Privacy Policy

Who We Are

The Alhambra Theatre, Dunfermline, is the data controller for the personal information described in this policy. That means we decide what information is collected about you and what happens to it.

Our registered company name and number are
ALHAMBRA THEATRE LIMITED
Company number SC352227
4a Glenfinlas Street, Edinburgh, Scotland, EH3 6AQ

We are registered with the ICO under Alhambra Theatre Limited (Reg. ZC221683)

This policy explains what we collect when you buy a ticket, use this website, contact the box office or sign up to hear from us — and what you can ask us to do about it.

Information We Collect

We collect only what we need in order to sell you a ticket and keep you informed about your booking:

• Your name
• Your address
• Your email address
• Your contact telephone number
• Payment card details — encrypted for processing, and not stored in our systems
• Your booking history — which performances you have booked
• Access requirements, where you choose to tell us, so that we can seat you appropriately

When you use this website we also collect information about the visit itself — the pages you look at, the links and buttons you press, the type of device and browser you are using, and roughly which part of the country you are in. Almost none of this is collected unless you agree to it first. The Cookies section below explains what is collected and how to refuse it.

We do not ask for information we have no use for, and we do not knowingly collect information directly from children — tickets for children are booked by an adult.

How We Collect It

We collect information in three ways:

• Directly from you — when you book at the box office, over the telephone, or complete a form on this website
• From our ticketing partners — where you book through Ticketmaster or another agency selling on our behalf, they pass us the booking details we need to admit you and to contact you if a performance changes
• Automatically as you use this website — see the Cookies section below

Why We Use It, and Our Lawful Basis

Under UK GDPR we must have a lawful basis for using your information. Ours are set out below.

What we do	Why	Lawful basis
Process your booking	To take payment, issue tickets and admit you to the performance	Performance of a contract
Email you about your booking	Confirmations, reminders, and notice of a cancellation, rescheduling or change of programme	Performance of a contract
Answer your queries	To help with a booking, payment or refund	Performance of a contract
Meet access requirements	To seat you appropriately and arrange any assistance you need	Consent
Send you our mailing list	To tell you about upcoming shows and announcements	Consent — you opt in, and can opt out at any time
Understand how this website is used	To see which pages and which shows people look at, so that we can improve the site	Consent — you choose this on our cookie banner
Advertise our shows on Facebook and Instagram	To promote our programme to people likely to be interested, and to see which adverts lead to bookings	Consent — you choose this on our cookie banner
Sales and audience analysis	To understand what our audiences book, so that we can programme better	Legitimate interests
Keep financial records	Accounting, tax and audit	Legal obligation

We do not sell your personal information to anyone, and we do not use it to make automated decisions about you.

Who We Share It With

We share your information only where it is necessary:

• Ticketmaster and other ticketing agencies, to process bookings made through them
• Visiting companies and promoters, where a particular performance requires it — a guest list or an access booking, for example. This is limited to what they need
• Our payment processor, to take payment securely
• Universal Computing Ltd, who build and maintain this website
• Microsoft Corporation, who provide our email
• Google, who provide the analytics that tell us how this website is used, where you agree to analytics cookies
• Meta Platforms, who run Facebook and Instagram, where you agree to marketing cookies — see Advertising on Facebook and Instagram below
• The police or other authorities, where we are legally required to do so

Everyone we share information with is required to protect it, and may only use it for the purpose we provided it for. The one exception is Meta, which also uses what it receives for its own purposes; that is explained below.

Sending Information Outside the UK

Some of the companies we rely on are based outside the United Kingdom, mainly in the United States. Google, Microsoft and Meta Platforms are the main ones.

Where your information goes outside the UK, we rely on the safeguards that UK data protection law requires — either a decision by the UK government that the receiving country protects information properly, or approved standard contract terms, together with the further protections the provider has in place.

You can ask us for details of the safeguards that apply to a particular transfer using the contact details at the end of this policy.

How Long We Keep It

We keep your information only for as long as we need it.

Typically, booking and financial records are kept for six full financial years to meet accounting and tax requirements, mailing list details until you unsubscribe, and general enquiries for a short period after they are resolved.

Information collected by our website analytics is kept for 14 months and then deleted automatically. Information held by Meta for advertising is kept according to Meta’s own retention periods, which are set out in its privacy policy.

When we no longer need your information, we delete it or destroy it securely.

How We Keep It Safe

We comply with our obligations under UK GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining unnecessary data; by protecting it from loss, misuse, unauthorised access and disclosure; and by ensuring that appropriate technical measures are in place.

Payment card details are encrypted for processing and are never stored in our systems. This website is served over a secure (HTTPS) connection.

No system can be guaranteed completely secure. If a breach occurs that is likely to affect your rights, we will tell you and the Information Commissioner’s Office, as the law requires.

Marketing and the Mailing List

Joining our mailing list is entirely optional. You will be asked whether you would like to join — we will not add you simply because you bought a ticket.

If you do join, we will email you about upcoming shows, on-sale dates and theatre news. Every email includes an unsubscribe link, and you can also ask the box office to remove you at any time. Unsubscribing takes effect immediately and does not affect any booking you have already made.

This section is about email. Advertising on social media is separate, and is covered next.

Advertising on Facebook and Instagram

We advertise our shows on Facebook and Instagram, which are run by Meta Platforms. To do that well — and to avoid spending money showing adverts to people who have already booked — we use a small piece of Meta’s code on this website, known as the Meta Pixel.

It runs only if you agree to marketing cookies. If you refuse, or simply ignore the banner, it does not load at all and this website sends nothing to Meta.

If you do agree, it tells Meta:

• that you visited this website, and which pages you looked at
• which show you were reading about
• whether you pressed a booking, box office or Royal Box button

It does not tell Meta your name, your address, your email address, your telephone number or your payment details.

Meta uses this to show you our adverts, to show our adverts to people whose interests look similar to yours, and to tell us how many bookings our advertising led to. What comes back to us is totals and audience sizes — never a list of who did what.

The same code is used on the ticketing pages where you complete your purchase, so that a sale can be matched to the advert that led to it.

For this, we and Meta are joint data controllers. We are jointly responsible for collecting the information described above and sending it to Meta. Once Meta has it, Meta alone decides what else it does with it and is responsible for that. Meta’s own privacy policy explains how it uses information, and your Facebook or Instagram settings let you control the adverts you see.

The pixel does not run on the in-theatre pages used by audiences during a performance, on our staff pages, or on our job vacancy pages.

To stop it at any time, change your choice in the cookie preferences on this site.

Cookies

Cookies are small files that a website stores on your device. This site uses them to work properly, to understand how the site is being used, and to advertise our shows.

Type	What it does	Can you refuse it?
Strictly necessary	Makes the site work — page delivery, security, remembering your cookie choices, and keeping staff signed in	No — the site cannot function without these, and they do not require consent
Performance and analytics	Tells us which pages are visited and how people move through the site, so we can improve it. Reported in totals, not used to identify you	Yes — these are off until you agree
Functional	Remembers choices such as the filters you have applied on the What’s On page	Yes — these are off until you agree
Marketing	Lets us advertise our shows on Facebook and Instagram and see which adverts lead to bookings. Set by Meta Platforms — see Advertising on Facebook and Instagram above	Yes — these are off until you agree
Third party	Set by embedded content such as video players, and by our ticketing partner when you follow a booking link	Yes — though embedded content may then not work

When you first visit, a banner asks which of these you are happy with. Strictly necessary cookies are set either way. Nothing else is set until you choose, and refusing is as easy as agreeing.

You can change your mind at any time using the cookie preferences on this site. Withdrawing your agreement is as straightforward as giving it, and takes effect immediately.

The preferences panel lists every cookie currently in use, who sets it and how long it lasts. The main ones that are not strictly necessary are:

Cookie	Set by	What it does	How long it lasts
_ga and _ga_ followed by a code	Google	Tells Google Analytics whether you are a new or returning visitor, and keeps track of a single visit	2 years
_fbp	Meta Platforms	Identifies your browser so that our adverts can be shown to you and measured	3 months
_fbc	Meta Platforms	Records that you arrived from one of our adverts, so that a booking can be credited to it	3 months

Where your browser allows it, Meta may also set cookies on its own facebook.com and instagram.com addresses.

You can block or delete cookies in your browser settings at any time. Doing so may stop parts of this site working as intended.

Your Rights

Under UK GDPR you have the right to:

• Be told what we do with your information — which is what this policy is for
• Ask for a copy of the information we hold about you
• Have it corrected if it is wrong or incomplete
• Ask us to delete it, where we have no continuing reason to keep it
• Ask us to restrict how we use it
• Object to us using it for our legitimate interests, or for marketing
• Ask for it to be transferred to you or to another organisation in a portable format
• Withdraw your consent at any time, where consent is our basis for using it

To exercise any of these, contact us using the details below. We will respond within one month, and there is normally no charge.

For cookies, analytics and advertising, the quickest route is the cookie preferences on this site, which change or withdraw your choices straight away.

Changes to This Policy

We may update this policy — if we begin using a new system, for example, or if the law changes. The date at the top of this page shows when it was last updated. Where a change materially affects how we use your information, we will say so rather than simply amending the page.

Contact Us and How to Complain

For anything to do with this policy or your information, contact the box office:

• Telephone: 01383 733666
• Email: info@alhambradunfermline.com
• In person or by post: Alhambra Theatre Box Office, Lower Mall, Kingsgate Shopping Centre, Dunfermline

If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.