Privacy Policy

Last updated: 14 July 2026

1. Who we are

This website is operated by The Attic Theatre (Stratford-upon-Avon) Limited, trading as The Attic Theatre.

Company number: 11547687

Our registered office is:

The Attic Theatre (Stratford-upon-Avon) Limited
2 Highlands Court
Cranmore Avenue
Solihull
West Midlands
B90 4LE
United Kingdom

Our theatre address is:

The Attic Theatre
Cox’s Yard
Stratford-upon-Avon
Warwickshire
CV37 6YY
United Kingdom

Our website address is:

https://theattictheatre.co.uk

The Attic Theatre is the home of Tread the Boards Theatre Company. This policy also covers personal information submitted through this website or through the theatre’s published Tread the Boards contact addresses.

For questions about this policy or how we use your personal information, contact:

Email: boxoffice@theattictheatre.co.uk
Telephone: 01789 628768

For the purposes of UK data protection law, The Attic Theatre (Stratford-upon-Avon) Limited is the data controller for personal information collected directly through this website and our theatre services, unless we tell you otherwise.

2. What this policy covers

This privacy policy explains how we collect, use, store and protect your personal information when you:

• Visit our website

• Contact the theatre

• Book tickets

• Subscribe to our newsletter

• Create or use an authorised website account

• Enquire about venue hire

• Apply for an audition

• Submit a headshot, CV or covering message

• Apply for paid, freelance or voluntary work

• Participate in a performance, workshop or theatre activity

• Tell us about accessibility requirements

• Make a donation through a third-party platform

• Interact with our social media accounts

• Attend one of our performances or events

It also explains your data protection rights and how to contact us if you have a concern.

3. Personal information we collect

The information we collect depends on how you interact with us.

Contact information

This may include:

• Your name

• Email address

• Telephone number

• Postal address or postcode

• Your organisation or company

• Your preferred method of contact

Enquiry information

When you contact us, we may collect:

• The content of your message

• The reason for your enquiry

• Information about an event or performance

• Venue hire requirements

• Workshop or participation interests

• Records of correspondence between you and our team

Ticketing information

When you book a ticket, the relevant ticketing provider may collect:

• Your name

• Email address

• Telephone number

• Billing address

• Ticket choices

• Seating information

• Accessibility requirements

• Transaction details

• Marketing preferences

Most of our ticket sales are currently processed through TicketSource.

Some visiting productions or special events may use another ticketing provider. You will be directed to the relevant provider before completing your booking.

TicketSource and other ticketing providers may collect and process your information under their own privacy policies. They may also provide us with the information needed to administer your booking, manage an event, contact you about a performance or support your visit.

Payment card information is normally collected and processed directly by the ticketing or payment provider. We do not usually receive or store your complete payment card details.

Newsletter information

When you subscribe to our newsletter, we may collect:

• Your first name

• Your last name

• Your email address

• Your subscription date

• Your marketing preferences

• Information about how you interact with our emails

We currently use Mailchimp to manage our mailing list and send email communications.

Casting and audition information

If you contact us about a casting opportunity or audition, we may collect:

• Your name

• Contact details

• Headshot

• CV

• Performance experience

• Training history

• Professional profile

• Agent or representative details

• Roles you are interested in

• Rehearsal and performance availability

• Information included in your covering message

• Audition notes and casting decisions

Please only provide information that is relevant to your application.

Employment, freelance and volunteering information

When you enquire about paid work, technical work, freelance opportunities or volunteering, we may collect:

• Your name and contact details

• Your CV

• Employment and education history

• Relevant skills and experience

• Availability

• References

• Areas of interest

• Records of conversations or interviews

• Information needed to manage your role

For certain roles, we may also need to verify your identity, right to work, qualifications or suitability.

Performer, crew and production information

When you join a production, workshop or theatre activity, we may collect information needed to organise and deliver it.

This may include:

• Contact details

• Emergency contact information

• Rehearsal availability

• Contract and payment information

• Costume measurements

• Photographs and recordings

• Performance credits

• Travel or accommodation information

• Accessibility requirements

• Health and safety information

Accessibility and health information

You may choose to tell us about:

• Wheelchair access requirements

• Mobility needs

• Hearing or visual requirements

• Assistance dogs

• Essential companions

• Allergies

• Medical conditions

• Other adjustments needed for your visit or participation

Some of this may be health information, which receives additional protection under data protection law.

We will only use this information to:

• Make suitable arrangements for your visit

• Support your participation

• Protect your health and safety

• Meet our legal and accessibility obligations

We will only share it with people who need the information to assist you.

Website account information

Some authorised users may have access to password-protected or backstage areas of the website.

We may collect:

• Your username

• Email address

• Password reset information

• Login dates and times

• IP address

• Security and account activity

• Information stored within your user profile

Passwords are stored in an encrypted or protected format. We cannot normally view your password.

Technical and website information

When you visit our website, we may collect:

• Your IP address

• Browser and device type

• Operating system

• Approximate location

• Pages visited

• Links and buttons selected

• Referring website

• Date and time of visits

• Cookie identifiers

• Website errors

• Website performance information

• Interactions with forms, menus and website features

Some of this information is collected through cookies and similar technologies.

Photographs, recordings and social media

We may take photographs or recordings during performances, workshops, rehearsals or public events.

We may use these for:

• Performance archives

• Publicity

• Social media

• Press coverage

• Funding or sponsorship materials

• Theatre promotion

• Internal training

Where appropriate, we will provide advance information or obtain permission.

Audience members should not normally be the main subject of promotional photography without suitable notice or permission.

4. How we collect your information

We may collect information:

• Directly from you

• Through website forms

• Through email or telephone enquiries

• Through TicketSource or another ticketing provider

• Through Mailchimp

• Through casting, employment or volunteering applications

• Through authorised website accounts

• Through cookies and analytics tools

• Through social media platforms

• From event organisers, promoters or visiting companies

• From your agent or representative

• During your attendance or participation at the theatre

5. How we use your information

We may use personal information to:

• Process and administer ticket bookings

• Contact you about a booked performance

• Tell you about cancellations, changes or access issues

• Respond to questions and enquiries

• Manage venue hire requests

• Send newsletters and theatre updates

• Manage casting and audition applications

• Recruit employees, freelancers and volunteers

• Organise rehearsals, productions and workshops

• Manage contracts, payments and production records

• Provide accessibility support

• Protect the health and safety of visitors and participants

• Manage authorised website accounts

• Maintain the security of our website

• Prevent fraud, misuse and security incidents

• Improve our website and services

• Understand how visitors use our website

• Measure the effectiveness of our communications

• Promote our performances and theatre activities

• Keep appropriate financial and administrative records

• Meet our legal and regulatory obligations

• Establish, exercise or defend legal claims

We do not sell or rent your personal information.

6. Our lawful bases

Data protection law requires us to have a lawful reason for using your personal information.

The lawful basis will depend on why we need the information.

Contract

We may process information where it is necessary to:

• Administer your ticket booking

• Provide a performance, workshop or service

• Manage a venue hire agreement

• Enter into or manage an employment or freelance contract

• Take steps at your request before entering into an agreement

Consent

We may rely on your consent when:

• You subscribe to our newsletter

• You accept optional analytics or marketing cookies

• You agree to appear in certain photographs or recordings

• You provide certain health or accessibility information

• You agree that we may retain your casting information for future roles

You can withdraw your consent at any time.

Withdrawing consent will not affect anything we lawfully did before you withdrew it.

Legitimate interests

We may use information where it supports our legitimate business interests and does not unfairly affect your rights.

These interests may include:

• Responding to enquiries

• Operating and promoting the theatre

• Managing relationships with audiences, performers and volunteers

• Administering performances and events

• Maintaining suitable production and casting records

• Protecting our website and systems

• Preventing fraud and misuse

• Understanding the performance of our website

• Improving our services

• Maintaining appropriate administrative records

Where we rely on legitimate interests, we consider why the processing is needed and its possible effect on you.

Legal obligations

We may process information where necessary to comply with:

• Tax and accounting requirements

• Employment law

• Health and safety requirements

• Accessibility requirements

• Safeguarding responsibilities

• Court orders

• Requests from regulators or law enforcement authorities

Special category information

Where we process health information or other special category information, we will identify an additional legal condition.

This may include your explicit consent or processing needed to meet employment, accessibility, health and safety or legal obligations.

7. TicketSource and other ticket providers

Most of our ticket bookings are currently processed through TicketSource.

When you book through TicketSource:

• You provide your information through the TicketSource platform

• TicketSource processes your payment

• TicketSource sends booking confirmations

• TicketSource may provide us with information needed to manage your booking

• TicketSource’s own privacy policy and purchasing terms also apply

We may use booking information received from TicketSource to:

• Confirm and administer your booking

• Manage seating and attendance

• Contact you about changes to a performance

• Provide requested accessibility support

• Resolve booking issues

• Meet financial and legal obligations

• Send marketing where you have provided valid consent

Some performances may use another ticketing provider.

When another provider is used, its identity should be shown before you complete your booking. Its privacy policy and terms will also apply.

8. Email newsletters and marketing

You can subscribe to receive information about:

• Upcoming performances

• Theatre news

• Ticket releases

• Offers and promotions

• Auditions and participation opportunities

• Workshops

• Volunteering opportunities

• Fundraising and support campaigns

We generally send email marketing where you have asked to receive it.

We currently use Mailchimp to store newsletter subscription information and send our emails.

Marketing emails may contain technology that tells us whether an email was:

• Delivered

• Opened

• Selected

• Forwarded

• Marked as undeliverable

We use this information to understand which communications are useful and improve future emails.

You can unsubscribe at any time by:

• Selecting the unsubscribe link in an email

• Updating your preferences where available

• Emailing boxoffice@theattictheatre.co.uk

We may retain a limited suppression record after you unsubscribe. This helps us make sure you are not accidentally added back to the mailing list.

Unsubscribing from marketing will not stop essential messages about a booking, performance, application or enquiry.

9. Cookies and similar technologies

Cookies are small files stored on your device when you visit a website.

We may use cookies and similar technologies for:

• Essential website functions

• Website security

• Authorised user logins

• Remembering your preferences

• Website performance

• Analytics

• Embedded content

• Marketing and campaign measurement

• Understanding how visitors interact with the website

Strictly necessary cookies may be used without consent because the website cannot operate correctly without them.

Where consent is required, analytics, marketing and other non-essential tracking technologies will only be activated after you have made your choice through our cookie settings.

You can accept, reject or manage optional cookies through the cookie banner or consent settings available on the website.

You can also control cookies through your browser settings. Blocking some cookies may affect how parts of the website work.

10. Google Analytics

We use Google Analytics to understand how visitors use our website.

Google Analytics may collect information such as:

• Pages visited

• Time spent on the website

• Links and buttons selected

• Browser information

• Device information

• Approximate geographical location

• How you arrived at the website

• Website performance

• Error information

We use this information to:

• Measure website traffic

• Identify popular content

• Find navigation and usability problems

• Improve our website

• Understand the effectiveness of campaigns

• Improve how visitors find information and book tickets

Google Analytics will be controlled through our cookie consent system where consent is required.

We do not use Google Analytics information to identify you directly.

11. Future analytics and usability tools

We may introduce additional tools to help us understand and improve the website.

These may include:

• Heatmaps

• Anonymous interaction recordings

• User journey analysis

• Website testing tools

• Feedback and survey tools

• Conversion tracking

• Advertising measurement

• Accessibility monitoring

• Website performance monitoring

Before introducing a new tool, we will consider its privacy impact.

Where required, we will:

• Update this privacy policy

• Add the tool to our cookie preferences

• Explain what information it collects

• Obtain consent before activating it

• Provide a way to reject or disable it

We will not deliberately use session-recording or usability tools to collect passwords, payment card information or information entered into sensitive form fields.

12. Casting, recruitment and volunteering

Information submitted for an audition, job, freelance opportunity or voluntary role will only be used for relevant recruitment, casting, production and administration purposes.

We may share appropriate information with:

• Directors

• Producers

• Stage managers

• Production managers

• Relevant theatre staff

• Visiting production companies

• Professional advisers

• Providers carrying out lawful employment or eligibility checks

We will not publish your CV, contact details or application information without an appropriate reason or your permission.

Headshots and professional profile information may be shared internally with the people making casting or production decisions.

When you are cast in a production, we may publish your:

• Name

• Role

• Headshot

• Biography

• Professional credits

• Social media or agency links

We will discuss this with you as part of the production process.

13. Donations and fundraising platforms

The website may link to external fundraising services, including GoFundMe.

When you make a donation through an external platform:

• You provide your information directly to that provider

• The provider processes your payment

• The provider’s own privacy policy and terms apply

• The provider may share limited information with us about your donation

We may use information received from a fundraising provider to:

• Record and administer the donation

• Thank you for your support

• Respond to questions

• Meet accounting and legal requirements

• Contact you where you have agreed to receive communications

We do not normally receive your complete payment card information.

14. Embedded content and external websites

Our website may include content or links provided by other organisations, including:

• Ticketing platforms

• Videos

• Maps

• Social media posts

• Event widgets

• Reviews

• Donation platforms

• Images

• Forms

• External booking services

Embedded content may behave as though you visited the provider’s own website.

The provider may:

• Collect technical information

• Use cookies

• Monitor your interaction

• Record whether you have an account with its service

• Combine the information with information it already holds

Optional embedded services will be controlled through our cookie consent system where required.

We are not responsible for how another organisation uses your information after you leave our website.

15. Who we share information with

We may share personal information with trusted organisations and people who help us operate the theatre.

These may include:

• TicketSource

• Other ticketing providers used for particular events

• Mailchimp

• Payment processors

• Website hosting and maintenance providers

• IT and cybersecurity providers

• Analytics and cookie-management providers

• Directors and production teams

• Visiting companies and event organisers

• Venues and performance partners

• Freelancers and contractors

• Accountants

• Insurers

• Legal advisers

• Employment and payroll providers

• Regulators and public authorities

• Law enforcement agencies where legally required

Where another organisation processes information on our behalf, we require it to protect the information and only use it for the agreed purpose.

We will not give your details to an unrelated organisation for its own marketing unless you have specifically agreed.

16. International data transfers

Some service providers may store or process information outside the United Kingdom.

These may include Mailchimp, Google, social media platforms and their supporting service providers.

Where personal information is transferred outside the UK, we take steps designed to keep it protected.

These may include:

• Transferring information to a country recognised as providing adequate protection

• Using approved contractual protections

• Using the UK International Data Transfer Agreement

• Using an approved UK Addendum

• Reviewing the provider’s privacy and security arrangements

You can contact us for more information about the safeguards used for a particular service.

17. How long we keep information

We only retain personal information for as long as it is needed.

Our usual retention periods are set out below.

General enquiries

We normally retain general enquiries for up to 24 months after our last meaningful contact.

We may retain information for longer where an enquiry leads to a booking, agreement, complaint, incident or legal matter.

Ticket bookings and financial records

Booking and financial records may be retained for up to six years after the relevant transaction.

TicketSource and other providers may apply their own retention periods to information held within their systems.

Newsletter information

We retain your information while you remain subscribed.

When you unsubscribe, we may retain a minimal suppression record to make sure your preference is respected.

Casting and audition applications

Unsuccessful casting applications will normally be retained for up to 12 months after the relevant production has been cast.

We may retain information for longer where:

• You agree that we may consider you for future roles

• You regularly work with the theatre

• The information forms part of a production or contractual record

Employment and freelance applications

Information relating to unsuccessful applications will normally be retained for up to six months after the recruitment process ends.

With your consent, we may retain it for up to 12 months to contact you about another opportunity.

Information relating to successful applicants will become part of their employment or engagement record.

Volunteer information

Volunteer information may be retained for the duration of your involvement and for an appropriate period afterwards.

This may be necessary for administration, insurance, safeguarding or legal purposes.

Performer and production information

Contractual, payment and production records may be retained for up to six years.

Historical programmes, cast lists, production photographs, recordings and performance archives may be retained for longer where they form part of the theatre’s legitimate historical archive.

Accessibility information

We normally retain accessibility information only for as long as needed to support your booking, visit or participation.

We may retain it for future visits where you ask us to remember your requirements.

Website and security information

Website security logs may normally be retained for up to 12 months.

Information connected with a suspected security incident, fraud or legal claim may be retained for longer while the matter is investigated.

Analytics information

Analytics information is retained according to the settings used within the relevant analytics service.

We regularly review these settings and aim to minimise how long potentially identifiable information is retained.

We may retain anonymised or aggregated statistical information for longer because it no longer identifies you.

18. How we protect your information

We use appropriate technical and organisational measures to protect personal information.

These may include:

• Access controls

• Password protection

• Secure website hosting

• Encryption

• Software updates

• Backups

• Staff access restrictions

• Security monitoring

• Contracts with service providers

• Staff and volunteer procedures

Only people who need access to personal information for their role should be able to access it.

19. Children and young people

Some performances, workshops, auditions and theatre activities may involve children and young people.

Children should not submit personal information through the website without the involvement of a parent, guardian or responsible adult where appropriate.

Where we collect information about a child for a performance, workshop, audition or other activity, we will:

• Explain why the information is needed

• Limit the information collected

• Obtain parental or guardian permission where required

• Use the information for relevant administration and safeguarding

• Restrict access to people who need it

• Retain it only for an appropriate period

Additional consent may be requested before publishing identifiable photographs, recordings or profile information about a child.

20. Your data protection rights

Depending on the circumstances, you may have the right to:

• Ask for a copy of the personal information we hold about you

• Ask us to correct inaccurate or incomplete information

• Ask us to delete your information

• Ask us to restrict how we use your information

• Object to certain uses of your information

• Receive information you provided in a portable format

• Withdraw your consent

• Object to direct marketing at any time

• Complain to the Information Commissioner’s Office

Some rights only apply in particular circumstances.

We may need to ask for information to confirm your identity before responding to a request.

To exercise your rights, contact:

boxoffice@theattictheatre.co.uk

21. Automated decision-making

We do not currently use personal information to make decisions about you that are based solely on automated processing and produce legal or similarly significant effects.

If this changes, we will update this policy and provide the information required by law.

22. Complaints and concerns

Please contact us first if you have a question or concern about how we use your information.

Email:

boxoffice@theattictheatre.co.uk

Telephone:

01789 628768

Post:

The Attic Theatre
Cox’s Yard
Stratford-upon-Avon
Warwickshire
CV37 6YY
United Kingdom

You also have the right to complain to the Information Commissioner’s Office, the UK regulator responsible for data protection.

23. Changes to this policy

We may update this privacy policy when:

• Our services change

• We introduce new website tools

• We change ticketing or service providers

• We introduce new forms or account features

• Data protection requirements change

• We identify a need to provide clearer information

The latest version will always be published on this page.

Where a change could significantly affect how we use your information, we will take reasonable steps to bring it to your attention.