Privacy notice

Draft for review. This text is a starting point written for the pilot. Have it checked by a solicitor before live sales.

The seller (Dystopia: The Rock Opera) is the controller of personal data collected when you book.

What we collect and why

• Name and email: to issue and deliver your tickets, contact you about your booking (e.g. changes or cancellations) and handle refunds. Lawful basis: contract.
• Marketing emails: only if you tick the optional box. You can unsubscribe at any time. Lawful basis: consent.
• Payment: handled by Stripe. We never see or store your card number.
• Campaign information: if you arrived from one of our tagged links, we record which campaign it was against your order so we know which adverts work. This contains no personal data in itself.
• Advertising measurement: only if you accept advertising cookies, we tell Meta and Google about your purchase (with your email address hashed) so that we, and the organiser of the show you bought for, can measure adverts. Each organiser only receives information about their own shows.

How long we keep it

Order records are kept for 24 months after the performance, then anonymised, unless we must keep financial records longer.

Your rights

You can ask for a copy of your data, a correction, or deletion by emailing dystopiatherockopera@gmail.com. You can complain to the Information Commissioner’s Office (ico.org.uk).