Privacy Policy

UPS AND DOWNS THEATRE GROUP

WEBSITE PRIVACY POLICY

Last updated: 20 September 2026
Effective from: 20 September 2026

​

1. Who we are

​

Ups and Downs Theatre Group (“Ups and Downs”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit or use the Ups and Downs website.

Data Controller: Ups and Downs Theatre Group
Contact: upsanddownstheatre@googlemail.com
Postal address: 8 Douglas Street, Hamilton, Lanarkshire ML3 0BP

If you have any questions about how we use personal information, please contact us using the details above.

​

2. What information do we collect?

​

The information we collect depends on how you use our website.

We may collect:

• your name;

• email address;

• information you provide when contacting us;

• information submitted through website forms;

• information provided when making an enquiry;

• information relating to volunteering, membership or participation where collected through the website;

• information relating to fundraising or donations where applicable;

• photographs or other information you choose to provide;

• technical information about your device and use of our website; and

• information collected through cookies or similar technologies.

We will only collect information that is relevant and necessary for the purpose for which it is being collected.

​

3. Information you provide to us

​

You may provide personal information when you:

• contact us through the website;

• complete an enquiry or contact form;

• ask about joining Ups and Downs;

• enquire about volunteering;

• enquire about performances, workshops or events;

• sign up for communications;

• make a donation or fundraising enquiry;

• provide feedback; or

• otherwise communicate with us through the website.

We will use this information for the purpose for which you provide it and for related legitimate purposes were permitted by law.

​

4. How we use your information

​

We may use personal information to:

• respond to enquiries;

• communicate with you;

• provide information about Ups and Downs;

• administer enquiries about membership or participation;

• administer volunteering enquiries;

• organise activities and events;

• manage fundraising and donations;

• maintain and improve our website;

• keep appropriate records;

• protect the security of our website and systems;

• investigate complaints or concerns;

• comply with legal and regulatory obligations; and

• protect the rights, safety and wellbeing of individuals.

We will not use your personal information for purposes that are incompatible with the purpose for which it was collected without an appropriate lawful basis.

​

5. Our lawful basis for using personal information

​

Data protection law requires us to have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

​

Consent

Where you have actively agreed to a particular use of your information.

You can withdraw consent at any time where consent is the lawful basis for processing.

​

Legitimate interests

We may use personal information where this is necessary for our legitimate interests as a charitable theatre group, provided that those interests are not overridden by your rights and freedoms.

For example, this may include responding to enquiries, administering our website, maintaining appropriate records and communicating with people who have contacted us.

​

Contract

Where processing is necessary to take steps at your request before entering into a contract or to perform a contract.

Legal obligation

Where we need to process information to comply with a legal or regulatory obligation.

 

Vital interests

In limited circumstances, information may be processed where necessary to protect someone’s vital interests.

We will identify the appropriate lawful basis for the particular processing activity.

​

6. Special category information

​

We generally do not ask website visitors to provide sensitive information through the website.

However, some enquiries may contain information about health, disability or other special category information if you choose to provide it.

If you provide such information, we will only use it where there is a lawful basis and an appropriate condition under data protection law.

Please do not provide sensitive personal information through a general website contact form unless it is necessary for your enquiry.

If you need to provide sensitive information to Ups and Downs, we may provide an alternative and more secure method of doing so.

​

7. Children’s information

​

Ups and Downs recognise that children and young people may visit our website.

We take particular care when processing children’s personal information.

Our website is not intended to encourage children to provide personal information unnecessarily.

Where we collect information relating to a child or young person, we will only collect and use information that is necessary for the relevant purpose and will apply appropriate safeguards.

Where appropriate, we will provide information in a clear and accessible form.

​

8. Photographs and videos

​

Our website may contain photographs and videos relating to Ups and Downs activities, performances, workshops, fundraising events and other activities.

Where photographs or videos contain identifiable individuals, we will consider the appropriate lawful basis for their use and will take particular care where children or adults requiring additional support are involved.

If you believe that a photograph or video on our website raises a privacy concern, please contact us using the details at the end of this policy.

​

9. Information we receive from other sources

​

In some circumstances, we may receive information about you from another person or organisation.

For example, this could occur where someone contacts us on your behalf or provides information necessary for the administration of an activity or event.

Where we obtain personal information from another source, we will handle it in accordance with applicable data protection requirements and provide privacy information where required.

​

10. Who we share information with

​

We do not sell personal information.

We may share personal information where necessary and lawful with:

• trustees and authorised members of the Ups and Downs team;

• volunteers or contractors who need the information to carry out their role;

• website hosting and technical service providers;

• email or communication service providers;

• event or venue providers where necessary;

• professional advisers;

• insurers;

• payment or donation providers where applicable;

• regulators or public authorities where legally required;

• emergency services where necessary; and

• other organisations where there is a lawful basis for sharing.

We will only share information that is relevant and necessary for the particular purpose.

​

11. Third-party services

​

Our website may contain links to or use services provided by third parties.

These may include, for example:

• social media platforms;

• video hosting services;

• ticketing or booking services;

• donation platforms;

• payment providers;

• website analytics services; and

• website hosting or technical service providers.

When you follow a link to another website, that website will have its own privacy policy and terms.

We are not responsible for the privacy practices of third-party websites.

Where third-party services use cookies or similar technologies on our website, the relevant cookie requirements will apply.

​

12. Cookies

​

Our website may use cookies and similar technologies.

Cookies are small files or pieces of information stored on your device when you visit a website.

Some cookies are strictly necessary for the website to operate.

Other cookies, such as analytics, advertising or tracking cookies, may require your consent.

The ICO states that website operators must provide clear information about cookies and generally obtain consent before using non-essential cookies or similar technologies. Continuing to browse a website does not itself constitute valid consent. 

We will therefore:

• identify the cookies and similar technologies used by our website;

• explain what they do;

• identify relevant third parties;

• obtain consent where required;

• avoid setting non-essential cookies before the required consent has been obtained; and

• provide a way for users to change or withdraw their cookie choices.

• ​

Our cookies

Essential cookies

​

These are necessary for the website to function and may be used without consent where the relevant exemption applies.

​

Analytics cookies

Local Website Analytics only.

​

Marketing/social media cookies

N/A

​

Other cookies

N/A

​

13. How long we keep information

​

We will only retain personal information for as long as necessary for the purpose for which it was collected, or for longer where we have a legal, regulatory or legitimate reason to do so.

For example, information submitted through a general enquiry form will normally be retained only for as long as reasonably necessary to deal with the enquiry and maintain appropriate records.

Different information may need to be retained for different periods.

When information is no longer required, we will securely delete, destroy or anonymise it where appropriate.

​

14. Keeping your information secure

​

We take reasonable and appropriate technical and organisational measures to protect personal information from:

• unauthorised access;

• accidental loss;

• misuse;

• alteration;

• disclosure; and

• destruction.

Access to personal information is restricted to people who have a legitimate reason to access it.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

​

15. Your data protection rights

​

Depending on the circumstances, you may have rights including:

• the right to be informed about how we use your information;

• the right to access your personal information;

• the right to have inaccurate information corrected;

• the right to request erasure in certain circumstances;

• the right to request restriction of processing in certain circumstances;

• the right to object to certain processing;

• the right to data portability in certain circumstances; and

• the right to withdraw consent where we rely on consent.

These rights are subject to certain legal conditions and exemptions, so they do not necessarily apply in every situation.

The ICO confirms that privacy information should explain people’s rights and how they can exercise them. 

​

16. How to exercise your rights

​

If you wish to exercise any of your data protection rights, please contact:

​

Data Protection Lead
Ups and Downs Theatre Group
Email: upsanddownstheatre@googlemail.com
Address: 8 Douglas Street, Hamilton, Lanarkshire ML3 0BP

We may need to verify your identity before providing personal information or acting on a request.

We will respond within the applicable statutory timeframe.

​

17. Marketing communications

​

If you choose to receive marketing or promotional communications from Ups and Downs, we will use your information to send the communications you have agreed to receive or where another lawful basis permits us to do so.

You can ask us to stop sending marketing communications at any time.

We will not require you to consent to marketing as a condition of using a service where consent is not genuinely necessary.

Electronic marketing is also subject to the Privacy and Electronic Communications Regulations (PECR), so the Group will comply with applicable requirements when sending marketing emails, texts or other electronic communications. 

​

18. Links to other websites

​

Our website may contain links to external websites.

These websites are outside our control and are governed by their own privacy policies.

We recommend checking the privacy information of any external website before providing personal information.

​

19. Social media

​

Ups and Downs may operate social media accounts.

When you interact with our social media pages, the relevant social media platform may collect and process information about you in accordance with its own privacy policy.

We may also receive information about interactions with our social media content.

We will use information we receive through social media only where we have an appropriate lawful basis.

​

20. International transfers

​

Some of the service providers used by our website may process information outside the UK.

Where personal information is transferred internationally, we will ensure that the transfer is made in accordance with applicable UK data protection requirements and that appropriate safeguards are used where required.

​

21. Data breaches

​

If we become aware of a personal data breach involving information collected through our website, we will assess the incident and take appropriate steps to contain and investigate it.

Where required by law, we will notify the Information Commissioner’s Office and affected individuals.

​

22. Complaints

​

If you have a concern about how Ups and Downs have handled your personal information, please contact us first:

Email: upsanddownstheatre@googlemail.com

We will investigate your concern and seek to resolve it.

You also have the right to complain directly to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office
Website: Information Commissioner's Office⁠

​

23. Changes to this Privacy Policy

​

We may update this Privacy Policy from time to time to reflect:

• changes to our activities;

• changes to our website;

• changes to the way we process personal information;

• changes in technology;

• changes in data protection legislation; or

• changes to regulatory guidance.

The latest version will be published on this website.

​

Last updated: 20 September 2026

​

24. Contact us

​

If you have any questions about this Privacy Policy or how Ups and Downs handles’ personal information, please contact:

​

Ups and Downs Theatre Group
Email: upsanddownstheatre@googlemail.com
Postal address: 8 Douglas Street, Hamilton, Lanarkshire ML3 0BP

Data Protection Lead: President, Ups and Down Theatre Group.