Razzamataz Theatre Schools Ltd. (RTSL) Privacy Notice
Razzamataz Theatre Schools Ltd. (RTSL) Privacy Notice
This privacy notice tells you what we do with your personal information, how we make sure that what we do is lawful, how long we keep it and your rights as an individual. Wherever possible Razzamataz Theatre Schools Ltd (referred to as RTSL throughout this notice) will only collect, use and store information about you or your child that you have willingly provided. We aim to be open about collecting information and clear about what we will use it for.
This privacy notice applies to the site and all products and services offered by Razzamataz Head Office and franchises, including its app.
RTSL takes all industry advised precautions to protect any and all processed personal data.
Data Collection
We may collect personal identification information from you in a variety of ways, including, but not limited to, when you visit our site, register on the site, fill out a form, and in connection with other activities, services, features or resources we make available via our site or any of our franchises. You may be asked for, as appropriate, name, email address, mailing address, phone number. You may, however, visit our site anonymously. We will collect personal identification information from you only if you voluntarily submit such information to us. You can always refuse to supply personal identification information, except that it may prevent you from engaging in certain site or service-related activities. We do not store or track IP addresses with the exception of firewall blacklisting for security purposes.
Data Controller
The data controller is Razzamataz Theatre Schools Ltd.,
Razzamataz Head Office: Denise Gosney is the person responsible for data protection, and is contactable on [email protected], by phone at 07931 285439 or in writing to:
Razzamataz Theatre Schools Ltd, Unit 5 Marlborough Road Wrexham Industrial Estate Wrexham LL13 9RJ
Purpose of data processing
Data is processed for a variety of purposes and Razzamataz cannot use your personal data for any reason unless we have a lawful basis to do so. The following table lists our purposes and the lawful bases that we use for each purpose:
|
Purpose |
Lawful basis/bases |
|
Provision of requested services, including through our franchises |
The processing is necessary- for the performance of a contract to which the data subject is a party, or for the taking of steps at the request of the data subject with a view to entering into a contract |
|
Record keeping |
The processing is necessary for compliance with any legal obligations to which the data controller is subject, other than an obligation imposed by contract |
|
Responding to service-related queries |
The processing is necessary- for the performance of a contract to which the data subject is a party, or for the taking of steps at the request of the data subject with a view to entering into a contract |
|
Improving our services |
We have a legitimate interest in using your information. We may use feedback given to us. |
|
Improving customer service |
We have a legitimate interest in using your information. We want to develop a good relationship with you, and we may use feedback given to us. |
|
Processing payments |
The processing is necessary for compliance with any legal obligations to which the data controller is subject, other than an obligation imposed by contract |
|
Marketing |
We have a legitimate interest in using your information. (If we already have a relationship with you, we will not ask for your consent to send you a newsletter or informative email – we will just send it.) The data subject has given consent to the processing. (Where we have already asked for consent to market, we will continue to use the lawful basis of consent) |
|
Monitoring marketing effectiveness. |
We have a legitimate interest in using your information. We want to develop a good relationship with you or look at service uptake from our marketing. |
|
Running promotions, contests, surveys or other site features |
The data subject has given consent to the processing. |
|
Keeping records of bookings for our shows in various venues |
We have a legitimate interest in using your information. |
Special Category Personal Data
This includes information about race, ethnic origin, religion, health, sex life and sexual orientation.
These types of personal data require additional protection. This is because use of this data could create significant risks to the individual’s fundamental rights and freedoms. The presumption is that this type of data needs to be treated with greater care because collecting and using it is more likely to interfere with these fundamental rights or open someone up to discrimination.
Where we process special category data we do so because:
- The data subject (or person with parental authority) has given explicit consent to the processing of the personal data for one or more specified purposes.
- Processing is necessary to protect the vital interests of the data subject or another natural person where the data subject is physically or legally incapable of giving consent. (We need to know of any health issues that a child may have in order to help keep them safe.)
If you disagree with us using your personal data for one or more of our legitimate interests let us know in writing and we will consider whether to stop using it for that purpose.
How long do we keep your information?
We keep contact details for clients and supporters with whom we have/have had a working relationship and for organisations or individuals who contact us, for 15 years after the last contact.
All other personal data of service users is only stored for a period of 30 days past current use.
Personal data relating to financial transactions will be kept for six years
For more details see our retention schedule which is available on request.
Sharing your personal information
We do not sell, trade, or rent Users’ personal identification information to others.
We do share your personal data with third parties who perform services for us, we require them to take appropriate steps to protect your personal information, and only to use the personal information for the purpose of performing those specific services. The organisations that we use are:
|
Name of company/organisation |
The service they perform for us |
|
Creative Hutch |
Graphic Design services |
|
DMAC Media |
Website hosting & maintenance |
|
Carlisle Computer Systems |
IT provision & maintenance |
|
Microsoft & Google Ltd– (Gsuite, Adwords, Analytics) |
Systems |
|
Elevate Accountancy |
Accountants |
|
Various mobile providers (Each franchisee will use their own mobile provider. If you require this information please ask.) |
Mobile |
|
Club Manager |
Sales & Booking platform |
|
Go Cardless |
Direct Debit Payment System |
|
Facebook*, X*, Instagram*, Youtube*, LinkedIn* |
Social media platforms |
|
Coconut Creatives & Recipe Media |
Digital Marketing |
|
Take It Photography |
Photography |
|
1Five Events |
Videography |
|
Nettl.com |
Provision of templates for printing |
Our current business partners are
Platinum Wave*
Karen Miller Keeman Ltd*
The Stage*
The Shaftesbury Theatre*
Take us to the Magic*
Travelbound*
*Please be aware that these organisations are data controllers in their own right and we encourage you to read their privacy notices
We will never sell or distribute your personal information to any other third parties or make it public unless we have a legal obligation to do so.
Data is also passed to Local Council Authorities – A Body of Persons Information and Performance Application requires Names/Address/DOB
Transfers of personal data outside the EEA
Some of your personal data may be transferred outside the EEA (for example with use of Google). In order to ensure that this is safe Razzamataz ensures that there is a safeguard in place approved by the Information Commissioner’s Office (ICO). This is use of an approved standard contractual clause (SCC).
How we protect your information
We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorised access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our site or on other platforms.
Personal data exchange between the site and its Users happens over a SSL secured communication channel and is encrypted and protected with digital signatures. Additionally:
- Data may be anonymised and stored for longer periods to facilitate business review and development.
- Personal data stored online or offline is protected by password and encrypted.
- Data transmission occurs only, when necessary, only data required for the task is used, and transmission is conducted through SSL.
RTSL holds an internal Data Breach Policy and Procedure and will act accordingly in the event data is compromised.
Web browser cookies
Our site may use “cookies” to enhance User experience. Your web browser places cookies on your hard drive for record-keeping purposes and sometimes to track information about you. You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you do so, please note that some parts of the Site may not function properly.
Third party websites
Users may find advertising or other content on our site that links to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our site. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services will have their own privacy policies and customer service policies. Browsing and interaction on any other website, including websites which have a link to our site, is subject to that website’s own terms and policies.
Your Rights
- Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for processing your information.
- Your right to withdraw consent. Where we have asked for your consent to use personal data, you have the right to withdraw consent at any time. If withdrawal of consent is going to affect the service/s you receive from us we will tell you at the time. This request must be submitted electronically to [email protected]. The request will be also passed by RTSL to any 3rd party data processors. Razzamataz Theatre Schools Ltd will remove or anonymise all stored data from all systems within 7 working days. Should the right to withdraw consent relate to use of images please include as much information as you can, including URL Links in order to help with the request.
- Your right of access. You have the right to ask us for copies of your personal information. This right always applies.
- Your right to rectification. You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right always applies.
- Your right to erasure. You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing. You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing. You have the right to object to processing if we are able to process your information because it is in our legitimate interests, for statistical purposes or direct marketing purposes or is likely to cause or is causing damage or distress
- Your right to data portability. If you would like us to transfer your personal data electronically, we will do this. It only applies to information you have given us, which we hold electronically and where Razzamataz is the data controller.
- Your right in relation to automated decision making and profiling. Razzamataz does not use any of your personal data to make automated decisions however we do create profiles of our clients and supporters. You have the right to stop us doing this and can do so by contacting us in writing at the address given.
Right to complaint
Should you believe Razzamataz Theatre Schools Limited, including any of our franchises to have not acted in a fair, proper and safe manner regarding personal data we would like you to contact us in the first instance. We will explain how we have processed your personal information and if we have made a mistake will tell you how we will put this right.
If you are still dissatisfied, you may submit a complaint to the supervisory authority:
The Information Commissioner’s Office
Water Lane, Wycliffe House, Wilmslow, Cheshire SK9 5AF
Tel. 0303 123 1113
Website: https://ico.org.uk | https://ico.org.uk/make-a-complaint/
Changes to this privacy notice
This privacy policy may be updated at any time. When we do, we will post a notification on the main page of our site and revise the updated date at the bottom of this page. We encourage Users to frequently check this page for any changes, to stay informed about how we are helping to protect the personal information we collect.
Contacting us
If you have any questions about this privacy notice, the practices of this site, or your dealings with us related to your personal information, please contact us at:
Razzamataz Theatre Schools Ltd
Unit 5 Marlborough Road, Wrexham Industrial Estate, Wrexham, United Kingdom, LL13 9RJ
07931 285439 | [email protected]
This document was last updated on 27/03/2025