Privacy notice

Glyndebourne Privacy Notice

Glyndebourne is committed to protecting your privacy. We will only use information about you in
accordance with the Data Protection Act 2018 and other relevant legislation and regulations. This
Privacy Notice explains how we collect, store, and use your personal data and how we keep it safe.

When we collect personal data, we store it under strict safekeeping and confidentiality measures. We
use technical and organisational security controls to protect it against misuse, loss or unauthorised
access. Any external processing services we use must meet our data protection standards.

We hold your data on secure servers operated by Glyndebourne and for glyndebourneshop.com, by
Shopify. Shopify transfers information outside the EEA but provides equivalent safeguards to EEA
standards. For more information, please see the Retail Privacy Notice.

Only authorised employees who need to process your data have access to it. All processing meets
the protections required under the Data Protection Act 2018.

By providing personal information to us, whether via our websites (glyndebourne.com or
glyndebourneshop.com), a third-party platform such as Facebook, verbally, or in writing, you consent
to Glyndebourne collecting, storing and processing that information as described in this Notice.

We collect information that helps us deliver our services, communicate effectively and meet our legal
obligations. We may collect and process personal data when you:

• Become a Member
• Purchase tickets or merchandise
• Make a donation or legacy pledge
• Use our streaming service
• Participate in a Learning & Engagement project
• Request to receive communications from us

This information may include:

• Name, gender and contact details (address, phone number, email)
• Date of birth and IP address
• Payment details (held securely in tokenised format)
• Bank account details (for Direct Debits)
• Proof of identity (for art purchases)
• Medical or accessibility needs (for Learning & Engagement participation)
• Next of kin (for Learning & Engagement participants)

We use this data to:

• Administer memberships, donations, ticketing and streaming services
• Deliver our charitable and educational activities
• Fulfil merchandise orders
• Comply with legal and financial requirements (e.g. anti-money laundering)
• Contact you about Glyndebourne news and events (with your consent)

We may contact you by post about activities that support our charitable purpose, even without prior
consent.

We sometimes share data with trusted third parties to deliver our services, always under strict
contractual controls. Examples include:

• RA Venues (Compass Group) for restaurant bookings
• Glyndebourne America, our registered U.S. charity partner
• Mailing houses for postal communications
• Vimeo for web streaming services

We ensure all partners meet our security and confidentiality standards and use data only for the
agreed purpose.

We never sell or share personal data with other organisations for their own marketing or fundraising
purposes.

For catering at specific events, payment details may be shared with RA Venues and only with your
express permission.

We retain personal information only for as long as necessary to fulfil our obligations or deliver our
services. Fixed retention periods apply for each class of data and we securely delete information
when it is no longer needed. For example:

• Gift Aid records are kept for six years after your last donation
• Records required under art market anti-money laundering law are kept for at least five years

Glyndebourne (Charity No. 243877) fundraises from individuals, companies and foundations to
support our mission of enriching lives through opera.

To guide our fundraising responsibly, we may gather publicly available information from sources such
as Companies House, Charity Commission, newspapers, housing market websites or LinkedIn. We
may also work with specialist partners (such as Wealth-X) to help us understand supporter interests
and manage risk.

This enables us to make appropriate, relevant requests and maintain the integrity of our fundraising.
All such work is carried out securely and in accordance with data protection law.

You can opt out of this type of data use at any time by contacting governance@glyndebourne.com.

We are committed to safeguarding children and adults at risk.

If you are aged 16 or under, please obtain your parent or guardian’s consent before providing
personal information. Their signature or e-signature will always be required for participation in
Glyndebourne projects. We also require carers’ consent for adults at risk.

Members receive regular updates through our magazine and Members’ emails.

Our Learning & Engagement team manages a separate mailing list for Glyndebourne Youth Opera
and related opportunities.

We will contact you only where you have given consent, or where we have a legitimate reason (such
as fulfilling a ticket order). You can update your communication preferences at any time by:

• Logging into ‘My Account’ on glyndebourne.com
• Clicking ‘unsubscribe’ in any email
• Emailing boxoffice@glyndebourne.com
• Calling 01273 815000
• Using the ‘Live Chat’ on glyndebourne.com
• Writing to Box Office, Glyndebourne Productions Ltd, New Road, Lewes, BN8 5UU

To stop all contact from us please email governance@glyndebourne.com

Under the Proceeds of Crime Act 2002, updated in 2020, art market participants must complete
customer due diligence for any artwork purchase over €10,000. You may be asked to provide proof of
identity (e.g. passport or driving licence). These records are held securely for a minimum of five
years.

Our websites may contain links to other sites whose privacy practices differ from ours. Please check
those sites’ privacy notices directly, as we cannot guarantee how third parties will handle personal
information.

Under the Data Protection Act 2018, you have the right to:

• Access your personal data
• Request correction or deletion
• Object to processing or restrict how we use it
• Request that your data be transferred to another organisation
• Lodge a complaint with the Information Commissioner’s Office if your concerns are not
  resolved

To make a request, please contact governance@glyndebourne.com or write to Glyndebourne
Productions Ltd, New Road, Lewes, BN8 5UU

If you have any questions, please contact governance@glyndebourne.com or write to Glyndebourne
Productions Ltd, New Road, Lewes, BN8 5UU