PRIVACY POLICY
1. Introduction to Brass Bathtub:
Brass Bathtub is a Community Interest Company that makes performance and participatory work focused on nurturing and developing humanity through the tools of ritual, play, and universally shared moments in history. Our work encompasses profound outdoor performance, playful interactive theatre, and live nature-set musical immersion.
Brass Bathtub is committed to maintaining the appropriate confidentiality, integrity, and security of the personal data that it collects by complying with both the legal and ethical obligations for data protection and privacy (as required by the General Data Protection Regulations, May 2018). This policy sets out the principles Brass Bathtub adheres to when collecting personal data.
2. Personal data and privacy:
Personal data is any information relating to an identifiable individual.
Information collected by Brass Bathtub relates to the participants who take part in its activities/projects, individuals who enquire about those activities/projects, and other contacts. This information is collected to help the organisation deliver its activities/projects, understand the needs of participants and potential participants, monitor the organisation’s policy on equal opportunities and diversity, and meet the needs of funders.
Information is also collected on the workers (both paid and unpaid, i.e. sessional workers and volunteers) that help Brass Bathtub deliver its activities/projects.
3. What personal data is collected by Brass Bathtub:
Participants
We collect the following information about the participants:
Personal/contact information: names (including pseudonyms), gender, contact and address details, self-disclosed medical history
Photo, audio, and video
Correspondence: information relevant to specific enquiries
Other: any other information that is provided to the organisation
In all cases, individuals’ consent is sought (and, if agreed, a signature obtained) and information is provided as to why this information is collected, how will be used, how it will be held, and that it will not be shared with a third party.
Other contacts
In addition, Brass Bathtub collects information provided by individuals from related organisations and other stakeholders and contacts (including name, address, and contact details).
Brass Bathtub is committed to fair and transparent data collection processes and any individual requiring information as to where their data (including any public sources) originated may contact Brass Bathtub using the details provided below.
4. What do we do with personal data:
Brass Bathtub will use the contact details of participants to provide them with information regarding the project/activity in which they are enrolled.
From time to time, the anonymised personal details of participants in Brass Bathtub’s activities/projects will be reported to funders as part of Brass Bathtub’s contract of delivery, and for Brass Bathtub’s internal governance purposes.
Contact details of participants and individuals from related organisations and other stakeholders and contacts will also be used to provide news and information about Brass Bathtub and its activities. Individuals can opt out of receiving these notifications at any time by contacting Brass Bathtub using the details provided below.
5. Individuals’ rights concerning personal data:
Individuals whose personal data is collected by Brass Bathtub have certain rights in respect of that data, including:
Right to information and access
Individuals have the right to request access to the information that Brass Bathtub holds about them.
Rectification, erasure, and restriction
Brass Bathtub takes reasonable steps to ensure that the personal data it holds about individuals is accurate and up-to-date and the organisation will comply with any requests to rectify any inaccurate data that it may hold about an individual. Individuals have the right to ask Brass Bathtub to limit, cease, or erase the information that is held about them.
6. Sharing of personal data:
Brass Bathtub does not share personal data with third parties. It will, however, use anonymised personal data to report to funders as part of Brass Bathtub’s contract of delivery.
7. Data security:
Brass Bathtub will take appropriate technical and organisational measures to protect the personal data that is collected and stored against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure or access.
All personal data that is stored in electronic format on desktop computers/laptops will be password and firewall-protected. All personal data that is paper-based will be stored securely in locked filing cabinets along with any electronic information that is stored on external hard drives.
8. Retaining personal data:
Brass Bathtub will only retain personal data for as long as is necessary to provide its services or for as long as it is reasonably required to retain the information for its lawful business purposes or comply with a statutory or other legal requirement.
9. Data breaches:
In the event of any breach of Brass Bathtub’s systems impacting the security of individuals’ data, Brass Bathtub will inform the affected individuals at the earliest opportunity describing the nature of the breach, the possible consequences, and the measures being taken to remedy the situation following its procedures and applicable law.
10. Contacting Brass Bathtub:
Comments relating to this policy should be directed to info@brassbathtub.com
Date: 7th August 2024