Privacy, Security & Cookies
The ADC Theatre is a department of the University of Cambridge. For more information about how we handle your personal information, and your rights under data protection legislation, please click here.
This page in particular explains how the ADC Theatre uses personal information.
We collect and process your personal information for a number of purposes. We keep your personal details so that we can deal with any questions about your bookings or to get in touch if there are any changes to an event, such as cancellations.
The other way we use your contact details is to send you information about upcoming events we think might be interesting to you. We want to make sure you know about our vibrant and varied season of shows. This is by emails and our season brochure in the post.
We also keep a record of the different shows our customers have seen which allows us to spot any trends or preferences. For example we can see the demographics of our audiences for different types of shows.
All the information we keep is held securely.
Data Protection legislation requires that we can point to a basis in law which allows us to process your data. In general, we rely on your permission before we send you emails or post. You can update these preferences at any time on your Account on our website. This means if you’ve given us permission in the past, we will keep you updated with information about events.
In order for us to be able to operate effectively, we have a legitimate business interest to get in touch with you about your ticket bookings.
We will only pass your details on to any event organisers if you have given us express permission to do so. For example the organiser of a music concert might ask for the details of those who bought tickets in case they are interested in the next event.
In common with most web sites, our websites’ servers can automatically log certain information about every request made of them (see below for more details). This information is used for system administration, for bug tracking, and for producing usage statistics. The logged information may be kept for up to two years.
From time to time logging may be enabled on the webserver hosting our websites. When logging is enabled the following data is automatically collected for each request:
- The name or network address of the computer making the request. Note that under some (but not all) circumstances it may be possible to infer from this the identity of the person making the request. Note also that the data recorded may be that of a web proxy rather than that of the originating client
- The username, when known during authenticated (logged in) access to the site
- The date and time of connection
- The HTTP request, which contains the identification of the document requested
- The status code of the request (success or failure etc.)
- The number of data bytes sent in response
- The contents of the HTTP Referrer header supplied by the browser
- The content of the HTTP User-Agent header supplied by the browser
Logging of additional data may be enabled temporarily from time to time for specific purposes.
In addition, the computers on which the web site is hosted keep records of attempts (authorised and unauthorised) to use them for purposes other than access to the web server. This data typically includes:
- The date and time of the attempt,
- The service to which access was attempted,
- The name or network address of the computer making the connection,
- It may also include details of what was done or was attempted to be done.
We may disclose your personal information to third parties in the following circumstances:
- In order to process a transaction; your personal information and card details are passed to third party service providers. Card details are only used for the purpose of handling an individual transaction. There is a separate security policy that contains more details about the collection and handling of card information.
- If we have obtained your consent to do so.
- When we are required or authorised by law, court order, regulatory or governmental authority to disclose your personal data.
- If required to protect the rights, property or safety of the University of Cambridge, its members or others.
Relevant subsets of this data may be passed to computer security teams as part of investigations of computer misuse involving this site or other computing equipment in the University.
In addition, this site uses Google Analytics to help us analyse site usage and to improve it. To support this, selected information about your interaction with the site is sent to Google for them to analyse on our behalf. For more information about Google Analytics see http://www.google.com/analytics/.
Links to other websites
Card transactions are processed by YESpay International Ltd, and transmitted via Spektrix Ltd, who provide our Box Office system. Pages where information is captured by Spektrix can be identified by the 'Powered by Spektrix' logo at the bottom right of the screen.
When asked to enter personal details, including your credit card number, the address bar will indicate that you are on a secure webpage, most likely by showing https:// at the beginning of the address. This indicates that all data is being transmitted securely between your web browser and the Spektrix servers, using encryption to ensure that the data cannot be read or modified by a third party.
We take data security extremely seriously and understand the need to adhere to high levels of checking and auditing around storing and transferring cardholder data. As part of the global Payment Card Industry Data Security Standard (PCI DSS), we work with our acquiring bank Barclaycard to provide a secure payment network for our customers.
Protecting customers against credit card fraud is a critical issue for the University as Card Payment Merchants and we require that under no circumstances should credit card information be sent by email.