Privacy Policy

Privacy Policy
Friends of Boston Music Centre | Registered Charity No. 1207228
Haven High Academy, Marian Road, Boston, PE21 9HB, United Kingdom
This Privacy Policy explains how Friends of Boston Music Centre collects, uses, stores and protects personal information when people use the website, create an account, buy tickets, make donations, contact us or opt in to receive event and fundraising updates.
1. Who we are
Friends of Boston Music Centre is a registered charity in England and Wales, charity number 1207228. Our website is www.bostonmusiccentre.co.uk.
Our published address is Haven High Academy, Marian Road, Boston, PE21 9HB, United Kingdom.
For privacy, data protection and general enquiries, email vanessa.hobart@lincolnshire.gov.uk.
2. Personal information we collect
We may collect and store the following information: name, email address, phone number, address, account password, event history, order history, ticket history, donation history, payment references, customer service messages, email correspondence and account preferences.
We do not store payment card details. Online card payments are processed through Square using Square's secure payment systems.
3. How we collect information
We collect information when a person creates an account, buys or holds tickets, makes a donation, signs up for marketing, contacts us, requests a refund, attends an event or uses the website.
Some information may be created automatically by the ticketing platform, such as order references, booking history, login/session data and essential operational logs.
4. Why we use personal information
We use personal information to create and manage customer accounts; process ticket bookings and orders; deliver ticket emails, PDF receipts and PDF QR code tickets; provide updates about tickets, orders, event changes, cancellations or refunds; manage donations and issue donation receipts; answer enquiries and complaints; maintain the safety and security of the website; keep financial and charity records; and send event or fundraising marketing where a customer has actively opted in.
5. Lawful bases for processing
We generally process account, order and ticket information because it is necessary to provide the requested service or take steps before providing that service.
We process accounting, donation and charity records where this is necessary to comply with legal obligations or to manage the charity responsibly.
We process limited operational and security information where this is necessary for our legitimate interests in running a secure and reliable ticketing website.
We send marketing emails only where the customer has actively opted in, and customers may opt out at any time through their account or by emailing us.
6. Marketing communications
Friends of Boston Music Centre may use customer contact details to send direct marketing about upcoming or future Friends of Boston Music Centre events or fundraising only where the customer has opted in.
Marketing will primarily be by email. Customers can opt out through their account or by emailing us at any time.
Operational messages about tickets, bookings, payments, event changes, cancellations, refunds or customer service are not treated as marketing and may still be sent where necessary.
7. Payment processing
Online payments are processed by Square. Payment details are entered into Square's secure payment flow and are handled directly by Square. Friends of Boston Music Centre does not store full card numbers or card security codes.
Square may provide us with transaction references, payment status information, receipts, refund information and limited details needed to reconcile payments and orders.
8. Who we share information with
Friends of Boston Music Centre will not pass on, sell or share customer personal details with any third party for that third party's marketing, solicitation or unrelated purposes.
We may use trusted service providers where necessary to operate the website and ticketing system, including Square for payment processing, website hosting providers, email delivery services including SMTP services and providers such as Resend where used, IT support providers and professional advisers.
We may disclose information where required by law, regulation, safeguarding requirements, court order, public authority request or charity governance obligations.
9. How long we keep information
We keep customer account records while the account remains active and for a reasonable period afterwards in case the customer needs access to order history or we need to resolve a query.
Ticket, order, donation, accounting and refund records may be kept for as long as required for charity, tax, accounting, audit and legal purposes.
Marketing preferences are kept until the customer changes them or asks us to remove them. We may keep a suppression record to make sure we do not send marketing to someone who has opted out.
10. Security
We take reasonable technical and organisational steps to protect personal information, including account password protection, secure payment processing through Square and access controls for administrative users.
No website or email system can be guaranteed completely secure, so customers should use strong passwords and keep their account details confidential.
11. Children and young people
Tickets may include age categories such as Adult 16+, Child 6-15 Years, Infant 0-5 Years and Concession 65+. Account creation and purchases should normally be completed by an adult or by a person with appropriate permission.
Where information relates to children attending events, it is used only for the booking, attendance, safeguarding, operational or legal purposes connected with the event.
12. Your rights
Individuals may have rights to request access to their personal information, correction, deletion, restriction, portability, objection to certain processing and withdrawal of consent where processing is based on consent.
To make a request, email vanessa.hobart@lincolnshire.gov.uk. We may need to verify identity before responding.
13. Complaints
Privacy complaints should be sent to vanessa.hobart@lincolnshire.gov.uk.
Individuals also have the right to complain to the UK Information Commissioner's Office if they are unhappy with how their personal information has been handled.
14. Changes to this policy
We may update this Privacy Policy from time to time. The current version will be published on the website with a version date.