Privacy Policy

Last updated: March 2026

This Cookie Policy explains how The Tivoli Theatre (“we”, “us”, “our”) uses cookies and similar technologies on https://www.thetivolitheatre.com.

1. Who we are

The Tivoli Theatre is the controller of your personal data for the purposes of UK data protection law.

2. The personal data we collect

Depending on how you use our website, we may collect and process the following personal data:

Information you provide directly

• your name;
• email address;
• telephone number;
• company name;
• any information you include in an enquiry form or message.

Information collected automatically

• IP-related technical information;
• browser type and version;
• device information;
• pages viewed and website usage data;
• date and time of visits;
• referral source.

Cookie and analytics data

If you consent to analytics cookies, we may collect website usage information through Google Analytics.

3. How we use your personal data

We may use your personal data to:

• respond to enquiries and messages;
• provide information about our services;
• operate, maintain, and secure our website;
• understand how visitors use our website;
• improve website performance, content, and user experience;
• establish, exercise, or defend legal claims;
• comply with legal and regulatory obligations.

4. Our lawful bases for processing

We rely on the following lawful bases under UK data protection law:

Legitimate interests

We process certain personal data where it is necessary for our legitimate interests, including operating and improving our website, responding to enquiries, and maintaining website security, provided those interests are not overridden by your rights and freedoms.

Consent

Where we use non-essential cookies, including analytics cookies, we rely on your consent.

You can withdraw your consent at any time through Cookie Policy.

Legal obligation

We may process personal data where necessary to comply with a legal obligation.

Contract

If you contact us in relation to services or a potential contract, we may process your data where necessary to take steps at your request before entering into a contract, or to perform a contract.

5. Google Analytics

We use Google Analytics to help us understand how visitors use our website.

Google Analytics may process technical and usage data such as page views, session information, approximate geographic information, browser and device information, and interactions with the website.

We use Google Analytics only in accordance with the consent choices made by website visitors where required.

We do not intentionally send directly identifiable personal data to Google Analytics.

6. Who we share your data with

We may share personal data with trusted service providers where necessary to operate our website or business, such as:

• website hosting providers;
• website developers or technical support providers;
• analytics providers, including Google Analytics;
• professional advisers where necessary; and
• regulators, courts, law enforcement, or other authorities where required by law.

We require service providers to handle personal data appropriately and only where necessary.

7. International transfers

Although our website is hosted in the UK, some third-party providers we use may process personal data outside the UK.

Where personal data is transferred outside the UK, we will take steps required by law to ensure appropriate safeguards are in place.

8. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, regulatory, tax, accounting, security, and reporting requirements.

Typical retention periods may include:

• enquiry data: [e.g. 12 months]
• customer or project correspondence: [e.g. 6 years where relevant]
• analytics data: in line with our Google Analytics retention settings

We may retain data for longer where required by law or where necessary to deal with disputes or enforce our legal rights.

9. Your rights

Under UK data protection law, you may have the right to:

• access your personal data;
• request correction of inaccurate personal data;
• request erasure of your personal data;
• restrict processing of your personal data;
• object to processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• request transfer of your personal data in certain circumstances;
• lodge a complaint with the Information Commissioner’s Office (ICO).

10. Complaints

If you have concerns about how we use your personal data, please contact us first using the details above.

You also have the right to complain to the Information Commissioner’s Office (ICO).

11. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.

However, no method of transmission over the internet or electronic storage is completely secure.

12. Third-party websites

Our website may contain links to other websites. We are not responsible for the privacy practices of other websites and recommend that you read their privacy notices separately.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.