Privacy Notice
This page sets out the details of IOU’s privacy notice in relation to information collected about you.
Who we are:
IOU, Dean Clough Mills, Halifax, HX3 5AX
We are registered as a charity, and our registration number is: 273527
We are registered as a data controller under the Data Protection Act 1998, and our Data Protection Register number is: Z487487X
Any electronic communications will be made in accordance with the Privacy and Electronic Communications Regulations (PECR)
What information do we collect about you?
We collect the personal data that you may volunteer as part of booking tickets for an IOU production, online purchases (e.g. merchandise, donations etc), attendance at IOU events, donation forms, e-newsletter sign-ups and visitor surveys.
Personal information we collect may include:
• your name, title, gender and date of birth;
• postal address, email address and phone number;
• family and spouse/partner details, relationships to other donors and/or IOU Friends;
• current interests and activities.
We will also collect and hold information about any contact you have with us as a visitor, audience member or supporter of IOU, and may consist of details of:
• ticket purchase and event attendance;
• online retail purchases;
• contact preferences;
• gift information, including Direct Debit bank details where applicable;
• Gift Aid status;
• details of correspondence sent to you, or received from you;
• employment information and professional activities;
• where relevant, selected media coverage;
• any other information provided by yourself at the request of IOU.
When we ask you to provide your personal information we will let you know why we are asking, and how we will use your data, by directing you towards this notice.
What we do with your information
Depending on your relationship with IOU, and the preferences you have indicated, data we hold may be used by us for the following purposes:
• Send you promotional, marketing or fundraising information by post, telephone or electronic means.
These types of communications can include:
- Informing you of other products, services or events related to IOU, such as exhibitions, tours, events, workshops or offers.
- News and updates about IOU, such as What’s On guides, and marketing or supporter e-newsletters.
- Information about specific IOU fundraising projects, including occasional targeted requests to consider giving financial support to IOU, or to ask you to consider supporting us in other ways.
- Other relevant communications based upon your relationship with IOU.
- Research, to help us understand our supporters, donors and potential donors, including gathering information from publicly available resources to give an insight into your philanthropic interests and ability to support IOU.
- To send you surveys, and for audience research purposes.
- Tools may be used to monitor the effectiveness of our communications with you, including email tracking, which records when an e-newsletter from us is opened and/or how many links are clicked within the message. The data from this tracking is generally used in an aggregated and anonymised form* (see appendix 1).
- We may analyse anonymised data to learn about audience behaviour within our work and use this information to inform future work and projects.
There are some IOU donation communications that we are required to send regardless of your contact preferences. These are essential communications, deemed necessary to fulfil our contractual obligations to you. This would include Direct Debit confirmations and advanced notices, thank you letters, benefits such as renewal reminders, Gift Aid confirmation letters and querying electronic payments with you.
We may use the information we collect to help us to understand your interests and preferences. We may also use publicly available information about you from sources such as public registers, online (including records that you have made public on social media) or the electoral roll. This information helps us to communicate with you in a relevant way, in particular when we are approaching you about potential philanthropic support. This enables us to raise funds more effectively.
Who we might share your information with:
We do not disclose personal data to any third parties or external organisations, other than data processors carrying out work on our behalf. Examples of such data processors would be bulk email distribution services and audience research agencies. Any such companies are acting as approved data processors for IOU, and we retain full responsibility for your personal data. Data processors will act only on our instructions. We may occasionally need to transfer your personal information overseas, for instance to our bulk email distributor, MailChimp. Where this is necessary, this may be to countries or territories around the world.We are required to ensure any transfers of data will be done securely, in accordance with best practice, and in compliance with the General Data Protection Regulation (2018). Your data will never be sold or passed to any third party for any other purpose.
How we keep your information secure:
We have implemented security procedures, rules and technical measures to protect the personal data that we have under our control from:
- unauthorised access;
- improper use or disclosure;
- unauthorised modification.
All our employees and data processors, who have access to, and are associated with the processing of personal data, are legally obliged to respect the confidentiality of our visitors’ and supporters’ personal data.
Your right to object and/or opt-out:
In all of the above cases we will always keep your rights and interests at the forefront. You have the right to object to any of this processing at any time. If you wish to do this, please use the contact details below. Please bear in mind that if you object, this may affect our ability to carry out tasks above that are for your benefit. How can I access the information about me, and correction of information?
You can opt-out of your data being utilised in any way by contacting hello@ioutheatre.org
You can ask us if we are keeping any personal data about you and you can also request to receive a copy of that personal data – this is called a Subject Access Request. To make a Subject Access Request you will need to provide adequate proof of identity such as a copy of your passport, birth certificate or driving licence before your request can be processed. There may also be a fee of up to £10 depending on the volume of work required. Please try to be as clear as possible about the information you are seeking.Once we have received your Subject Access Request, the agreed fee and proof of identity, you will receive a response from us within 40 days and you will be able to get copies of any information we hold on you. However, exemptions to disclosure may apply in some circumstances.
Subject Access Requests should be sent to:
IOU, Dean Clough Mills, Halifax, HX3 5AX
Email: hello@ioutheatre.org
Cookies:
We use cookies and similar technologies on our website to improve your experience, understand how our site is used, and provide relevant information. Cookies can be necessary, analytics, or marketing. Full details about the cookies we use, the purposes, and how to manage or withdraw your consent, please see our Cookie Policy. By continuing to use our website, you agree to the use of cookies in accordance with that policy
Changes to our privacy notice:
We regularly review our privacy notice, and may make changes time to time. Any changes made will be posted to this page, and will apply from the time we post them. This privacy notice was last updated on 05 May 2026.
How to contact us:
If you have any comments on our privacy notice, or information we hold about you please contact us:
by email to hello@ioutheatre.org
or write to us at IOU, Dean Clough Mills, Halifax, HX3 5AX
Appendix 1
Anonymisation is the process of turning data into a form which does not identify individuals and where identification is not likely to take place. This allows for a much wider use of the information.