Join our email list

Privacy Policy

Norfolk and Norwich Festival Trust (NNFT) is committed to protecting your privacy and personal information, and to be transparent about what information we hold and how we use it.

Collecting and processing personal data allows us to develop a better understanding of our audiences, participants and supporters. It allows us to provide you with timely and relevant information about the work that we present and to make important decisions about our programme of events and the opportunities that we create for people to engage with our work. As a registered charity it also helps us to engage with potential donors and supporters.

We will use any personal information that we collect about you in accordance with the General Data Protection Regulation and the Privacy and Electronic Communications Regulations 2003.



Norfolk and Norwich Festival Trust delivers Norfolk & Norwich Festival and manages Norfolk & Norwich Open Studios and Festival Bridge. NNFT is a registered charity in England and Wales (number 1164424) with a wholly owned trading subsidiary registered in England and Wales (number 230 8577 07). We are an Arts Council England National Portfolio Organisation and receive annual funding from Norwich City Council, as well as a number of district councils, trusts and foundations, individual donors and corporate supporters.



We collect various types of information in a number of ways:

Information that you give us. For example when you sign-up to our email or postal mailing lists; join as a supporter; make a donation; sign-up to take part in events or workshops; complete a survey; or contact us with a comment or complaint. 

Information about your interactions with us. For example, when we send you a mailing we may keep a record of this, and when we send you emails, we can see what you have opened and which links you have clicked.

Information from third parties. When you buy tickets and agree for our ticketing agent to share your details with us.

The information we hold about you may include:

  • your name
  • postal address
  • telephone number
  • email address
  • ticketing information
  • booking history
  • billing address information
  • direct debit instructions for memberships or donations
  • donation history / gift aid declaration
  • your preferences for how we communicate with you about our activities
  • what events and activities you have participated in
  • if you are under 18, the name of your parent or guardian
  • film and photography of you at public events, workshops or other activities
  • information that is available publicly

Special categories of personal data (previously referred to as sensitive personal data)
We do not usually collect sensitive personal data, but there may be occasions when we need to collect and store more information; for example we might need to collect an individual’s age and health information in order for them to take part in an event or workshop, or we might also record information about access requirements to help us provide the best service. For children under 16 we will always ask for the consent of a parent or guardian to collect this information.

Film and Photography
During the course of public performances, events and workshops we may take photographs and video to document events and for use on our digital platforms, printed materials and other promotional activity. This includes, but is not limited to, our website, social media channels, leaflets, posters and media releases. We will also share these images with relevant partners and artists relating to an event or activity to use for the same purposes. We will always put up signage at events to notify audiences if this is taking place.

If we are taking close-up images at public events we will endeavour to ask for an individual’s permission. If you are aged 16 or over we will ask for your verbal consent, for anyone under 16 we will ask for written permission from a parent or guardian.

At educational workshops and participation events we will always ask for written consent for anyone aged under 18 and adults at risk. When working with schools this may be acquired through permissions that they have already sought.



The above information is used to select and inform you of events or activities we think may be of interest to you and to support our work as a charity.

We use your data to:

  • provide you with information about events that you have booked for and contact you if there are any important changes
  • respond to comments or complaints that you have made, or provide any relevant information which you have requested
  • administer your ticket sale, membership or donation, including processing gift aid
  • ensure we know how you prefer to be contacted
  • create a profile of your interests and preferences so that we can send communications that are most relevant to you
  • send you information about our events, activities and news that we think will be of interest to you
  • occasionally send you information on behalf of other partners, including our artistic partners and business supporters

We may combine information you provide to us with anonymised information available from external sources (e.g. Census data) in order to gain a better understanding of our audiences and visitors. We use profiling and segmentation to ensure communications are relevant and timely, and to provide an improved experience to our customers and supporters. When building a profile we may analyse geographic, demographic and other information relating to you in order to better understand your interests and preferences in order to contact you with the most relevant communications.

For fundraising purposes, we may use third party wealth screening and insight companies to provide us with information about you and combine this with information that is publicly available (for example from LinkedIn or the Charity Commission).



There are certain circumstances under which we may disclose your personal information to third parties in order to fulfil our contract to you, to deliver our activities and to our subsidiary described above.

These third-party providers will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. These providers include ticketing agents, database software suppliers, our email distribution service and mailing houses. In these cases we require that these third parties comply strictly with our instructions and with data protection laws, for example around security of personal data.

We will share your personal information when required in order to comply with any legal obligation (for example to government bodies and law enforcement agencies).

Our website may contain links to and from the websites of other organisations. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

We may share some information, such as full postcodes and concessions purchased, with organisations such as The Audience Agency who will use the information to analyse and segment our audiences to help us plan and communicate better. They will also use the information to analyse ticket sales for national and regional research into patterns of arts attendance in England (for instance, comparison of sales trends over time and geographical comparisons).

Your personal data will not be shared with third parties to use for direct marketing and will never be sold on to any other agencies or companies.



Every email communication you receive from us will provide you with the opportunity to opt-out of receiving subsequent communications. You can also ask for your preferences to be updated at any time using the contact information below.

If you would like to opt-out of receiving postal information from us, you can do so using the contact information below.

If you have opt-ed out of receiving marketing or fundraising information from us, we may still use your personal information to contact you about a booking (for example to let you know if an event is cancelled or if there is a change to the programme).



Unless you ask us otherwise, we will continue to store your personal information. This allows us to maintain contact with you and ensure that any future bookings or engagement you have with us are linked back to one single record. You can ask for inaccuracies in your data to be corrected at any time using the contact details below.

Keeping your information up-to-date with our ticketing agent, Norwich Theatre Royal, and opting-in to allow them to share your information with us will also allow us to keep our record of your personal information and communication preferences as accurate and up-to-date as possible. You can update this information whenever you make a booking with them by phone or in person, or by logging into your account here.

We will clean our database periodically to ensure that we are keeping all of our records as up-to-date as possible.



We have safeguards in place to keep your personal information as secure as possible and make every endeavour to ensure that any third parties we use for processing your personal information do the same. We use a secured server which supports our email servers and any cloud-based file storage system. Information can only be accessed by authorised staff within our organisation and our staff are trained to understand the importance of keeping personal data secure. Our computers are safeguarded by anti-virus software and the regular changing of security passwords.



We may change this Privacy Policy from time to time. If we make any significant changes in the way we treat your personal information we will make this clear on our website or by contacting you directly.



You have the right to request a copy of all of the personal information that we hold about you, and to have any inaccuracies in this data corrected. In order to do this, please use the contact information below.

We will provide a copy of the information within one month of receipt of the request. This information will be provided free of charge (unless the request is deemed to be repetitive, unfounded or excessive).

We will process any requests for information to be updated or deleted within one month of receipt of the request.



Please contact us if you have any questions about this policy or our organisational Data Protection Policy, if you would like to ask for your information to be updated, for your communication preferences to be amended or for your information to be removed.


Write to Communications Department, Norfolk & Norwich Festival, Augustine Steward House, 14 Tombland, Norwich, NR3 1HF

Phone 01603 877750 and ask to be put through to the Communications Team

19 May 2018