What is this policy for?
At Little Bulb we aim to be clear with you about what personal details we collect and why, to
keep your data safe and only use it in ways that you would reasonably expect.
When processing your personal data we will prioritise your needs and interests and only send
communications to you if you have shown an interest in our activities or requested information.
This policy explains how we will meet our legal obligations regarding collecting and processing
Communicating with you:
Communications from us might include:
- Information about performances and projects
- Details of fundraising campaigns
- Information about an event you have booked tickets for
- Updated about Little Bulb
- Relevant information from partner companies or venues
Any written communication with you will include a clear way to opt-out of further
Developing a better understanding of our supporters and audiences helps us make better
marketing, programming and fundraising decisions, increasing the amount of our income which
can go towards creating national touring performances and our outreach programme. When you
donate to the organisation, sign up to our mailing list or agree to receive information from us
when you book tickets, it helps us get to know you better and improve what we do.
How we collect personal data:
We collect data that is necessary for our organisation’s activities and use it in a way that is
appropriate to the way it was collected and the purpose it was collected for. The type of
personal data and quantity of information we collect from you and how we use it depends on
why you are providing it.
We collect information directly from you in the following ways:
Via our website, by email, over the phone or in person: when you give us your information to
attend one of our performances, make a donation, sign up to our mailing list or communicate
We also collect information from venues that sell tickets on our behalf where you have opted in
to your data being shared with us.
This information may include: name, email address, postal address, date of birth, gift aid and
donor status, transaction or booking history, involvement in Little Bulb projects.
We may combine certain information you provide to us (such as postcode area or events
attended) with information available from external sources (such as Arts Council England or the
We do not share the information you provide to us with these organisations but combine their
data with ours to establish a better understanding of our supporters and therefore improve our
fundraising, marketing and projects.
The information we collect from other organisations may depend on your privacy settings or the
responses you give to them, so you can check your preferences with them. This information
1. Third-party organisations
We may have acquired your information from a third-party organisation if you have provided
permission for another organisation to share your data with third parties, including charities and
arts organisations. This could be when you attend an event with one of our partners or book
tickets for one of our performances via a venue.
2. Social Media and online software
Depending on your settings or the privacy policies for social media and messaging services
such as Facebook, Instagram and Twitter, you might give us permission to access information
from those accounts or services and allow us to contact you. We may collect data regarding
which newsletters you open, your location when opening them and whether you access any
links inserted in them.
3. Publicly available information
We collect information about individuals and organisations from public resources such as
websites, LinkedIn or Companies House records
4. Website cookies
cookies, which are small text files that a website places on your device (e.g. computer or
phone). This means that a website will remember you and so will remember things like your
website setting, preferences or information you’ve put into a form. They can also be used to
help personalise online advertising to your interests, based on your browsing history.
We may also collect information about the type of device you are using to access our website or
the type of software you are using. For example if we know that most people look at our website
using a certain type of mobile phone it will help us improve the experience. What information we
receive depends on your device manufacturer and your settings.
How we process your data
When we process your data we do so for one of the following reasons:
- We have a legitimate interest to do so e.g. if you have previously bought a ticket to one
of our performances and have not opted out of any communications, we may contact
you to tell you about future performances
- It is necessary for the performance of a contract or agreement with you e.g. if you
purchase something from the organisation we need your details to complete the
- To comply with the law e.g. keeping gift aid records following a donation you make
- Because you have provided your consent e.g. asking to join our mailing list
Processing your data may include:
- Keeping a record of your interactions with us, including your contact preferences
- Conducting audience surveys and analysing the responses to understand who we’re
reaching and improve our offer
- Providing anonymised data to funders
- Informing you about a performance you’re planning to attend or about future events
- Processing donations
- Wealth screening and research, to help us understand our donors and potential donors
- Sharing participant data for projects with workshop leaders, to ensure the activities run
- Responding to enquiries, managing a complaint or a recruitment process
When we collect your data we will let you know what purpose it is for and how we will use it.
If you have signed up to our mailing list these are the kind of things we might contact you about:
updates on our work, where we will be touring to and job opportunities. We send our mailings
The majority of our communication is via email but if we contact you directly via post or
telephone we will first check the Mail Preference and Telephone Preference services.
Any email communications that come from us will include an easy way to opt out of future
communications, unless we are required to contact you e.g. to comply with the law.
If you want to opt out of future communications contact email@example.com
We do not intentionally collect or process children’s personal data, except where necessary to
deliver education and outreach activity. Our projects have specific processes for collecting this
data and keeping it safe and our standard practice is that data should be provided by parents or
carers or with their consent. We will only ever use this data to deliver our projects safely and
effectively, with the welfare of the child in mind, and as outlined in our Safeguarding policy.
When offering an online service- for example our mailing list- to a child, in the UK only children
aged 13 or over are able to provide their own consent. We therefore request that only children
aged 13 and above sign up to our mailing list and we will ensure that all content is appropriate.
Keeping your data safe
We keep your personal data safe in the following ways:
- Storing on Little Bulb devices, cloud based systems or online software that is password
- Where available we include 2-factor authentication to add an additional layer of security
- Carrying out a data audit which determines what data we collect and why and includes
timelines for when data will be deleted
- Only collecting the data we need and for the purposes we need it
We work with some organisations outside of the European Economic Area (EEA). Although they
may not be subject to the same data protection laws as companies based in the UK, we will
ensure they provide an adequate level of protection in accordance with UK data protection law.
By submitting your personal information to us, you agree to this transfer, storing or processing at
a location outside the EEA.
We take data breaches very seriously and make every effort to promptly and efficiently address
any concerns if a breach is reported. In the event that we identify a significant (high-risk) data
breach that impacts your personal information, we will promptly notify you, providing
comprehensive information about the breach, the steps we are taking to rectify the situation,
and any necessary actions you should consider taking.
Keeping your information up to date
We would really appreciate it if you could let us know about any changes to your contact details
or if you would wish to stop receiving communications from us through emailing
You have the right to know what and how much personal data we hold about you; to access and
make changes to your own data; to object to how we are using your data, and to ask us to stop
processing your personal data.
You have a right to ask for a copy of the personal data we hold for you. This is called a Subject
We have a legal responsibility to respond to your access request within one month, starting from
the day after receipt. In some cases, we may ask you to confirm your identity (for example, a
copy of your passport or driving licence) when making your request. There may also be a small,
appropriate administrative fee for manifestly unfounded or excessive requests, or if you request
further copies. In these cases, the request period would start from the time we receive the
additional information. If the request is particularly complex we can extend the response time by
a further two months and will let you know if this is necessary.
you wish to exercise any of your legal rights, you may contact our Data Protection Lead on