Privacy Policy

Last updated: 1 November 2025

KOS Musical Theatre Company (“KOS”, “we”, “us”, “our”) is an unincorporated musical theatre organisation based in the United Kingdom. We are committed to protecting the personal data of our members, supporters, participants, website visitors, and anyone who interacts with us. This Privacy Policy explains how we collect, use, store, and protect your personal information, in line with UK data protection law including the UK GDPR and the Data Protection Act 2018.

1. Who We Are

KOS Musical Theatre Company
Email: data@kosmtc.co.uk
Website: https://kosmtc.co.uk

As an unincorporated organisation, the committee collectively acts as the data controller for all personal data we handle.

2. What Personal Data We Collect

We collect different types of data depending on how you interact with us:

A. Website Visitors
  • Name and contact details (if submitted through forms)

  • Email address (e.g., newsletter sign-up)

  • Technical data (IP address, browser type, cookies, analytics)

B. Members and Performers

Stored in our secure membership database:

  • Name, address, telephone number, email

  • Emergency contact details

  • Date of birth (if required for safeguarding)

  • Membership status and payment records

  • Participation information (shows, auditions, roles)

  • Medical or access information only where voluntarily provided and relevant to participation

C. Supporters and Ticket Buyers
  • Name and contact details

  • Payment and transaction information (processed securely by third-party providers)

  • Marketing preferences

D. Volunteers and Committee Members
  • Contact information

  • Role information

  • DBS details if applicable

3. How We Collect Your Data

We collect data:

  • When you complete online forms

  • When you become a member

  • When you audition or participate in productions

  • When you join our mailing list

  • When you visit our website (via cookies and analytics)

  • When you contact us by email or phone

  • When you buy tickets (via third-party ticketing providers)

4. Why We Use Your Data (Lawful Basis)

We use personal data under the following lawful bases:

Performance of a Contract
  • Managing your membership

  • Communicating about rehearsals, performances, fees, and company activity

Legitimate Interests
  • Promoting productions and activities

  • Managing auditions and participation

  • Maintaining organisational records

  • Ensuring site security and functionality

Consent
  • Sending marketing or promotional emails

  • Collecting optional medical or access information

  • Website cookies where required

Legal Obligations
  • Safeguarding responsibilities (if working with children or vulnerable adults)

  • Financial record-keeping

5. How We Use Your Data

We may use your data to:

  • Administer membership and participation

  • Communicate with you about productions, rehearsals, and events

  • Process payments for membership or tickets

  • Maintain internal records

  • Send newsletters (with your consent)

  • Improve our website and services

  • Comply with safeguarding or legal obligations

We do not sell your data.

6. Sharing Your Data

We may share your data with:

  • Ticketing or payment processors (e.g., Ticketsource, Stripe, PayPal)

  • Email or cloud service providers (e.g., Google Workspace, Mailchimp, Microsoft)

  • Theatre venues (limited data where necessary for access, health & safety)

  • Emergency services if required in urgent situations

All third-party services are required to comply with UK GDPR standards.

We will never share personal data for marketing purposes with external organisations.

7. Children’s Data

If we work with under-18s, we collect only data necessary for:

  • Contact with parent/guardian

  • Safeguarding or participation needs

We do not contact minors directly without parental consent.

8. How Long We Keep Your Data

We retain data only for as long as necessary:

  • Member records: up to 3 years after membership ends

  • Participation/audition records: up to 3 years

  • Financial records: 6 years (legal requirement)

  • Marketing emails: until you unsubscribe

  • Medical/safeguarding data: only as long as is strictly necessary

Data is then securely deleted or anonymised.

9. How We Store and Protect Your Data

We use reasonable technical and organisational measures to protect your data, such as:

  • Password-protected systems

  • Limited access for authorised committee members

  • Secure online storage providers

  • Encryption where appropriate

  • Regular reviews of member data

10. Your Data Protection Rights

Under UK data protection law, you have the right to:

  • Request access to your personal data

  • Request correction of inaccurate data

  • Request deletion of your data (“right to be forgotten”)

  • Restrict or object to certain types of processing

  • Withdraw consent at any time (for marketing or optional data)

  • Request data transfer (data portability)

To exercise these rights, contact us at: data@kosmtc.co.uk

11. Cookies and Website Tracking

Our website may use cookies to:

  • Enable functionality

  • Track analytics and performance

  • Remember preferences

You can manage or disable cookies in your browser settings.

Full details are available in our Cookie Policy which can be found here.

12. External Links

Our website may contain links to external sites (e.g., social media, ticketing).
We are not responsible for their privacy policies or content.

13. Changes to This Privacy Policy

We may update this policy occasionally.
The most current version will always be available on our website.

14. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact:

KOS Musical Theatre Company
Email: data@kosmtc.co.uk
Postal address: 137 Main Road, Wellingborough, NN8 2UB

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data: https://ico.org.uk/