearly tell you how to do this.
- If you have opted out of marketing communications, we may still get in touch with you. For example, we may email you to give you important information about the events you’ve booked or to tell you about any changes.
- Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
- We may analyse your personal information to create a profile of your interests and preferences so that we can contact you with information relevant to you. We may make use of additional information about you, including geo-demographic information and measures of affluence when it is available from external sources to help us do this effectively. This helps us understand the background of the people who support us and helps us to make appropriate requests for gifts to supporters who may be able and willing to give more than they already do. We may also use your personal information to detect and reduce fraud and credit risk. You can also register with the fundraising preference service – www.fundraisingregulator.org.uk/the-fundraising-preference-service/for-public/
- We use CCTV recording equipment in and around our premises for monitoring and security purposes. CCTV cameras operate on all public access points and in the ‘front of house’ public areas of the Royal Shakespeare Theatre, such as the foyers and bars. They do not operate in private areas such as toilets. We display signs to alert our visitors to the use of CCTV cameras and if you do not want to be photographed gives instructions on how you can make staff aware.
Sharing your personal information
We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.
We may also share your information with selected third parties including:
- Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you.
- Advertisers and advertising networks that require the data to select and serve relevant adverts to you and others. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, women in SW1). We may make use of the personal data we have collected from you to enable us to comply with our advertisers' wishes by displaying their advertisement to that target audience.
- Social media sites for the purposes of data analytics and targeted advertising.
- Analytics and search engine providers that assist us in the improvement and optimisation of our site.
- Credit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.
We may disclose your personal information to third parties:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If the Royal Shakespeare Company or substantially all of its assets are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
- Please note that Sensitive Personal Data will not be shared with third parties without your consent.
Where we store your personal data
- Your personal data will be securely held and processed on the RSC’s systems or systems managed by suppliers on behalf of the RSC. We maintain a customer relationship management (CRM) system to manage our activities in ticketing, marketing, relationship management of our customers and stakeholders, and fundraising to hold contact details and a record of your interactions with us such as ticket purchases, donations, memberships, queries, complaints and attendance at special events.
- We always seek to hold your data securely. Access to customer information is strictly controlled. The CRM system can only be accessed by people who need it to do their job. Certain data, for example sensitive information, is additionally controlled and is only made visible to members of staff who have a reason to work with it.
- Any payment transactions will be encrypted.
- Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How long do we keep your data?
- The retention period will vary according to the purpose, for example for a financial transaction such as a ticket purchase, we may keep your data for up to seven years from the date of your last transaction to comply with HMRC requirements.
- For information retained within our Collection, we adhere to the Museums’ standard Spectrum 5 guidelines as part of our accreditation status, this demands that we keep hard copies of paperwork which contains personal data. This includes acquisition, loans and movements paperwork and the personal data will include name, address, telephone number and email address of donors. There may be additional personal information such as letters or scrapbooks forming part of a donation. This information is also stored in our electronic database MODES, this is only accessible internally on a secure area of the RSC network by a limited number of Collections staff.
To request specific information about how long we keep your personal data please email email@example.com.
Under GDPR you have the following rights:
- To request access to the personal data we hold about you
- To request us to have inaccurate personal data we hold about you rectified, or completed if it is incomplete
- To ask us to erase your personal data (you may have heard of this as the right to be forgotten)
- To require us to restrict our processing of your information in certain circumstances
- To require us to provide data portability of your information, this allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without affecting its usability.
- To ask us to stop using your information, for example to stop sending you marketing emails. Every email we send to you has a clear unsubscribe button and you can opt out of emails by clicking this. You can also change your communication preferences at any time by logging into your MyRSC account on our website or by contacting firstname.lastname@example.org.
If you wish to exercise any of these legal rights in respect of the personal information we hold about you, please email email@example.com or write to us at: GDPR, The Royal Shakespeare Company, Waterside, Stratford upon Avon CV37 6BB. Your request should include your name, email address and postal address and we may request proof of your identity to ensure security of information sharing.