PRIVACY POLICY

We are committed to protecting your personal information and being transparent about what information we hold about you.

The Company, we and us means Macrobert Arts Centre.

1. Our Commitment to Privacy

This privacy policy is designed to give you a clear explanation about how we both collect and use your data, and the options you have with regards to how we handle it. To make this notice easy to find, we make it available on our homepage and at every point where personally identifiable information may be requested. We will put in place legal and appropriate safeguards in our procedures and in the technology we use, to keep your personal information secure. We will contract any third parties we use for processing your personal information do the same. We will not transfer, process or store your data anywhere out with our computerised systems without giving all our customers notice of this.

2. The Information We Collect

This notice applies to all information collected or submitted on The Company’s website. This information may include, but is not limited to:
- Name
- Email address
- Date of birth
- Gender
- IP Address
- Browser and device Information
- Viewer metrics
- Purchase and payment details

3. The Way We Use Information

We use the information you provide about yourself when joining Macrobert Arts Centre to complete your Profile. We do not share this information with outside parties except to the extent required by law or necessary to the running of this site. Your email, name and credit card details are not shown publicly.
We use return email addresses to answer the email we receive. Such addresses are not used for any other purpose and are not shared with outside parties.
We use non-identifying and aggregate information to better design our website and to share with advertisers. For example, we may tell an advertiser that X number of individuals visited a certain area on our website, or that Y number of men and Z number of women filled out our registration form, but we would not disclose anything that could be used to identify those individuals.
Finally, we never use or share the personally identifiable information provided to us online in ways unrelated to the ones described above without also providing you an opportunity to opt-out or otherwise prohibit such unrelated uses.

We may analyse data that we hold about you to tailor the content and timing of the communications that we send, so that they are as relevant as possible. We may analyse data we hold about you in order to identify and prevent fraud. To improve our website we may analyse information about how you use it and the content that you interact with. We may use profiling techniques or third party insight companies to provide us with information that will help us to communicate in a relevant way with you, in particular if we are approaching you about potential philanthropic support. In our processes, through the use of your personal information we will always keep your interests at the forefront so that your fundamental rights and freedoms are not overridden. You have the right to withdraw your personal information from any or all of these processes at any time. To do this please use the contact details at the end of this policy or adjust the preferences in your account. Please bear in mind that limiting our use of your data will affect the number and efficacy of the services that we are able to provide you with.

4. Our Commitment to Data Security

To prevent unauthorised access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

For as long as you are a customer we will store your personal information within our computerised systems e.g. our ticketing software, in a way that for any future purchases you make we are able to link them back to a single unique record that we hold for you on our systems. On a regular basis we will invite you to provide updates to your personal information, either at the time of making a purchase from us or at your next interaction with us. If there are aspects of your record that are inaccurate or that you would like to remove, you can do this by logging in to your account through our website. Alternatively please use the contact details at the end of this policy. Any preferences you express for the processing of your data will be stored as part of your record on our systems so that we can comply with your requests.

5. Our Commitment to Children’s Privacy

Protecting the privacy of the very young is especially important. For that reason, we never collect or maintain information at our website from those we actually know are under 13, and no part of our website is structured to attract anyone under 13.

6. How You Can Access and Correct Your Information

You can access all your personally identifiable information that we collect online and maintain by visiting your Account Settings page. We use this procedure to better safeguard your information.
You can correct factual errors in your personally identifiable information by sending us a request that credibly shows error.
To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections.

In order for our platform to send emails using your preferred support email addresses, some information needs to be added to your DNS records for the email address you want to use. We use a tool called Mandrill to send emails and to verify that we are allowed to do this.

7. The Video Privacy Protection Act of 1988

The Company adheres to The Video Privacy Protection Act of 1988.

8. How to Cancel Your Account

Contact us if you wish to have our account permanently deleted.

9. How to Contact Us

Should you have other questions or concerns about these privacy policies, send us an email. Contact information can be found on Macrobert Arts Centre’s About Us page.

10. Use of Third Party Services

10.1 Google Analytics

We use Google Analytics to help us to understand how you use our site and tools, which allows us to know how to improve our products for your benefit. It follows your progress through the website, collecting anonymous data on where you have come from, which pages you visit, and how long you spend on the site. Google then stores this data in order to create reports. But don’t worry; they do not store your personal data. Google will track your IP address, and it may be transmitted to and stored by Google on servers in the United States. Google may use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us, and providing other services relating to website activity and Internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. For more information on Google’s privacy policies, please visit https://policies.google.com/privacy. Google Analytics services are governed by the Google Analytics Terms of Service which can be found at: https://marketingplatform.google.com/about/analytics/terms/us/.

10.2 Intercom

We use third-party analytics services to help understand your usage of our services. In particular, we provide a limited amount of your information (such as sign-up date and some personal information like your email address) to Intercom, Inc. (“Intercom”) and utilise Intercom to collect data for analytics purposes when you visit our website or use our product. As a data processor acting on our behalf, Intercom analyses your use of our website and/or product and tracks our relationship by way of cookies and similar technologies so that we can improve our service to you. For more information on Intercom’s use of cookies, please visit https://www.intercom.com/terms-and-policies#cookie-policy. We may also use Intercom as a medium for communications, either through email, or through messages within our product(s). For more information on the privacy practices of Intercom, please visit https://www.intercom.com/terms-and-policies#privacy. Intercom’s services are governed by Intercom’s terms of use which can be found at https://www.intercom.com/terms-and-policies#terms.

10.3 Mandrill

We use Mandrill to send transactional emails, such as a welcome email, purchase receipt, or forgot password email. We provide a limited amount of your information, such as your email address, to The Rocket Science Group LLC, who operate Mailchimp and Mandrill. We utilise Mandrill to collect data for analytics purposes when you view the email. For more information on the privacy practices of Mandrill, please visit https://mailchimp.com/legal/privacy/. Mandrill’s services are governed by Mailchimp’s terms of use which can be found at https://mailchimp.com/legal/terms/.

10.4 Amazon Web Services

We use Amazon Web Services (AWS) who provide us with cloud storage solution. AWS has demonstrated compliance with a range of internationally recognised standards for content, data and infrastructure security, such as information security management system- ISO-27001, System and Organization Controls Report- SOC1/2, and The Payment Card Industry Data Security Standard; in addition, AWS has demonstrated alignment with the MPAA Content Security Best Practices and the AWS infrastructure is compliant with all applicable MPAA controls. For more information on AWS’ privacy policy please see: https://aws.amazon.com/privacy/

10.5 Stripe

We use a third party payment processor, Stripe, to process payments made to us. In connection with the processing of such payments, we do not retain any personally identifiable information or any financial information such as credit card numbers. Rather, all such information is provided directly to our third party processor, Stripe, whose use of your personal information is governed by their privacy policy, which may be viewed at https://stripe.com/nz/privacy. Stripe is certified to PCI Service Provider Level 1, the most stringent level of certification.

11. Contact Details and Further Information

Please get in touch with us if; you have any questions about any aspect of this Privacy Policy; if you would like to change your preferences; or if you would like to object to any of the processing of your personal information that we carry out within our legitimate organisational interests.

Macrobert Arts Centre
University of Stirling
Stirling
FK9 4LA
boxoffice@macrobertartscentre.org