Privacy Notice
Data Security
When we collect personal data from you we store it under strict safekeeping and confidentiality measures. We use technical and organisational security measures to protect it against misuse and any external data processing services we use must meet our security policies. We hold your data on secure servers operated by Glyndebourne and (for Glyndebourneshop.com) Shopify. Glyndebourneshop.com transfers this information to servers outside the EEA but provides a level of protection equivalent to EEA standards for that data.
We allow only those Glyndebourne staff members who need to process your data to have access and prevent all other staff from seeing it. We meet the protection offered to you under the Data Protection Act 2018.
By disclosing your personal information to us via glyndebourne.com or glyndebourneshop.com, by phone or in writing, you are giving us your consent to collect, store and process your personal information in the manner described in this Notice. The information we hold will be accurate and up to date within our knowledge.
If you have any questions regarding the Privacy Notice or your information, please contact governance@glyndebourne.com or write to Head of Governance & Compliance, Glyndebourne, Lewes, BN8 5UU.
What we do with your data and what we don’t do
We will keep information which identifies you only if you make a donation, buy from our shop or ask to receive communications from us. Such personal information could include:
- your name
- address
- phone number
- email address
- IP (internet protocol) address
- payment card details (these are not stored in a usable format and are kept only while we process your payment)
We process your personal information for fulfilment of the contract to complete orders from our shop, research and statistical analysis collected anonymously, and (with your prior consent) for communication about Glyndebourne activities and products.
We sometimes have to share your information with third parties to undertake these business activities. When we do so we always confirm that they meet our security standards. When we allow access to your information we always control what they can see, what they are allowed to do with it and how long they can see it.
We do not share or sell your personal information for other organisations to use for their own purposes. We do not store credit card details in a usable format and will not disclose them to any third party.
We collect anonymous ‘click-through’ data from our website in a log file that helps us develop a picture of users of our website. This data is not linked to any personally-identifiable information. We use it only for broad statistical purposes. For information about how we use cookies on the website, please read our Cookie Policy.
Newsletters and Mailings
Our e-newsletters will give you news related to Glyndebourne and items we think will be of interest to you. We will not sell, rent or lease our mailing lists to any third-parties. We may use code within our mailings template to identify which messages you have opened and which links you have clicked on within it to better tailor any future communications.
We will always ask for your consent before sending you news and offers from the Glyndebourne shop.
The permissions above relate to optional communications from Glyndebourne. Each email we send you will give you the option to update your preferences. We will consider that your preferences last for five years unless you notify us otherwise. We will make sure that you receive the product you have requested and that we process any payments and send you information relating to that purchase.
You can update your personal information and communications preferences at any time in the following ways:
- online by logging into your account
- clicking on the unsubscribe link within an email
- by emailing us at governance@glyndebourne.com
- by writing to the Head of Governance & Compliance, Glyndebourne, Lewes, BN8 5UU.
If you wish to have no further contact from Glyndebourne on any subject, either
email governance@glyndebourne.com or write to Head of Governance & Compliance, Glyndebourne, Lewes, BN8 5UU. We will remove your details from all subscription lists.
External links
Our site contains links to other sites whose information practice may be different than ours. You should consult the other sites’ privacy notices as we have no control over information that is submitted to or collected by third parties. Further, we cannot guarantee the privacy of personal information you transmit over the web or that may be collectable in transit by others.
Your Rights
Glyndebourne will at all times adhere to the Seven Key Principles of the Data Protection Act 2018. These are that data is:
(a) processed lawfully, fairly and in a transparent manner in relation to individuals (‘lawfulness, fairness and transparency’);
(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes (‘purpose limitation’);
(c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
(d) accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
(e) kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organisational measures required by the GDPR in order to safeguard the rights and freedoms of individuals (‘storage limitation’);
(f) processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).”
(g) The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).
Access to your information and Opting-Out
By disclosing your personal information to us via glyndebourneshop.com, by phone or in writing, you are giving us your consent to collect, store and process your personal information in the manner described above. The information we hold will be accurate and up to date within our knowledge.
You have the right to ask for a copy of the personal information that we hold about you, to correct any inaccuracies in that information or ask us to delete such records. If you would like to have a copy of this information, please contact governance@glyndebourne.com or write to the Head of Governance & Compliance, Glyndebourne, Lewes, BN8 5UU. If you find any inaccuracies we will correct them immediately. If you ask us to delete your records we will destroy all of your personal information that we hold on our files.
You have the right to complain to the Information Commissioner’s Office if we have not been able to satisfactorily resolve a problem about our handling of your personal information.