Brunton Theatre Trust – Privacy Statement

Brunton Theatre Trust (BTT) provides the events, performances and activities that take place at The Brunton.

Our contact details

Your / your child’s personal information is being collected by: Brunton Theatre Trust The Brunton, Ladywell Way Musselburgh EH21 6AA 0131 665 9900  

BTT takes your privacy very seriously, and we ensure we comply with data protection legislation at all times when processing your personal information. We are the data controller of any personal data that you provide to us.

This privacy notice aims to give you information on how BTT collect and processes your personal data, including any data you may provide to us from time to time.  

If you have any requests concerning your personal information or any queries with regard to our practices, please contact .

How we collect information from you and what information we collect

We collect information that is provided by you digitally, verbally and in written form when you: (i) buy tickets or book for our events or workshops; (ii) complete forms on our website or in person; (iii) make donations; (iv) register to be kept up to date with our events or provide your personal information in any other form.

We may collect, use, store and transfer the following personal information about you:

  • Name
  • Postal address
  • Telephone number(s)
  • Email address
  • Ticketing history
  • Billing/payment information (we keep the last four digits of a card number to help us
  • identify transactions)
  • Donation history
  • Communications preferences
  • Identity Data: includes first name, last name, username or similar identifier, date of birth and gender;
  • Contact Data: includes billing address, delivery address, email address and telephone numbers;
  • Financial Data: includes bank account and payment card detail;
  • Transaction Data: includes details about payments to and from you and other details of products, tickets and services you have purchased from us;
  • Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website;
  • Profile Data: includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses;
  • Usage Data: includes information about how you use our website, products and services and your attendance at shows and events.
  • Marketing and Communications Data: includes your preferences in receiving marketing from us and our third parties and your communication preference. Qualitative opinions or attitudes about our services and programme through surveys
  • Other data: Access requirements (for you or your party), any other information you provide to us by email, letter, telephone, social media, via our websites or apps, or in person. CCTV security recordings, and possible photography or video at performances/events. Information that is publicly available.

Why we need this information about you

We will only use your personal data when the law allows us to. We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data.

Most commonly, we will use your personal data in the following circumstances:

  • Where we need to perform the contract we are about to enter into or have entered into with you.
  • Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where we need to comply with a legal or regulatory obligation.
  • To contact you if there is any important change to your booking or visit.
  • To process a transaction and carry out completion of a purchase (your personal information and card details may be passed to third party service providers; card details will only be used in this way for the purpose of handling an individual transaction).
  • Where you have given consent, to inform you about relevant events, services or activities we believe will be of interest, as well as opportunities to support our work as Charitable Trust.
  • To enable us to supply you with the services and information which you have requested.
  • To administer any donations you may make, including processing Gift Aid.
  • To ensure that the information we already hold is accurate and up to date.
  • To improve our products, services and information in the future.
  • To send you surveys for market research purposes, to assist us with reporting and analysis for our own needs or the needs of any funding partners.
  • To help us understand more about how our website and services are used.
  • To promote the theatre and its activities (eg. imagery, quotes from social media etc.)
  • From time to time, to make recommendations to you about other relevant cultural activities by approved partner organisations. These organisations would not be in possession of your data, and the recommendations would be an add on to The Brunton’s own information, for example, by way of a PS. or a ticket offer on an email update, or within a newsletter sent by The Brunton.
  • To share with approved suppliers (for instance for research and direct mail)
  • To protect against fraud or unlawful activity.
  • To ensure compliance with policies, procedures and laws.
  • For all other purposes consistent with the proper performance of our operations.

We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal information for an unrelated purpose, we will explain the legal basis which allows us to do so.


It is your choice whether you receive information such as marketing from us.  If you indicated that you are interested in receiving regular information about The Brunton’s activities, we will send you communications either electronically or by post. In addition, we may send you direct mail that we feel may be of interest to you.  We will not contact you for marketing purposes unless you have given your prior consent. If, at any time, you no longer wish to receive this information, please send a written request to .

Also, all of our email marketing correspondence gives you the option to opt out of receiving further marketing emails. Please note that you will still receive emails directly related to an enquiry you have submitted to us.

Sharing your data with third parties: We will only share data with third party providers on the legal bases as listed below:

For fulfilment of contract: services such as our ticketing system, email service and mailing houses. We have agreements in place with each provider to ensure your data is secure and cannot be accessed or used for any other purpose. Your personal data is never sold to any agencies or companies.

Legitimate business interests: we may make data available to approved suppliers for analysis and research purposes only, for example identifying sales trends, assessing campaign effectiveness, or postcode mapping etc. This assists us with reporting and with our strategic planning, helping us apply our resources more intelligently. All such agencies will be carefully checked and have a separate data sharing agreement with us including non-disclosure agreements, and their Privacy Policies will have to be at least as secure as our own.

Sharing data outside the EU: We are located in the UK. Some our suppliers run operations outside the European Economic Area (EEA). Although they may not be subject to the same data protection laws as in the UK, we take steps to make sure they provide an adequate level of protection in accordance with UK law. By submitting your personal information to us you acknowledge that you understand that your personal information may be transferred, and processed, outside the EEA. Where we use providers based in the US, we may transfer data to them if they are part of the EU-US Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.

How long we keep your information

We review our data retention periods regularly and will only hold your personal data for as long as is necessary for the relevant activity, or as required by law (we may be legally required to hold some types of information), or as set out in any relevant contract we have with you.

We will generally keep your information as long as is necessary to fulfil our obligations to you after which this will be destroyed if it is no longer required for the reasons it was obtained.

Your rights

  • You have the right to be informed about how your information will be used.
  • You have the right to access your personal information.
  • You have the right to ask us to correct inaccurate or incomplete information.
  • In certain circumstances, you have the right to have your personal information erased.
  • In certain circumstances, you have the right to ask us to limit the ways we use or share your information.
  • In certain circumstances, you have the right to ask us to move, copy or transfer your information to another organisation in an electronic format.
  • In certain circumstances, you have the right to object to the ways we process your information.
  • In circumstances where your data is processed automatically, without human intervention, you have the right to certain protections.

You can find more information about data protection and your rights on the Information Commissioner’s Office (ICO) website at  

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.  In addition, we limit access to your data to those employees, agents, contractors and third parties who have a business need to know.  They will only process your personal data on our instructions and they are subject to a duty of confidentiality. 


Our website may contain links to external websites managed and maintained by external companies. We are not responsible content or privacy practices within these sites.

Changes to our Privacy Policy

Any changes we make to our website privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.


We take your privacy seriously, and would like to know about your concerns so that we can address them as soon as possible. If you wish to make a complaint, we recommend that you contact Brunton Theatre Trust using the contact details at the start of this Privacy Notice.

If we are unable to resolve the issue to your satisfaction, you have the right to complain to the Information Commissioner’s Office (ICO). You can find further information about raising a concern with the ICO on their website:

You can contact the ICO by post at:

Information Commissioner’s Office

Wycliffe House

Water Lane


Cheshire  SK9 5AF

Telephone: 0303 123 1113 / 01625 545 745