1. ABOUT US
1.1 We are a company registered in England and Wales under company number 05493237, with our registered address as set out below.
1.2 You can contact us as follows:
FAO: Data Team
Address: 11 Maiden Lane, London, WC2E 7NA, UK
2. INFORMATION WE MAY COLLECT ABOUT YOU
2.1 Information that you provide to us
2.1.1 We may collect and process any information that you provide to us when you:
- fill in forms on our website www.nimaxtheatres.com (“our Site”). This includes our email forms or when you request further services, information or theatre tickets from us;
- register for an account with us;
- book with or purchase theatre tickets and/or other products or services from us;
- apply for a job with us;
- subscribe to our mailing lists;
- report a problem with our Site;
- contact or otherwise correspond with us;
- enter one of our promotions;
- complete one of our surveys (which we may ask you to complete, although you do not have to respond to them).
2.1.2 The information you provide to us might include your name, address, email address, phone number and if you are creating an account you may also provide a password. If you are ordering theatre tickets you will also need to provide your card payment details but we will not permanently store your payment card details on our systems unless you choose to save your card details on your profile for future purchases in which case your card details will be stored in a tokenised way. If you are submitting a job application you may also provide your CV, additional information about your academic and work history, references, and any other such similar or related information as may be supplied.
2.2 Information that we collect about you
2.2.1 We may collect any information contained in any correspondence between us. For example, if you contact us using a form on our Site or by email or telephone, we may keep a record of that correspondence.
2.2.2 We may collect details of your visits to our Site, the resources that you access, and the device that you use to access our Site (including, but not limited to, traffic data, location data, weblogs and other communication data, your IP address, device information (such as your hardware model, mobile network information, unique device identifiers), browser type, referral source, length of visit to the website, number of page views, the search queries you make on the website and similar information. This information may be collected by a third party website analytics service provider on our behalf and/or may be collected using cookies, GIFs, and other web tools. For more information on this please read section 3 below.
2.3 Information that we receive from third parties
2.3.1 In certain circumstances, we will receive information about you from third parties. For example, if you are a job applicant we may contact your referees to provide information about you.
2.3.2 If you have indicated to a third party that you would like to receive our marketing emails and have provided your name and email address for this purpose, we will receive this data, add you to our marketing list and your data will be handled in accordance with this Policy and you will be able to unscubcribe at any time as set out in this Policy.
3. COOKIES, GIFS, AND OTHER WEB TOOLS
3.1.2 We do not store sensitive information such as account numbers or passwords in “persistent” cookies.
3.2 GIF AND OTHER WEB TOOLS.
3.2.1 In addition to using cookies, we might also use GIFs and other web tools to collect information about your browsing activities whilst on our Site. In this respect the information that is provided is similar to the information supplied by cookies, and we use it for the same purposes.
3.3 The names of the cookies, GIFs, and other web tools used on our Site.
3.3 Any information that we acquire about you using cookies, GIFs or other web tools is subject to the same restrictions and conditions as any other information we collect about you.
4. WHERE WE STORE YOUR PERSONAL DATA
4.1 Our company is located in the UK.
4.2 All information we collect about you is automatically transferred to our database and stored on our secure servers in the UK.
4.3.1 we supply your name and email address to a marketing campaign service provider in the USA via the EU-US Privacy Shield Framework when we are permitted to send you marketing emails.
4.4 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
5. HOW WE LOOK AFTER YOUR PERSONAL DATA AND HOW LONG WE KEEP IT FOR
5.1 We operate a policy of “privacy by design” by looking for opportunities to minimise the amount of personal information we hold about you and only to use your information in ways which are respectful of your rights. We use appropriate technological and operational security measures to protect your information against any unauthorised access or unlawful use, such as:
5.1.1 ensuring the physical security of our offices, theatres or other sites;
5.1.2 ensuring the physical and digital security of our equipment and devices by using appropriate password protection;
5.1.3 maintaining an internal data protection policy for, and delivering data protection training to, our employees; and
5.1.4 limiting access to your personal information to those in our company who need to use it in the course of their work.
5.2 We will retain your information for as long as is necessary to provide you with the services that you have requested from us or for as long as we reasonably require to retain the information for our lawful business purposes (such as for the purposes of exercising our legal rights), or for as long as the law otherwise permits.
5.3 We operate a data retention policy and look to find ways to reduce the amount of information we hold about you and the length of time that we need to keep it. For example:
5.3.1 we archive our email and paper correspondence regularly and destroy information older than 6 years unless we are required to retain it for evidential or legal purposes; and
5.3.2 we retain information relating to orders, refunds and customer queries for approximately 6 years unless we are required to retain it for evidential or legal purposes;
5.3.4 we maintain a suppression list of email addresses of individuals who no longer wish to be contacted by us. So that we can comply with their wishes, we must store this information permanently.
6. USES MADE OF THE INFORMATION
6.1 We will use your information for the purposes listed below either on the basis of:
6.1.1 performance of your contract with us and the provision of our services to you;
6.1.2 your consent (where we request it); or
6.1.3 our legitimate interests (see section 6.3 below).
6.2 We use your information for the following purposes:
6.2.1 to provide you with access to our Site in a manner convenient and optimal and with personalised content relevant to you including sharing your information with our website hosts and developers (on the basis of our legitimate interest to ensure that content from our Site is presented in the most effective manner);
6.2.2 to carry out our obligations arising from any communications between you and us, including the provision to you by mail (if so requested) of theatre tickets purchased by you (on the basis of your consent where we have requested it, or, alternatively, on the basis of performing our contract with you);
6.2.3 to provide customer service and support (on the basis of our contract with you), to notify you about changes to our service, deal with enquiries or complaints about our Site and share your information with our website developer, IT support provider, delivery service provider, payment services provider as necessary to provide customer support (on the basis of our legitimate interest in providing the correct products and services to our Site users and customers);
6.2.4 to provide you with information about our news, theatrical productions, events, special offers, new website features, or other services which may be of interest to you, provided that we have the requisite permission to do so (either on the basis of your consent where we have requested it, or, alternatively, our legitimate interests to provide you with marketing communications where we may lawfully do so), and provided that you have not asked us to not contact you;
6.2.5 to share your information with selected third parties, to enable them to contact you with information about things that may interest you (where we have your consent to do so), provided that you have not asked us not to share your data in this way;
6.2.6 to carry out, and share with third parties, aggregated and anonymised research and statistical analysis about general engagement with our Site (on the basis of our legitimate interest in providing the right kinds of products and services to our Site users and customers and to conduct marketing). We may, for example, perform statistical analyses of the behaviour of the users of our Site in order to measure interest in the various areas of our Site and to inform advertisers as to how many consumers have seen or “clicked” their advertising banners. This information, and any other general information about our users that we share with advertisers and other partners, will be always aggregated and anonymised;
6.2.7 to process any job applications you submit to us (on the basis of your consent where we have requested it, or, alternatively, our legitimate interests to consider job applications, or where we have a legal obligation to process certain information about our job applicants);
6.2.8 to protect, investigate, and deter against fraudulent, unauthorised, or illegal activity, including identity fraud (on the basis of our legitimate interests to operate a safe and lawful business, or where we otherwise have a legal obligation to do so); and
6.2.9 to enable us to comply with our policies and procedures and enforce our legal rights, or to protect the rights, property or safety of our employees, and share your information with our technical and legal advisors (on the basis of our legitimate interests to operate a safe and lawful business, or where we otherwise have a legal obligation to do so).
6.3 Where we refer to using your information on the basis of our “legitimate interests”, we mean our legitimate business interests in conducting and managing our business and our relationship with you, including the legitimate interest we have in:
6.3.1 personalising, enhancing, modifying or otherwise improving the services and/or communications that we provide to you, such as sending you marketing and serving you with advertising that is relevant and likely to be of interest to you;
6.3.2 detecting and preventing fraud and operating a safe and lawful business;
6.3.3 improving security and optimisation of our network, Site and services; and
6.3.4 confirming information that you provide to us in a CV or application, by reference to past employers and/or publicly available employment or business profiles.
6.4 Where we use your information for our legitimate interests, we make sure that we take into account any potential impact that such use may have on you. Our legitimate interests don’t automatically override yours and we won’t use your information if we believe your interests should override ours unless we have other grounds to do so (such as your consent, or a legal obligation we have). If you have any concerns about our processing please refer to details of “Your Rights” in section 8 below.
6.5 As we outline in section 8 below, you will have the right to object to our using your information for our legitimate interests. However, please keep in mind that your objection to this sort of processing may affect our ability to carry out the tasks that we have set out above.
7. DISCLOSURE OF YOUR INFORMATION
7.1 In connection with the purposes and on the lawful grounds described above and in addition to the recipients of your information as described above, we may disclose your personal information to:
7.1.1 third parties we work with to prepare or send any communications to you, or to assist us in connection with any of our administrative or business functions, or in the provision of any of our products or our services to you (including for example, hosting or operating the website and our databases and site analytics);
7.1.2 any selected third party that you consent to our sharing your information with for marketing purposes;
7.1.3 in the event that we sell or buy any business or assets, to any prospective seller or buyer of such business or assets;
7.1.4 if Nimax Theatres Limited, or substantially all of its assets, is acquired by a third party, to that third party;
7.1.5 other third parties (including legal or other advisors, regulatory authorities, courts and government agencies) if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or if necessary to enable us to enforce or apply our “Terms and Conditions”, our “Ticketing Terms and Conditions” and other agreements; or to protect the rights, property, or safety of Nimax Theatres Limited, our subsidiaries, affiliates, employees or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
7.2 Where we do share your information with third parties, we will require such third parties to maintain appropriate security to protect your information from unauthorised access or processing, unless we have no ability to do so (for example, where we are sharing information with regulatory authorities or courts).
8. SALE AND SUPPLY
8.1 We shall comply with the following restrictions in relation to your personal information:
8.1.1 we shall not sell your personal information to anyone else; and
8.1.2 subject to the exceptions in sections 5 and 6 above, we shall not supply your personal data to anyone else so that they can use it for their own purposes.
9. YOUR RIGHTS
9.1 Overview of your rights
9.1.1 You have certain rights in respect of the information that we hold about you, including:
- the right to ask us not to process your personal data for marketing purposes;
- the right to request access to the information that we hold about you;
- the right to request that we correct or rectify any information that we hold about you which is out of date or incorrect; and
- in certain circumstances, the right to ask us to stop processing information about you.
9.1.2 Please note that, notwithstanding these rights, we reserve the right to retain certain information for our own record-keeping and to defend ourselves against any claims. We may also need to send you service-related communications relating to your Site user account even when you have requested not to receive marketing communications.
9.2 Your future rights
9.2.1 You have certain additional rights in respect of the information that we hold about you, including:
- the right to lodge a complaint about us to the UK Information Commissioner’s Office (https://ico.org.uk/) or the relevant authority in your country of work or residence;
- the right to object to our using your information on the basis of our legitimate interests (refer to section 5 above to see when we are relying on our legitimate interests);
- the right to receive a copy of any information we hold about you in connection with the performance of our contract with you or on the basis of your consent (or request that we transfer this to another service provider) in a structured, commonly-used, machine readable format; and
- the right to ask us to limit or cease processing or erase information we hold about you in certain circumstances.
9.3 How to exercise your rights?
9.3.2 Alternatively, if you would prefer not to contact us in this way, depending on the nature of your request, you may be able to do it yourself. For example:
- You may update the details we hold about you by logging into your account via the “Account” icon on our Site (https://ticketing.nimaxtheatres.com/account/login) and editing your details in the Account Information section.
- If you wish to remove yourself from our marketing circulation lists so that you do not receive our marketing emails, you may unsubscribe by scrolling to the bottom of an email received from us and clicking the ‘unsubscribe’ button or by updating your marketing preferences in the Account Information section which is accessed as set out in Clause 9.3.2a) above.
- If you have purchased tickets for Harry Potter and the Cursed Child via our Site you can access your account via this link: https://harrypottertheplay.nimaxtheatres.com/hpcc/WebPages/EntaWebLogon/LogonEmail.aspx Once logged into your account you will be able to edit your details and you will be able to update your marketing preferences for receiving emails from us and for receiving emails from Harry Potter and the Cursed Child, London.
9.3.3 We will comply with your requests unless we have a lawful reason not to do so.
10. ACCESS TO INFORMATION
10.1 As outlined above, you have the right to access information held about you. Any access request may be subject to a fee of to meet our costs in providing you with details of the information we hold about you.
10.2 You may submit a request to access information we hold about you in any form, for example, by sending us an email to firstname.lastname@example.org. However, to help us better respond to your request and locate the relevant information, we encourage you to use our Data Subject Access Request Form.