Purpose of this policy
We are committed to protecting your personal information and being transparent about what information we hold about you.
The Watershed Group of companies (Watershed) – listed below – offer a range of services, transactions and communications which requires the processing of your personal data.
Using personal information allows us to provide you with relevant and timely information about the work that we do and to develop a better understanding of our audiences. As a registered charity, it also helps us to engage with potential donors and supporters.
The purpose of this policy is to give you a clear explanation about how Watershed collects and processes your information.
We use your information in accordance with all applicable laws concerning the protection of personal information. This policy explains:
- What information we may collect about you
- How and why we may use that information
- In what situations we may disclose your details to third parties
- Information about how we keep your personal information secure, how long we maintain it and your rights to be able to access it
- If you have any queries about this policy, please contact the Data Protection Officer at Watershed, 1 Canons Road, Bristol, BS1 5TX or email: firstname.lastname@example.org.
Who We Are
Based in Bristol city centre our venue houses 3 cinemas, the Pervasive Media Studio, a café & bar and events spaces. Watershed develops cultural engagement, imagination and talent, in the belief that the route to better futures is open, disruptive and co-produced. With our audiences and participation at the heart of our organisation we produce and present original ideas and content and curate a diverse programme of talent development, cinema exhibition, events and festivals.
The Watershed group of companies consists of:
- Watershed Arts Trust Limited
A company registered in England & Wales with no. 01608779 and a registered charity with no. 284188. VAT number 916 2531 38.
- Watershed Trading Limited
A company registered in England & Wales with no. 01621620.
- Watershed Ventures CIC
A community interest company registered in England & Wales with no. 06097013.
The registered offices of all three companies is 1 Canons Road, Harbourside, Bristol BS1 5TX United Kingdom, which is our main trading address.
- When do we collect information
- What information we collect
- Data control
- Why we collect your personal information and how we use it
- NHS Test & Trace
- Who do we share your information with
- How we protect your information
- Your rights and how to contact us
- Third party links
- Our websites
When do we collect information from you?
Generally, we collect your information when you decide to interact with us. This could include booking tickets online, over the phone or in person or it could be when you sign up to receive emails from us. We also look at how our audience use our website, so that we can offer the best possible experience whether you’re booking tickets or just trying to find out more about what’s on.
We collect information when you:
- book tickets through our box office in person, over the phone or online;
- donate or provide sponsorship to us, or meet to discuss potential support you may give;
- subscribe to any of our mailing lists;
- register for a loyalty card;
- use the interactive sections of our Sites;
- hire one of our rooms or cinemas;
- when you report a problem with our Sites;
- attend a meeting, event or workshop;
- make a table booking, register lost property or complete a comment card;
- enter a competition
What information do we collect about you?
The personal data we collect about you varies depending on the service you request from us.
When you book tickets, or hire one of our rooms or cinemas we may collect:
- Email address
- Contact phone numbers
- Age / date of birth
- Payment card details. (Please note, we will not hold payment information for any longer than it takes to process your transaction. All debit and credit card information is processed securely, and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS))
- Access requirements
- Purchase history
- Names of other attendees
In addition to the above, when you donate we may also collect:
- Bank details (to process direct debits)
- Gift Aid status
- Donation history
When you make a café table booking, register lost property or complete a comment card we may collect:
- Email address
- Contact phone number
Information obtained through cookies*, when you use our website, or engage with our emails:
- IP address
- Web browser type and version
- Type of device
- Operating system
- Web address you arrived at our site from
- Length of visit
Other information we collect
If you correspond with us generally, for example to raise a query, comment or complaint about any of our services, we will also collect any other information you choose to send to us in that correspondence.
If you register on our Box Office system we give you the option to include your postal address to speed up future transactions.
If you donate to Watershed, we will also ask for your postal address for the purposes of administering any Gift Aid contributions you elect to provide, to keep you up to date with how your gift makes a difference and to let you know about future opportunities to support Watershed.
We may also collect your postal address in order to send you occasional mail informing you of upcoming events, developments and ways in which you can support us (you will always have the option to opt out of this).
When you book tickets for any of our events or screenings we will collect your telephone number so that we can contact you in case of changes to the programme.
We will also use your telephone number to contact you with regard to loyalty cards applications, competition entries, table bookings or lost property.
Age/date of birth
We store this information if you purchase a 24 and under ticket or a 60 and over ticket to any of our events or screenings.
We will also request information on the date of birth of your child if you book a ticket for any of our Cinebabies events as proof that you and your child are eligible to attend such events.
Watershed is committed to making everyone’s experience as accessible as possible. We securely collect and store these on our Box Office system in order to provide you with the best possible customer experience, and to ensure we can meet any requirements you may have in relation to access.
When you buy a ticket or donate to Watershed, we will collect payment information from you such as credit or debit card details or bank information for the purposes of taking payment or setting up a direct debit through our third party providers.
All debit and credit card information is processed securely, and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS)
Allergy & dietary information
If you hire us for an event and you use our catering services, we may also collect allergy and dietary information about you or your guests attending the event. This information will only be used for the purposes of facilitating the catering for your event.
Watershed is the data controller for all data we collect and store.
We collect personal information through a number of different ways when you choose to interact with us, all of which are subject to strict data security processes to ensure your personal information is kept safe at all times.
In addition we use the following data processors to enable us to collect, process and securely store the data we obtain.
- We use Patronbase to process all ticket bookings, purchases and some donations
- We use Mailchimp to manage our email communications
Any data processed on behalf of Watershed is processed only to the extent required by them to perform the services that Watershed requests. Any use for other purposes is strictly prohibited within a data sharing agreement between us and the provider. Furthermore, any data that is processed by third parties must be processed within the terms of this policy and in accordance with the United Kingdom Data Protection Act 2018 and General Data Protection Regulation 2018.
- We use CAF (Charities Aid Foundation) to process our Direct Debits and One Off Donations
- We use Donr to process our Text Donations
Why we collect your personal information and how we use it
We use information in a number of ways, the main ways being:
- because it is necessary to administer the services you have requested from us and to fulfil our obligations to you in providing these services; or
- to inform you by email or other means of similar events or services run by us which we think may interest you; or
- in the case of our profiling (see below) in order to pursue Watershed’s legitimate interests in raising funds. Where we process your personal data on this basis, we will only do so where it does not prejudice your own privacy rights.
Specifically we use your information in the following ways:
To carry out our business and to provide a service or carry out a contract with you:
- To fulfil ticketing and/or donation requests (including confirmation of your booking or donation by email and/or letter)
- Process payments (Please note we do not store any Credit Card or other payment information once the transaction has been completed).
- Provide the best possible customer services and to help us with our internal administration.
- Contact you with important information relating to your booking or donation, such as confirming your order, reminding you of an upcoming event you’ve booked for or letting you know about updates to event details.
Where we have your consent:
- Send you updates via email about what’s on, news or about supporting us.
- Email you about a specific area you’ve requested to hear more about such as our accessible programme or other projects.
- Share your details with other arts organisations whose work you may have seen at, or in partnership with Watershed. This will be limited to name, email address and booking details for event linked with the partner organisation. You will always be able to opt out of their communications by contacting them directly.
Where we have justifiable reason (including legal obligation and legitimate interest):
- Analyse your booking history in order to learn about your interests and preferences to help us target our marketing communications so that they’re more relevant to you.
- Send you occasional mail informing you of important news and how you can support Watershed
- To keep you informed of how your donation is helping to support Watershed, to invite you to special events and inform you of details of how you can continue to support Watershed.
- For classifying our audience into groups or segments, using booking and publicly available information. These segments help us to understand our audience better and ensure we’re sending relevant messages to each group.
- Measure and understand how our audiences respond to a variety of marketing activity so we can ensure our activity is well targeted, relevant and effective.
- To contact you to ask you to participate in audience research. You are under no obligation to participate in research and, should you provide any further information, Watershed will inform you how any further information will be used. All information gathered for research purposes is anonymised and aggregated for analysis.
- Analyse and continually improve the services we offer including our programme, our website and our ticketing service.
- To keep our database accurate and relevant, for example, using National Change of Address.
- To inform you of any changes related to your booking
- The use of CCTV recording equipment in and around our premises for monitoring and security purposes.
- Undertake due diligence to detect and reduce fraud and credit risk.
- To analyse the way in which our website is used and the content and links that you interact with, in order to improve our website services
- To store saved online ticketing orders as you navigate around the website
- To analyse the way in which our emails to you are received by you, and the content and links that you interact with, in order to improve our communications with you.
- To help diagnose and manage the website, to audit the geographical make-up of users, and to establish how you have arrived at the website (this is through your public IP address which is a unique number which allows a computer, group of computers or other internet connected device to browse the internet. The log file records the time and date of your visit, the pages that were requested, the referring website (if provided) and your internet browser version)
For a small number of our audience, where we want to better understand people’s engagement with Watershed and their potential interest in supporting us further:
Before contacting a small number of individuals we may seek additional information including Watershed booking and connections, business network information and publicly available information relating to: residential location, wealth and assets, family*, career, donations to other organisations (including political parties where they are made public by the individual) and hobbies and interests to create a profile of their interests and preferences. This helps us understand the background of the people who may choose to support us and helps us to make requests for gifts to those who may be able and willing to give. We may also use publicly sourced images to help identify individuals who attend our special events.
* This does not include information about children unless given personally by the individual concerned.
We use a number of different sources to aid us in our fundraising activities, including newspaper websites and archives, housing market websites and the electoral roll as well as official websites of companies, charities and other arts organisations. In addition to general use of the internet we also make use of company, director and shareholder information from publicly available information providers.
NHS Test and Trace
Watershed is working with NHS Test and Trace as part of the country’s ongoing COVID-19 response. NHS Test and Trace is a contact tracing service run by the Department of Health and Social Care (DHSC).
If you are vsiting Watershed Cinemas or the Café & Bar, in line with government guidance, at least one member of every party of customers (up to 6 people) must provide their name and contact details using either the NHS Test and Trace app or directly to Watershed.
For details of how the NHS Test and Trace app protects your data and privacy please visit the NHS Covid-19 App support website.
If you provide your details directly to Watershed, the following will apply.
What information will you collect and how?
We’ll collect the names and contact telephone numbers, and date of visit and arrival and departure time of all customers or visitors, or if it is a group of people, the name and number of one member of the group.
We’ll collect the information when:
- you book a ticket (through our ticketing system)
- visit our café bar (through our table booking system or online form)
- or attend a conferencing event here (through sign up forms and our event booking system)
Do I have to share my details with NHS Test and Trace?
Yes. In line with current governent guidance, you will not be able to visit Watershed Café & Bar or cinemas unless you supply your details.
Why are you collecting and Sharing this information?
We’re using your information on the legal basis that it is necessary for reasons of public interest in the area of public health.
Who do we share your information with?
Your information is shared with Department of Health and Social Care (who run NHS Test and Trace). This is only shared in the event that someone who has tested positive for COVID-19 has listed Watershed as a place they visited recently, or if Watershed is identified as potential location of a local outbreak of COVID-19.
How Long Do you keep my Information for this Purpose?
If the information is not being used for another reason by Watershed (such as facilitating ticket bookings where information will kept longer), your data will be deleted after 21 days by Watershed.
Where your data is passed to NHS Test and Trace in the case of a suspected outbreak, your information will be kept for up to 8 years, as part of the standard contact-tracing retention period set out by Public Health England.
For more information on how your data is used by NHS Test and trace services see: https://www.gov.uk/government/publications/privacy-notice-for-maintaining-records-of-staff-customers-and-visitors-to-support-nhs-test-and-trace/privacy-notice-for-maintaining-records-of-staff-customers-and-visitors-to-support-nhs-test-and-trace
Who do we share your information with?
We don't sell your information.
We don't share the information that is provided to us except:
- with third party service providers, such as hosting providers or an email service provider, who provide services to us so that we are able to fulfil our obligations to you or, where we are able to send you marketing information, to do so;
- if you have donated money to us and have notified us that you are registered for gift aid, we will share your information with HMRC and the Charity Commission for the purposes of administering this;
- if you have requested that you be added to a marketing list of any of our partners we are running, or have run, an event with during the booking process for that event;
- if we have a legal obligation to disclose your information (for example, if a court orders us to);
- if we run an event in partnership with another named organisation we will also share information with that partner to enable it to report to funders and inform audience development strategy. Any data shared for these purposes will be in an anonymised and aggregated form.
How do we protect your information?
Watershed is committed to ensuring your personal information is secure at all times. We store and process your personal data securely using suitable physical, electronic and operational procedures to safeguard and secure all personal information. We will ensure that any third parties we use for processing your personal data do the same. We limit internal access to your personal data to only those who require it, and provide all our staff with Data Protection and Information Security training. We ensure that high standards of security and protection are met by abiding by our Data Protection Policies and Procedures
Watershed may transfer your data to USA based organisations such as Mailchimp (which we use to manage our email communications). The USA has weaker data protection laws than that of the EEA and we will ensure that we only use organisations who are a part of the EU privacy shield initiative to handle your personal information, therefore ensuring your data rights are maintained. More details on this certification can be found at www.privacyshield.gov/welcome
We keep your personal information:
- For as long as we need to for the purposes for which it was collected or,
- (if longer) for any period for which we are required to keep personal information to comply with our legal and regulatory requirements or,
- until you ask us to delete your personal data, in accordance with your rights below.
We will not keep more information than we need. The retention period will vary according to the purpose, for example if purchasing a ticket only, we will typically keep your data for up to six years from the date of your last transaction whereas if you have pledged a legacy to Watershed, we will hold your details until notified by your executors. For further information about how long we will keep your information, please contact Head of Data & Operations using the contact details outlined in this policy.
We will assess the personal data that we hold on a regular basis to determine its relevance and destroy your personal data if we no longer require it or no longer provide any services to you.
If you ask us to stop sending direct marketing communications to you, we will keep the minimum amount of information (e.g. name, address or email address) to ensure we adhere with such requests.
Your rights and how to contact us
You should find it easy to access and amend the personal information that we hold on you, or request that we stop contacting you. It’s your data and we want to make sure you feel in control of it.
If you have an online account with us (if you have booked a ticket online), you can amend your personal details and email contact preferences at any time. Sign in through our ticketing pages, and click ‘Your details’ on the left hand side of the screen.
In addition, every email we send to you will include details on how to change your communications preferences or unsubscribe from future communications.
If you prefer, you can contact us by phoning, emailing, or writing using our contact details below.
You have a number of rights in relation to your personal data. These include the right to:
- find out how we process your personal data;
- request that your personal data is corrected if you believe it is incorrect or inaccurate;
- obtain restriction on our, or object to, processing of your personal data;
- ask us not to process your personal data for our own marketing purposes;
- withdraw your consent to our processing of your personal data; and
- At any time you have the right to ask Watershed to amend or stop how it uses your personal information including for marketing purposes.
You have the right to request details of what information we hold about you. We will take steps to verify your identity before responding to your request and will then respond as soon as possible but no later than within a month. Please send a description of the information you would like to see, together with proof of your identity to email@example.com
You have the right to get information held about you by us corrected. If you have any concerns about the accuracy of your personal data, please let us know using the contact details below.
At the end of your relationship with us you can ask us to delete your personal data and we will do so as far as we are reasonably able and subject to our legal requirements to retain such data. You can also request that we provide you with written confirmation of the deletion of your personal data, which we will provide if we have deleted that data and can provide evidence of this.
You have the right to lodge a complaint with the supervisory authority, The Information Commissioner’s Office – www.ico.org.uk
If you would like to exercise any of your rights outlined in this policy or have any concerns or questions about the way in which Watershed handles your personal data, please contact us –
1 Canons Road
Bristol BS1 5TX
Telephone: 0117 927 6444
Third party links
Our Sites may contain links to other sites and resources provided by third parties. We have no control over the contents of those sites or resources.
If you use any third party sites or resources linked from a Watershed site, their rules and policies will apply and you should always check these before you submit any personal data to them. We do not accept any responsibility or liability for these policies.
What is a cookie?
A cookie is a small text file that is downloaded onto your computer when you visit certain websites and allows a website to recognise a user's device.
Cookies are used on watershed.co.uk and other Watershed sites to enable some services to recognise your device so you don't have to give the same information several times during one task and to provide Watershed with information to help improve the experience of using our websites.
What cookies do we use?
The list below details the persistent cookies used by Watershed's websites, all of which are first party cookies, rather than third party cookies. Watershed's first party cookies can only be read by our websites.
Google Analytics: _gat, _ga _gid
- Cookies set by one of our websites to enable Watershed to analyse the website using Google Analytics.
- On some of our sites we may also use the Advertising Features of Google Analytics to find out more about the demographics and interests of our visitors.
- When you visit a website and see an advertisement a cookie is placed on your computer or device by, for example DoubleClick (Google’s Internet ad serving business) and then if you visit another site that has ads served by DoubleClick, the same cookie can be read and modified by DoubleClick.
- By tracking what kind of sites you visit and how you interact with ads for different products and services, Google aims to build up a picture of who you are; your age, gender and interests. Using the Advertising Features of Google Analytics means we receive reports that tell us who Google thinks is visiting our site by age, gender and interests.
- This information is anonymous and No Personally Identifiable Information is gathered from users.
- We use this information to report to our funders, such as Arts Council England, and internally for us to better understand how visitors use our websites.
Google Analytics Content Experiments: __utmx, __utmxx
- We sometimes use Google Analytics to run experiments on our websites, to test how variations in how we present features perform, in order to better meet user's needs. These cookies determine whether a user has been included in the experiment and the expiry of those experiments.
Drupal: has_js, comment_info_maqil, comment_info_name, comment_info_website
Watershed campaign cookies: ca_ad, ca_dismissed, ca_cta, ca_engaged
- We use the ca_* cookies to help track user interaction and dismissal of campaign banners that we may place on the pages of our websites from time to time. When interacting with a campaign, the cookies that are created allow us to prevent further display of banners for those already engaged or uninterested in seeing them. They also helps us to understand the banner's usefulness for users, as well as gauging their success. No personal data is collected in addition to these findings.
Third party cookies
How do I restrict or delete cookies?
Your web browser should allow you to restrict or delete cookies set by this Site. The Help function within your browser should tell you how. Alternatively, you can visit www.allaboutcookies.org which provides general information about cookies and how you can manage cookies on your computer.
To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.