top of page

Privacy Policy

Our privacy policy explains how we handle personal data on this website. For Ticket Sales Terms and Conditions, please see our Terms and Conditions Page.

If you would like to update your details or contact preferences with us please visit this page.

1.  Introduction

1.1  The website (the “Website”), is owned and operated by Riding Lights (“us”, “we”), a company registered in England and Wales with company number 3573945 and a charity registered in England and Wales with charity number 1070142 and registered address Riding Lights Theatre Company, Friargate Theatre, Lower Friargate, York, YO1 9SL.

1.2  We are committed to protecting your privacy and will only use the information that we collect about you lawfully. This policy is intended to give you an understanding of how and why we use the information you give us.

1.3  Bernadette Burbridge, General Manager, is our Data Protection Officer and responsible for data protection compliance. If you have any questions about this policy, please contact the Data Protection Officer on, or by writing to Riding Lights Theatre Company, Friargate Theatre, Lower Friargate, York, YO1 9SL or calling our office on 01904 655317.

1.4 Please read the following carefully to understand our practices regarding your personal data and how we will treat it. By using our website or providing us with your personal information you agree to your personal information being used and stored in the manner set out in this policy. We may update this policy from time to time without notice to you, so please check it regularly.

2.  How we collect information about you

Information you give us

2.1  We may collect information from you in the following ways:

(a) Our use of cookies (please see the Cookies section below);
(b) You make a donation to us (which may be financial or non-financial/ in-kind), or respond to our mailings and appeals
(c) You contact us in relation to volunteering for us or to fundraise on our behalf;
(d) You organise, promote or attend a performance or an event
(e) You apply for a place with one of our Youth Theatres or our Summer Theatre School, including when applying on behalf of a young person in your care.
(f) You apply for a job with us or become an employee or provide services via an agency or provide consultancy services directly to us;
(g) You request and/or receive a copy of any resources, publicity or other materials from us;
(h) You register a website account to use our online shop;
(i) You contact us with enquiries or other correspondence (including via social media) or become involved with us in another way (e.g. by indicating you would like to hear more from us, or you would like to make a donation to us, to your Church).

2.2  If you interact with us in one of the ways listed above, we may collect and process personal information about you such as:

(a) Your name, address, email address, telephone number, your age;
(b) Information you enter onto our website or in other hard copy forms at an event;
(c) Records of your correspondence with us, if you have contacted us;
(d) Details of your visit to our website, including your IP address;
(e) Financial information such as your bank or card details;
(f) Whether you have a relationship to another supporter (e.g. husband/wife).

2.3  We may also collect sensitive personal information about you, such as details about a health condition or disability, where it will mean we can communicate with you appropriately in the future. We may also collect this information if you plan to attend an event.

2.4  When your political affiliation or religious beliefs are of general public knowledge, we may also record that information against your profile. If they are not in the public domain, we will only do so where we have your consent or drawn this specifically to your attention.

Information we receive from other sources

2.5  Your information may be given to us by third parties, for example fundraising sites like Virgin Money Giving and Just Giving. They will do so pursuant to their own policies on data protection and privacy. It is a good idea to check their privacy policy when you provide your information to them to fully understand how they will process your data and may share it with others.

2.6  Please refer to paragraphs 3.2 and 3.3 for further details on information we receive from other sources.

3.  Why and how we use your information and on what basis

3.1  We will process your personal information in accordance with this policy and our obligations under applicable data protection laws and regulations, for one or more of the following reasons:

(a) To administer your purchase or donation or support your fundraising, including processing Gift Aid;
(b) To provide you with the services, activities or information you have indicated you are happy to receive or which you have asked for;
(c) To comply with applicable laws and regulations, and requests from statutory agencies;
(d) For our own internal administrative purposes and to keep a record of your relationship with us;
(e) For the purposes of research such as supporter satisfaction research;
(f) For marketing purposes, to provide you with information about us, our fundraising campaigns, the opportunity to leave a gift in a will, our events, our services, and any other information, products, activities or services that we provide or provide access to (e.g. Membership updates);
(g) To provide you with information about volunteering opportunities;
(i) To provide you with details about our campaigns
(j) To provide essential event information where you have signed up to attend;
(k) To manage your communication preferences with us generally;
(l) To provide you with information about goods or services we feel may interest you;
(m) To notify you about changes to our service and/or donor/supporter opportunities;
(n) To ensure that content from our website is presented in the most effective manner for you and for your computer/mobile device.

3.2  Where the law allows us to do so, in order to improve the quality and accuracy of the information you have provided to us, we regularly check the accuracy of the data we already hold about you (such as your telephone number, email address or address) against external data lists which are in the public domain (e.g. using the Royal Mail’s National Change of Address database and postcode validation). We may also use third parties to check this on our behalf. We will only check the accuracy of the existing information we hold. If, for example, you have not provided us with a telephone number, we will not obtain a telephone number for you and use it to contact you. If we obtain updated details, we would combine this with the information we currently hold about you.

3.3  We will always seek consent to process your data at the point we collect it. However in some cases we may process data without consent where we are legally allowed to do so, and where we have legitimate reasons for doing so (e.g. to process a donation you have made or in accordance with this policy), provided we respect your legal rights.

3.4  If you request to receive no further contact from us, we will keep some basic information in order to avoid sending you unwanted materials in the future, and to ensure that we do not accidentally store details for the same person multiple times. If we did not retain this information then this could result in us contacting you again as we would no longer have a record of your request not to be contacted.

3.6  We will keep your personal data for no longer than is necessary for the purposes for which it is processed, in accordance with our internal policies.

4.  Where is your information stored

4.1  The information we collect from you may be transferred to and stored at a destination outside the European Economic Area (“EEA”). It may also be processed by persons operating outside of the EEA. If we send your personal data outside the EEA we will take reasonable steps to ensure that the recipient implements appropriate measures to protect your information. By submitting your details you agree to this use of your data.

4.2  Online payment transactions will be encrypted. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

4.3  The transmission of information via the internet is not completely secure (though note that online payment transactions are securely encrypted). Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

5.  Who has access to your information / who we share your data with

5.1  We may allow our staff, consultants and/or external providers acting on our behalf to access and use your information for the purposes for which you have provided it to us (e.g. to deliver mailings, for research, to analyse data and to process payments) or for purposes set out in our privacy notice and this policy. We only provide them with the information they need to deliver the relevant service or it is relevant to their work, and we make sure your information is transferred securely and treated with the same level of care as if we were handling it directly.

5.2  We do not sell your data to third parties for the purposes of marketing. In other cases we will not share your personal data with third parties except when we have your permission.

5.3  We may disclose your information to other organisations and agencies if we are under a duty to disclose or share it in order to comply with any legal obligation, or in order to enforce or apply any agreements; or to protect the rights, property or safety of us or others. For example, we may share your information with HMRC for the purpose of administering Gift Aid.

5.4  In accordance with our Child Safeguarding Policy and our commitment to protect vulnerable children from all forms of exploitation and abuse, we may share details, including personal data, relating to serious breaches of our Child Safeguarding Policy and Procedures with statutory authorities such as the police, the National Crime Agency (NCA), the Child Exploitation and Online Protection Agency (CEOP) and the Charity Commission.

6.  Your rights

6.1  To request details of the information we hold about you, if you have provided us with your personal information, but decide at a later date that you no longer want to receive information from us, or if you wish to update us that your contact details have changed or change your preferences, simply let us know by:

(a) Sending an email to
(b) Writing to Riding Lights Theatre Company, Friargate Theatre, Lower Friargate, York, YO1 9SL; or
(c) Calling our Office on 01904 655317 between 10am-5pm (Monday – Friday)

6.2  If you request details of the information we hold about you in accordance with the subject access rights under applicable data protection laws and regulations, Riding Lights may charge an administration fee of up to £10 for fulfilling such requests.

6.3  Instructions for unsubscribing from emails will also be included in each email communication we send.

6.4  Under the General Data Protection Regulation, which is expected to become law in the UK in May 2018, you are also granted a number of additional rights. These include:

(a) The right to rectification;
(b) The right to erasure;
(c) The right to restrict processing;
(d) The right to data portability;
(e) The right to object;
(f) Rights in relation to automated decision making and profiling.

6.5  For more information on these rights please read the relevant guidance issued by the ICO:

6.6  If you are unhappy with the way we have processed your personal data, please contact our Risk and Compliance Manager using the contact details set out in the introduction to this policy. If you remain unhappy with how your complaint is dealt with you should contact the Information Commissioner’s Office ( Alternatively, you are entitled to make a complaint to the Information Commissioner’s Office without first referring your complaint to us.

7.  Cookies

7.1  For more information on how cookies are used on our website, please see our cookies policy below.

8.  Changes to our privacy policy

8.1  We may make changes to this policy from time to time, so we encourage you to check it frequently. By continuing to use our website you will be deemed to have accepted those changes.


1.  What are cookies

Like most websites, we use cookies. Cookies are tiny pieces of data saved on your computer or mobile device. There are several types of cookie and they each have different functions or uses.

2.  How do we use cookies

2.1  We use the following types of cookies:

(a) Essential cookies – these are required for the operation of our website and include, e.g. to enable you to log in to or make use of a shopping cart and e-payment services.
(b) Analytic/performance cookies – these allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
(c) Functionality cookies – these are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of event or region).
(d) Targeting cookies – these cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We will not share this information with third parties for this purpose.

2.2  The table below provides more information about the cookies we use and why:

Facebook cookies Certain cookies are used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.


Type of cookie

Function and further information

Analytic/performance cookies

Analytics cookies including Google analyticsThese are common performance cookies that many websites use. They allow us to collect anonymous information about how you and other users use our website and helps us to improve the website. The information collected includes technical information regarding the user’s browser, operating system, IP address and screen resolution. It also includes how users came to the website (which search engine and search terms were used, which links were clicked on) and the user’s navigation on the website (number of visits, dates and times of visits, time spent on the website, which pages have been loaded etc.). A tracking cookie from Google is also used to protect users from known malicious sites.

Cookie preferencesThese cookies check whether the user’s browser supports cookies and registers whether the user has consented to the use of cookies.

Social media sharingWe use cookies which make it possible for users to share content across social networks using a tool such as HootSuite or Tweetdeck and provide detailed statistics to various providers. These cookies also register the user’s sharing.

Speed of requests to serverWe use certain cookies to optimise the speed of requests to the server.

Type of deviceThis cookie is used to determine what type of device (smartphones, tablets, computers, TVs etc.) is used by a user.

YouTube cookiesCookies are used to register a unique ID (used by Google) to record statistics of how the user uses YouTube videos across different websites, which videos the user has seen, and to estimate the users’ bandwidth on pages with integrated YouTube videos.

Functionality cookies

User and session identificationThese cookies allow you to use our site in a way that makes your browsing experience more convenient, for example, by remembering you across different pages of our website, recognising you when you return to the website, or remembering your preferences when using the embedded Flash player. If you register with us or complete our online forms, we will use cookies to remember your details during your current visit, and any future visits provided the cookie was not deleted in the interim.

Traffic distributionThis cookie is used to optimise response times by distributing website traffic to several servers.

Targeting cookies

Facebook cookies Certain cookies are used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers.


3.  Third party websites and social networks

3.1  If you click on a hyperlink from our website to any third-party websites (e.g. if you ‘share’ content from our website with friends or colleagues on social media), you may be sent cookies from these third party websites. They will do so pursuant to their own policies on privacy and cookies. It’s a good idea to check their privacy policies to fully understand their use of cookies.

4.  Disabling cookies

4.1  By using our website, you consent to our use of cookies as updated from time to time and the cookies we use will be stored on your device (unless rejected or disabled by your browser).

4.2  Internet browsers normally accept cookies by default. However, it is possible to set an internet browser to reject cookies. If you do not accept our use of cookies as set out in this policy, please set your internet browser to reject cookies. This may impair your ability to use our website so that some features may not work.

5.  Changes to this policy and further information

5.1  We may update our use of cookies, and this policy, from time to time, so please check this policy regularly.

5.2  You can find out more about cookies generally and how to disable them at

bottom of page