This Privacy Policy (the “Privacy Policy”) has been prepared to meet the requirements of applicable data protection law, and it only relates to the collection, protection, disclosure and use of personal data belonging to living individuals. It does not relate to data which emanates from companies or other entities, although the general principles regarding our collection and use of data is broadly the same irrespective of whoever is the user of our website, or our customers.
This Privacy Policy sets out the ways in which any personal data (your personal information) that we, NIMAX THEATRES LIMITED (“us”, “our” or “we”) collect in relation to you, or that you provide to us, will be processed by us. It also explains what rights you have to access or change your personal data. Please read the following carefully to understand our views and practices regarding your personal data.
1.1 We are a company registered in England and Wales under company number 05493237, with our registered address as set out below.
1.2 You can contact us as follows:
FAO: Data Team
Address: 11 Maiden Lane, London, WC2E 7NA, UK
Email: data@nimaxtheatres.com
2.1 Information that you provide to us
2.1.1 We may collect and process any information that you provide to us when you:
a) fill in forms on our website www.nimaxtheatres.com (“our Site”). This includes our email forms or when you request further services, information (for example, on accessibility) or theatre tickets from us;
b) register for an account with us;
c) book with or purchase theatre tickets and/or other products or services from us, whether that be online, over the telephone, or in person;
d) attend a show or event at one of our theatres;
e) apply for a job with us;
f) subscribe to our mailing lists or subscribe through us to a third party’s mailing lists;
g) report a problem with our Site;
h) contact or otherwise correspond with us, including to provide us with feedback, make a complaint or ask a question;
i) enter one of our promotions;
j) enter one of our competitions;
k) complete one of our surveys (which we may ask you to complete, although you do not have to respond to them).
2.1.2 The information you provide to us might include your name, delivery and billing address, email address, phone number and if you are creating an account you may also provide a password. If you are ordering theatre tickets you will also need to provide your card payment details but we will not permanently store your payment card details on our systems unless you choose to save your card details on your profile for future purchases in which case your card details will be stored by way of tokenisation. If you are submitting a job application you may also provide your CV, additional information about your academic and work history, references, and any other such similar or related information as may be supplied. We might also collect certain other specific information that you disclose to us, for example we may keep a record of any items you have lost so that we can contact you if we find them or we may make a record of any feedback you leave us.
2.2 Information that we collect about you
2.2.1 We may collect any information contained in any correspondence between us. For example, if you contact us using a form on our Site or by email or telephone, we may keep a record of that correspondence.
2.2.2 We may also collect information about you when you visit us. We collect images of you through the CCTV cameras that we operate at our theatres and head office and we may also record details of any accident you might have.
2.2.3 We may collect details of your visits to our Site, the resources that you access, and the device that you use to access our Site (including, but not limited to, traffic data, location data, weblogs and other communication data. This information may be collected by a third party website analytics service provider on our behalf and/or may be collected using cookies, pixels, and other web tools. For more information on this please read section 3 below.
2.3 Information that we receive from third parties
2.3.1 In certain circumstances, we will receive information about you from third parties. For example:
(a) we collect personal information from our website developers, IT support providers, payment services providers, and ticket agents (our ticket agents will pass your name to us and, if you correspond with them, they might refer this correspondence, including your email address and other relevant information, on to us); and
(b) if you are a job applicant we may contact your referees to provide information about you.
2.3.2 If you have entered into a prize draw or competition with a third party for tickets to one of our performances and you have indicated to them that you would like to receive our marketing emails and have provided your name and email address for this purpose, we will receive this data, add you to our marketing list (or provide you with tickets if you have won) and your data will be handled in accordance with this Policy and you will be able to unsubscribe at any time as set out in this Policy.
3.1 COOKIES.
3.1.1 We use cookies for system administration, to report aggregate information to our advertisers, and to ensure that you get the most out of our Site. A “cookie” is a small electronic file that collects information when someone visits a website. A cookie can identify the pages that are being viewed, and this can assist us to select the pages that the viewer sees. Some cookies only exist whilst viewers are online, but “persistent” cookies – which are not session-based – remain on the viewer’s computer, so that he or she can be recognised as a previous visitor when he or she next visits our Site. This allows us to collect information about a viewer’s browsing habits whilst on our Site, and this can be useful in assisting us to monitor and improve our services.
3.1.2 We do not store sensitive information such as account numbers or passwords in “persistent” cookies.
3.2 PIXELS AND OTHER WEB TOOLS.
3.2.1 In addition to using cookies, we might also use pixels and other web tools to collect information about your browsing activities whilst on our Site. In this respect the information that is provided is similar to the information supplied by cookies, and we use it for the same purposes.
3.3 The names of the cookies, pixels, and other web tools used on our Site and the purposes for which these are used are set out in the table below:
| Name | Purpose | Duration |
| atAccCookies | Cookie set by the UK cookie consent plugin to record that you accept the fact that the site uses cookies. | 30 days |
| wordpress_[hash] | On login, wordpress uses the wordpress_[hash] cookie to store your authentication details. Its use is limited to the admin console area, /wp-admin/ | 30 days |
| wordpress_logged_in_[hash] | After login, wordpress sets the wordpress_logged_in_[hash] cookie, which indicates when you’re logged in, and who you are, for most interface use. | 30 days |
| catAccCookies | Cookie set by the UK cookie consent plugin to record that you accept the fact that the site uses cookies. | 30 days |
| Wpe-auth | Used to determine whether the wp-engine webserver should deliver a new page build or the cached version. | 30 days |
| Wordpress_test_cookie | Used on sites built with WordPress. Tests whether or not the browser has cookies enabled | 30 days |
| Google Analytics: _utma, _utmb, _utmc, _utmz, | Used to collect information about how visitors use our site by collecting information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. | 30 days |
Third Party Ad Tracking
We often use tracking services to monitor the response from adverts we place on third-party websites. These services may use cookies and pixels to track visitors who have clicked through from these ads, data from which is used to assess the advert’s performance.
Pixels which are currently live on the Nimax Website are:
Name Purpose Duration
| Crimtan | Conversion tracking | N/A |
| Conversion tracking | N/A | |
| Pageviews | N/A | |
| Fifty Media | Conversion tracking | N/A |
| Flashtalking | Pageviews | N/A |
| Flashtalking | Conversion tracking | N/A |
| Sizmek | Conversion tracking | N/A |
| Google Ads | Conversion tracking | N/A |
| Google Ads | Pageviews | N/A |
| Google Ads | Remarketing | 60 days |
| Radium 1 | Conversion tracking | N/A |
| Spotlight | Conversion tracking | N/A |
| Quantcast | Conversion tracking | N/A |
| AffecTV | Pageviews | N/A |
| AffecTV | Conversion tracking | N/A |
| Iotec | Pageviews | N/A |
| Iotec | Conversion tracking | N/A |
| Ad You Like | Pageviews | N/A |
| Ad You Like | Conversion tracking | N/A |
3.3 Any information that we acquire about you using cookies, pixels or other web tools is subject to the same restrictions and conditions as any other information we collect about you.
3.4 Some sites linked to our Site and/or some of our advertisers may also use cookies, pixels, or other web tools that are set by other people such as advertising agencies, or the businesses to which the sites and/or the advertisements in question relate. We do not have access to any information that might be collected in this way (unless you consent to such information being passed to us), and, if you are concerned, you should contact the third party site and/or advertiser for more information.
3.5 You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. For more information about how to reject cookies using your internet browser settings please consult the “Help” section of your internet browser (or alternatively visit http://www.aboutcookies.org). However, please note that if you set your internet browser to reject cookies you may be unable to access certain parts of our Site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our Site.
4.1 Our company is located in the UK.
4.2 All information we collect about you is automatically transferred to our database and stored on our secure servers in the UK. CCTV footage is stored on site at the theatre it relates to.
4.3 The information that we collect from you may be transferred to, and stored at, a destination outside the UK or the European Economic Area (“EEA”) in the circumstances listed below and we will take all steps reasonably necessary to ensure that your information is adequately protected and processed in accordance with this Privacy Policy. In these cases, we rely on approved data transfer mechanisms to ensure your information is subject to adequate safeguards in the recipient country. If you are located in the UK or the EEA, you may contact us for a copy of the safeguards which we have put in place to protect your personal information and privacy rights in these circumstances.
4.4 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our Site; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.
5.1 We operate a policy of “privacy by design” by looking for opportunities to minimise the amount of personal information we hold about you and only to use your information in ways which are respectful of your rights. We use appropriate technological and operational security measures to protect your information against any unauthorised access or unlawful use, such as:
5.1.1 ensuring the physical security of our offices, theatres or other sites;
5.1.2 ensuring the physical and digital security of our equipment and devices by using appropriate password protection;
5.1.3 maintaining an internal data protection policy for, and delivering data protection training to, our employees; and
5.1.4 limiting access to your personal information to those in our company who need to use it in the course of their work.
5.2 We will retain your information for as long as is necessary to provide you with the services that you have requested from us or for as long as we reasonably require to retain the information for our lawful business purposes (such as for the purposes of exercising our legal rights), or for as long as the law otherwise permits.
5.3 We operate a data retention policy and look to find ways to reduce the amount of information we hold about you and the length of time that we need to keep it. For example:
5.3.1 we archive our email and paper correspondence regularly and destroy information older than 6 years unless we are required to retain it for evidential or legal purposes;
5.3.2 we retain information relating to orders, refunds and customer queries for as long as is reasonably necessary up to approximately 6 years unless we are required to retain it for evidential or legal purposes;
5.3.3 we retain CCTV footage for one month after the date of capture, although we may process footage for a longer period, for example if the footage is relevant to an investigation; and
5.3.4 we maintain a suppression list of email addresses of individuals who no longer wish to be contacted by us. So that we can comply with their wishes, we must store this information permanently.
6.1 We will use your information for the purposes listed below either on the basis of:
6.1.1 performance of your contract with us and the provision of our services to you;
6.1.2 your consent (where we request it);
6.1.3 our legitimate interests (see section 6.3 below);
6.1.4 complying with our legal obligations;
6.1.5 establishing, exercising or defending legal claims;
6.1.6 performing a task in the public interest; or
6.1.7 protecting your, or another person’s vital interests.
6.2 We use your information for the following purposes:
6.2.1 to ensure that your visit to our theatres runs smoothly – in particular to accommodate your needs, such as any accessibility requirements that you might have, to rebook you into another performance if you cannot attend the performance in question, or to contact you about any items you have reported lost or stolen (on the basis of our legitimate interest in providing you with a quality service, or, alternatively, on the basis of your consent where we have requested it);
6.2.2 to ensure your safety and security when you visit our facilities, including to assist you and make any necessary reports should you have an accident (on the basis of our legitimate interest of ensuring the safety of our audiences, or where necessary, to establish, exercise or defend legal claims, to perform a task in the public interest, or to protect your, or another person’s vital interests);
6.2.3 to provide you with access to our Site in a manner convenient and optimal and with personalised content relevant to you including sharing your information with our website hosts and developers (on the basis of our legitimate interest to ensure that content from our Site is presented in the most effective manner);
6.2.4 to carry out our obligations arising from any communications or bookings made between you and us or you and one of our third party service providers, including the provision to you by mail (if so requested) of theatre tickets purchased or won (including in conjunction with a third party offering, such as hotel accommodation) by you (on the basis of your consent where we have requested it, our legitimate interests in providing you with tickets, or, alternatively, on the basis of performing our contract with you);
6.2.5 to provide customer service and support (on the basis of our contract with you), to notify you about changes to our service, deal with enquiries or complaints about your visit or our Site and share your information with our website developer, IT support provider, delivery service provider, payment services provider as necessary to provide customer support (on the basis of our legitimate interest in providing the correct products and services to our Site users and customers);
6.2.6 to provide you with information about our news, theatrical productions, events, special offers, new website features, or other services which may be of interest to you, provided that we have the requisite permission to do so (either on the basis of your consent where we have requested it, or, alternatively, our legitimate interests to provide you with marketing communications where we may lawfully do so), and provided that you have not asked us to not contact you;
6.2.7to share your information with selected third parties, to enable them to contact you with information about things that may interest you (where we have your consent to do so), provided that you have not asked us not to share your data in this way;
6.2.8 to carry out, and share with third parties, aggregated and anonymised research and statistical analysis about general engagement with our Site (on the basis of our legitimate interest in providing the right kinds of products and services to our Site users and customers and to conduct marketing). We may, for example, perform statistical analyses of the behaviour of the users of our Site in order to measure interest in the various areas of our Site and to inform advertisers as to how many consumers have seen or “clicked” their advertising banners. This information, and any other general information about our users that we share with advertisers and other partners, will be always aggregated and anonymised;
6.2.9 to process any job applications you submit to us (on the basis of your consent where we have requested it, or, alternatively, our legitimate interests to consider job applications, or where we have a legal obligation to process certain information about our job applicants);
6.2.10 to protect, investigate, and deter against fraudulent, unauthorised, or illegal activity, including identity fraud (on the basis of our legitimate interests to operate a safe and lawful business, or where we otherwise have a legal obligation to do so); and
6.2.11 to enable us to comply with our policies and procedures and enforce our legal rights, or to protect the rights, property or safety of our employees, and share your information with our technical and legal advisors (on the basis of our legitimate interests to operate a safe and lawful business, or where we otherwise have a legal obligation to do so).
6.3 Where we refer to using your information on the basis of our “legitimate interests”, we mean our legitimate business interests in conducting and managing our business and our relationship with you, including the legitimate interest we have in:
6.3.1 personalising, enhancing, modifying or otherwise improving the services and/or communications that we provide to you, such as sending you marketing and serving you with advertising that is relevant and likely to be of interest to you;
6.3.2 detecting and preventing fraud and operating a safe and lawful business;
6.3.3 improving security and optimisation of our network, Site and services; and
6.3.4 confirming information that you provide to us in a CV or application, by reference to past employers and/or publicly available employment or business profiles.
6.4 Where we use your information for our legitimate interests, we make sure that we take into account any potential impact that such use may have on you. Our legitimate interests don’t automatically override yours and we won’t use your information if we believe your interests should override ours unless we have other grounds to do so (such as your consent, or a legal obligation we have). If you have any concerns about our processing please refer to details of “Your Rights” in section 8 below.
6.5 As we outline in section 8 below, you will have the right to object to our using your information for our legitimate interests. However, please keep in mind that your objection to this sort of processing may affect our ability to carry out the tasks that we have set out above.
6.6 COVID 19
6.6.1 In addition to the purposes described above, for any performances scheduled to take place during the Covid 19 pandemic, we may collect and process your given name, family name, email address, and ticket agent transaction ID.
6.6.2 The information referred to in section 6.6.1 above is required so that we can administer an advance check-in process using an online questionnaire that will be emailed to you in advance of the relevant performance (the “Check-In Process”). The Check-In Process is used to assist the NHS Track and Trace programme. We will also use the information referred to in section 6.6.1 for customer support purposes in relation to the Check-In Process.
6.6.3 Processing the information as described in sections 6.6.1 and 6.6.2 is necessary for us to comply with our legal obligations as well as our legitimate interests and the legitimate interests of others to support the public health efforts to tackle COVID-19.
6.6.4 The information referred to in section 6.6.1 above is provided to us by our ticket agents.
6.6.5 We will retain the information referred to in section 6.6.1 above for 21 days for the purposes of the NHS Track and Trace Programme. We do not however store and retain any information you submit to the online questionnaire referred to above.
6.6.6 Please see the Covid 19 Secure page on our website for more details regarding the measures we have put in place as part of our Covid-safe reopening plan.
7.1 In connection with the purposes and on the lawful grounds described above and in addition to the recipients of your information as described above, we may disclose your personal information to:
7.1.1 third parties we work with to prepare or send any communications to you, or to assist us in connection with any of our administrative or business functions (including for example, hosting or operating the website and our databases and site analytics);
7.1.2 third parties we work with to provide any of our products or services to you (including, for example, our ticket agents and other third parties we may partner with to provide competition prizes, such as accommodation providers where the prize includes third party hotel accommodation in addition to tickets to one of our shows);
7.1.3 our insurers if you have an accident while visiting one of our theatres;
7.1.4 any selected third party that you consent to our sharing your information with for marketing purposes;
7.1.5 in the event that we sell or buy any business or assets, to any prospective seller or buyer of such business or assets;
7.1.6 if Nimax Theatres Limited, or substantially all of its assets, is acquired by a third party, to that third party;
7.1.7 other third parties (including legal or other advisors, regulatory authorities, courts and government agencies) if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or if necessary to enable us to enforce or apply our “Terms and Conditions”, our “Ticketing Terms and Conditions” and other agreements, or to protect the rights, property, or safety of Nimax Theatres Limited, our subsidiaries, affiliates, employees or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction and disclosing CCTV images to our third party CCTV management company and/or certain bodies of authority such as the police and emergency services.
7.2 Where we do share your information with third parties, we will require such third parties to maintain appropriate security to protect your information from unauthorised access or processing, unless we have no ability to do so (for example, where we are sharing information with regulatory authorities or courts).
8.1 We shall comply with the following restrictions in relation to your personal information:
8.1.1 we shall not sell your personal information to anyone else; and
8.1.2 subject to the exceptions in sections 5 and 6 above, we shall not supply your personal data to anyone else so that they can use it for their own purposes.
9. YOUR RIGHTS
9.1 Overview of your rights
9.1.1 You have certain rights in respect of the information that we hold about you, including:
a) the right to be informed of the ways in which we use your information (we seek to do this in this Privacy Policy);
b) the right to ask us not to process your personal data for marketing purposes;
c) the right to request access to the information that we hold about you;
d) the right to request that we correct or rectify any information that we hold about you which is out of date or incorrect;
e) in certain circumstances, the right to ask us to stop processing information about you;
f) the right to lodge a complaint about us to the UK Information Commissioner’s Office (https://ico.org.uk/) or the relevant authority in your country of work or residence;
g) the right to withdraw your consent for our use of your information in reliance on your consent (refer to section 6 above to see when we are relying on your consent);
h) the right to object to our using your information on the basis of our legitimate interests (refer to section 6 above to see when we are relying on our legitimate interests);
i) the right to receive a copy of any information we hold about you in connection with the performance of our contract with you or on the basis of your consent (or request that we transfer this to another service provider) in a structured, commonly-used, machine readable format; and
j) the right to ask us to limit or cease processing or erase information we hold about you in certain circumstances.
9.1.2Please note that, notwithstanding these rights, we reserve the right to retain certain information for our own record-keeping and to defend ourselves against any claims. We may also need to send you service-related communications relating to your Site user account even when you have requested not to receive marketing communications.
9.2 How to exercise your rights?
9.2.1 You may exercise your rights above by contacting us using the details in section 1 of this Privacy Policy, or in the case of preventing processing for marketing activities also by checking certain boxes on forms that we use to collect your data to tell us that you don’t want to be involved in marketing.
9.2.2 Alternatively, if you would prefer not to contact us in this way, depending on the nature of your request, you may be able to do it yourself. For example:
a) You may update the details we hold about you by logging into your account via the “Account” icon on our Site (https://ticketing.nimaxtheatres.com/account/login) and editing your details in the Account Information section.
b) If you wish to remove yourself from our marketing circulation lists so that you do not receive our marketing emails, you may unsubscribe by scrolling to the bottom of an email received from us and clicking the ‘unsubscribe’ button or by updating your marketing preferences in the Account Information section which is accessed as set out in Clause 9.2.2a) above.
c) If you have purchased tickets for Harry Potter and the Cursed Child via our Site you can access your account via this link: https://www.harrypottertheplay.com/uk/five-ways-get-tickets/ selecting Nimax Theatres as your booking channel. (In order to get to the log in section, you will need to select a type of ticket). Once logged into your account you will be able to edit your details and you will be able to update your marketing preferences for receiving emails from us and for receiving emails from Harry Potter and the Cursed Child, London.
9.2.3 We will comply with your requests unless we have a lawful reason not to do so.
10. ACCESS TO YOUR INFORMATION
10.1 As outlined above, you have the right to access information held about you. In certain circumstances we may need to charge a fee to meet our costs in providing you with details of the information we hold about you; if this is the case we will inform you of this.
10.2 In order to make a request to access information we hold about you we encourage you to use our Data Subject Access Request Form however we will still accept your request if it contains the details required by the Form and you provide the forms of identification as set out in the Form.
11.1 Any changes we may make to our Privacy Policy in the future will be posted on this page. Any changes will come into effect the next time you engage with us after the changes have been made.
12.1 Questions, comments and requests regarding this privacy policy are welcomed and should be sent to data@nimaxtheatres.com.
This Privacy Policy was last updated on 24 November 2020.
NIMAX THEATRES LIMITED, 11 MAIDEN LANE, LONDON, WC2E 7NA.