Big Mouth Theatre (“we”, “us” or “our”) is committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

This Privacy Notice explains how we collect, use, store and protect personal information when you use our websites and subdomains, purchase our services or merchandise, make a booking, attend one of our drama clubs, holiday camps or other activities, communicate with us, or otherwise interact with Big Mouth Theatre.

This Privacy Notice applies to our website at www.bigmouththeatre.com, our subdomains and our merchandise store, together with personal information collected through our booking, customer management and communication systems.

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Big Mouth Theatre is a Hampshire-based theatre organisation specialising in school and weekend drama clubs, holiday drama camps and related theatre activities for children and young people.

Big Mouth Theatre also supports a network of independently operated franchise businesses. These franchise businesses are separate legal entities, and their processing of customer personal information is governed by their own privacy arrangements where they act as data controllers.

For the purposes of UK data protection law, the organisation responsible for the relevant processing will be the data controller for that personal information.

Where you book directly with Big Mouth Theatre, Big Mouth Theatre is responsible for the personal information covered by this Privacy Notice.

Our contact details are:

Big Mouth Theatre
21 Long Close Road
Hedge End
Hampshire
SO30 4GB
United Kingdom

Email: hello@bigmouththeatre.com

If you have any questions about this Privacy Notice, how we use your information, or wish to exercise your data protection rights, please contact us using the details above.

2. What personal information do we collect?

Depending on the services you use and the information you provide, we may collect the following categories of personal information.

Information about parents, guardians and customers

This may include:

• first and last name;

• email address;

• telephone or mobile number;

• postal address;

• billing and payment information;

• communication preferences;

• booking history;

• information about the services or activities you have purchased;

• information contained in correspondence with us; and

• marketing preferences and consent records.

Information about children and young people

Where you book or arrange activities for a child, we may collect information including:

• child's name;

• date of birth or age where necessary;

• school name;

• details of the activity, club or camp attended;

• parent or guardian contact details;

• emergency contact information;

• relevant participation information;

• medical or health information necessary to enable us to provide activities safely;

• information relating to incidents, accidents or safeguarding matters where necessary.

We ask parents or guardians to provide only information that is relevant and necessary for the child's participation and safety.

Health and medical information

Some activities require us to know about medical conditions, allergies, disabilities, medication, additional needs or other information concerning a child's physical or mental health.

Health information is special category personal data under the UK GDPR and receives additional protection.

We only collect and use health information where it is necessary and appropriate for purposes such as safeguarding, managing participation in activities, responding to an emergency, making reasonable arrangements for a child, or otherwise providing our services safely.

Where we rely on consent to process health information, we will seek explicit consent where required. Where another lawful condition applies, we will rely on the appropriate legal basis instead.

We restrict access to health and medical information to people who need it for the relevant purpose.

3. How do we collect your information?

We may collect personal information:

• when you make a booking;

• when you purchase a service or merchandise;

• when you complete a registration, consent or medical form;

• when you contact us by email, telephone, post or another communication method;

• when you subscribe to our newsletter or marketing communications;

• when you use our website;

• when you interact with us through social media;

• when you provide information in connection with an incident or safeguarding matter;

• when you provide information on behalf of your child;

• through our booking and customer management systems;

• through cookies and similar technologies where permitted by law; and

• where appropriate, from organisations involved in delivering our services, such as schools or venues.

4. Our booking and CRM system – ThinkSmart Software

We use ThinkSmart Software as our customer relationship management (CRM), booking and customer communication system.

ThinkSmart Software is used to capture, process and store information relating to our customers and bookings.

All information that we collect through our booking and registration processes is stored within ThinkSmart Software, including information relating to children and medical or health information provided to us.

Depending on the services you use, information stored in ThinkSmart Software may include:

• parent or guardian names and contact details;

• children's names and relevant booking information;

• dates of birth or ages where required;

• school information;

• activity, club or holiday camp bookings;

• emergency contact information;

• medical conditions, allergies, medication and other health information;

• additional needs or information relevant to a child's participation;

• registration and consent information;

• booking history;

• payment-related information;

• communications and notes relating to a customer's booking or participation; and

• information relating to incidents or safeguarding matters where appropriate.

ThinkSmart Software also enables us to communicate with customers by email. We may use ThinkSmart Software to send booking confirmations, reminders, administrative messages, information about activities and other service-related communications.

Where permitted by law, it may also be used to send marketing communications.

ThinkSmart Software processes personal data on our behalf as a service provider/data processor where applicable.

Because ThinkSmart Software stores information relating to children, including medical and health information, access to this information is restricted to authorised individuals who need it for legitimate purposes.

Where a franchise LLP uses ThinkSmart Software, the relevant franchise LLP remains responsible for determining the purposes for which its customers' personal information is processed unless the relevant contractual arrangements provide otherwise.

Further information about ThinkSmart Software's processing of personal information is available at: https://www.thinksmartsoftware.com/privacy-policy/uk

5. How we use your personal information

We use personal information only where we have a lawful reason to do so.

Depending on the circumstances, we may use your information to:

• process and administer bookings;

• provide drama clubs, holiday camps, performances and other services;

• communicate with parents and guardians;

• send booking confirmations and other administrative communications;

• communicate important information about bookings, activities, changes or cancellations;

• process payments;

• manage customer accounts and records;

• manage attendance and participation;

• understand and accommodate relevant medical or additional needs;

• protect children and participants and respond to safeguarding concerns;

• respond to incidents or accidents;

• maintain appropriate records;

• provide customer support;

• manage our business and improve our services;

• send marketing communications where permitted;

• administer competitions, promotions or offers;

• manage our website and online services;

• maintain the security of our systems;

• comply with legal and regulatory obligations;

• establish, exercise or defend legal claims; and

• prevent fraud, misuse or other unlawful activity.

We may use ThinkSmart Software to carry out some of these activities, including storing customer information and communicating with customers.

6. Our lawful bases for processing

The UK GDPR requires us to identify a lawful basis for processing personal information.

The lawful basis we use depends on what we are doing with the information.

Contract

We may process personal information because it is necessary to enter into or perform a contract with you.

For example, this may include:

• administering bookings;

• providing activities and services;

• communicating booking information;

• processing payments; and

• managing customer accounts.

Legal obligation

We may process information where this is necessary for us to comply with a legal obligation.

This may include obligations relating to:

• accounting and financial records;

• taxation;

• legal claims;

• safeguarding;

• health and safety;

• regulatory requirements; or

• other obligations imposed on us by law.

Legitimate interests

We may process information where this is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• operating and managing Big Mouth Theatre;

• administering customer relationships;

• maintaining appropriate business records;

• improving our services;

• protecting our business, customers and participants;

• maintaining the security of our systems;

• communicating with existing customers about relevant services where permitted by law; and

• establishing or defending legal claims.

Where we rely on legitimate interests, we consider the impact on individuals and ensure that the processing is fair and proportionate.

Consent

We may rely on your consent for certain activities, particularly where consent is required by law.

This may include:

• certain email or SMS marketing;

• certain uses of photographs or video;

• certain processing of health information; and

• certain non-essential cookies or similar technologies.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

7. Children's personal information

Our services are primarily designed for children and young people, so protecting children's information is particularly important to us.

We generally collect information about children from their parent or guardian when a booking or registration is made.

We use children's information only for appropriate purposes connected with the provision, administration and safety of our services.

We do not knowingly use children's personal information for purposes that are unnecessary or unrelated to the services we provide.

We take particular care with:

• health and medical information;

• emergency contact information;

• safeguarding information;

• photographs and video;

• access to children's records; and

• information shared with third-party service providers.

We aim to provide privacy information in a clear and accessible manner so that parents, guardians and, where appropriate, children can understand how their information is used.

8. Health, medical and additional-needs information

Where we collect information concerning a child's health, disability, allergy, medication, medical condition or other health-related needs, this information is treated as special category data under the UK GDPR.

We collect such information only where it is necessary for purposes such as:

• keeping the child safe;

• assessing whether an activity can safely be undertaken;

• responding appropriately to an emergency;

• making reasonable arrangements for participation;

• meeting relevant safeguarding or health and safety requirements; or

• providing appropriate care during an activity.

We apply additional safeguards to this information and limit access to those who need it.

We will not use medical information for unrelated marketing purposes.

Where explicit consent is the legal basis relied upon for processing health information, you may withdraw that consent. However, if the information is necessary to safely provide an activity, withdrawal may mean that we are unable to provide or continue providing that activity.

9. Photographs and video of children

We recognise the importance of protecting children when photographs or video recordings are taken.

Our approach is consistent with recognised child-safeguarding guidance, including guidance published by the NSPCC.

Where we use photographs or video for publicity, promotional or other purposes, we will use appropriate permissions and safeguards.

We will not normally publish a child's full name alongside their photograph.

We will not publish personal email addresses, postal addresses or telephone numbers alongside photographs or video.

Where an individual child is featured, we will not normally identify that child by name in an accompanying caption.

We may use group photographs or video footage with general descriptions such as:

• “Big Mouth Theatre Program”; or

• “Big Mouth Theatre Drama Camps”.

We may use photographs or recordings after a child has left Big Mouth Theatre where we have a lawful basis to do so and the relevant permission remains valid.

We will only use images where children are appropriately dressed and where their use is consistent with our safeguarding responsibilities.

Where consent is the basis for using an image, you may withdraw that consent.

If you or your child asks us to remove an image that we have control over, we will consider and action the request appropriately and within the limits of what is reasonably possible.

We cannot guarantee the removal of an image from third-party platforms where we do not control the platform or where copies may have been shared by other users.

We do not sell children's photographs or video footage.

10. Marketing communications

We may send information about Big Mouth Theatre's services, activities, offers, events or relevant news.

We comply with applicable requirements of the UK GDPR and PECR.

Where consent is required, we will obtain consent before sending marketing communications.

In certain circumstances, PECR allows organisations to contact existing customers about similar services without obtaining separate consent, subject to specific conditions. Where we rely on such an exception, we will provide an appropriate opportunity to opt out.

Marketing communications may be sent by email, SMS or other electronic means where permitted by law.

You can unsubscribe from marketing communications at any time by:

• using the unsubscribe facility contained in the relevant message; or

• contacting us at hello@bigmouththeatre.com.

We will maintain appropriate records of marketing preferences and opt-outs so that we can respect your wishes.

11. Email communications and marketing systems

We use both ThinkSmart Software and Systeme.io to communicate with customers.

ThinkSmart Software

ThinkSmart Software is primarily our CRM and booking system. We may use it to send:

• booking confirmations;

• registration information;

• reminders;

• information about activities, clubs and camps;

• changes or important information relating to services;

• customer service communications; and

• marketing communications where permitted by applicable law.

Systeme.io

We also use Systeme.io as an email marketing and communications service.

Where you subscribe to our marketing communications, Systeme.io may process information such as:

• first and last name;

• email address;

• mobile number where provided;

• IP address;

• subscription date and time;

• marketing preferences; and

• information about interactions with marketing communications.

Systeme.io may be used to send newsletters, promotional communications, information about our services, offers, events and other relevant marketing communications.

Marketing law

We comply with the UK GDPR and PECR when sending direct marketing.

Where consent is required, we will obtain consent before sending marketing communications.

In certain circumstances, PECR allows organisations to contact existing customers about similar services without obtaining separate consent, subject to specific conditions. Where we rely on this exception, we will provide an appropriate opportunity to opt out.

You can unsubscribe from marketing communications at any time by using the unsubscribe facility included in the relevant email or by contacting us at hello@bigmouththeatre.com.

Unsubscribing from marketing communications will not normally prevent us from sending essential service or transactional communications that are necessary to administer an existing booking or service.

12. Email tracking and engagement information

Emails sent using Systeme.io and/or ThinkSmart Software may contain tracking technologies, such as tracking pixels or tracked links, where those features are enabled.

These technologies may allow us to determine whether an email has been delivered, opened or interacted with, including whether links have been clicked.

Depending on the system and features used, this may involve processing information such as:

• email delivery information;

• opening activity;

• link-click activity;

• date and time of interaction;

• IP address or approximate location information; and

• other email engagement information.

We use this information to manage our communications, maintain our mailing lists and understand and improve the effectiveness of our communications.

Where the use of tracking technologies requires consent under applicable law, we will obtain the necessary consent.

You can withdraw consent to marketing communications at any time by using the unsubscribe facility or contacting us at hello@bigmouththeatre.com.

13. Franchising

Big Mouth Theatre operates a franchising model under which individual franchise businesses operate as separate LLP companies.

Each franchise LLP is a separate legal entity from Big Mouth Theatre.

When you book directly with a Big Mouth Theatre franchisee

If you book a Big Mouth Theatre service directly with one of our franchise LLPs, the relevant franchise LLP will generally be the data controller responsible for the personal information it collects and uses in connection with your booking and the services it provides.

The relevant franchise LLP is responsible for determining:

• what personal information it needs to collect;

• why that information is required;

• the lawful basis for processing it;

• how long it needs to retain it; and

• who it needs to share it with.

The privacy information provided by the relevant franchise LLP should therefore be read alongside this Privacy Notice.

If you are unsure which organisation is responsible for your personal information, please contact the organisation you booked with or contact Big Mouth Theatre at hello@bigmouththeatre.com.

Information shared between Big Mouth Theatre and franchise LLPs

Because franchise LLPs operate under the Big Mouth Theatre brand and may use Big Mouth Theatre systems, services and support, personal information may be shared between Big Mouth Theatre and the relevant franchise LLP where there is a lawful and necessary reason to do so.

This may include information required for:

• administering the franchise relationship;

• providing franchise support and training;

• operating shared booking or customer management systems;

• providing technical or administrative support;

• managing payments;

• maintaining appropriate financial and business records;

• managing safeguarding or serious incidents;

• protecting children and participants;

• protecting the Big Mouth Theatre brand;

• complying with legal or regulatory obligations; and

• establishing, exercising or defending legal claims.

Where Big Mouth Theatre and a franchise LLP each determine their own purposes for processing personal information, each organisation will act as a separate data controller for that processing.

Where one organisation processes personal information solely on behalf of the other and under its documented instructions, the parties will put appropriate data processing arrangements in place where required by UK data protection law.

ThinkSmart Software and franchise bookings

Big Mouth Theatre franchise LLPs may use ThinkSmart Software as part of the booking and CRM systems available to the Big Mouth Theatre network.

Where a franchise LLP uses ThinkSmart Software, the franchise LLP remains responsible for determining the purposes for which its customers' personal information is processed unless the relevant contractual arrangements provide otherwise.

Information entered into ThinkSmart Software may include booking, customer, child, medical and health information.

ThinkSmart Software may therefore process information on behalf of the relevant Big Mouth Theatre franchise LLP as well as, where applicable, Big Mouth Theatre.

GoCardless and franchise payments

GoCardless is used to collect certain payments by Direct Debit, including payments relating to Big Mouth Theatre franchise operations.

Where a customer makes a Direct Debit payment to a franchise LLP, the relevant franchise LLP is responsible for determining the purposes for which the payment information is processed.

GoCardless processes the information required to establish and administer the Direct Debit and collect the relevant payment.

Information provided directly to GoCardless is also subject to GoCardless's own privacy information and terms.

Franchise privacy enquiries

If your booking is with a particular franchise LLP, questions about the personal information collected for that booking should normally be directed to that franchise LLP in the first instance.

If you are unsure which franchise LLP you have booked with, or whether Big Mouth Theatre or a franchise LLP is responsible for particular information, please contact:

Big Mouth Theatre
21 Long Close Road
Hedge End
Hampshire
SO30 4GB
United Kingdom

Email: hello@bigmouththeatre.com

14. Payment information

We use third-party payment providers to collect and process payments for Big Mouth Theatre services and, where applicable, merchandise and franchise-related services.

ClearAccept – one-off payments

We use ClearAccept for certain one-off payments made to Big Mouth Theatre.

ClearAccept processes payment information when you make a one-off payment using the payment facilities provided through our services.

We do not ordinarily store complete payment card details ourselves.

Information processed in connection with a ClearAccept payment may include payment details, transaction information, payment status and information necessary to identify the service or booking to which the payment relates.

ClearAccept is a third-party payment service provider. Information provided directly to ClearAccept is also subject to ClearAccept's own privacy information and terms.

Further information about ClearAccept is available at:

https://clearaccept.co.uk/

GoCardless – Direct Debit payments

We use GoCardless to collect payments by Direct Debit.

This includes Direct Debit payments relating to Big Mouth Theatre's services and payments connected with our franchising operations.

Where you set up a Direct Debit through GoCardless, GoCardless processes the information necessary to establish and administer the Direct Debit and collect payments.

We do not ordinarily store your complete bank account details ourselves where these are collected and processed directly by GoCardless.

Information provided directly to GoCardless is also subject to GoCardless's own privacy information and terms.

Payment records

Regardless of which payment provider is used, we may retain information necessary to administer our accounts and customer relationships, including:

• the amount paid;

• payment date;

• payment status;

• payment method;

• transaction or payment reference;

• the service, booking or franchise arrangement to which the payment relates; and

• other information necessary for accounting, administration, customer service, legal or tax purposes.

We do not sell payment information or use payment information for unrelated marketing purposes.

15. Sharing your personal information

We do not sell your personal information.

We may share personal information, or allow trusted service providers to process personal information on our behalf, where necessary and lawful.

These organisations may include:

• ThinkSmart Software – our CRM, booking and customer communication system;

• Systeme.io – our email marketing and communications provider;

• ClearAccept – a payment service provider used for certain one-off payments;

• GoCardless – a payment service provider used for Direct Debit payments;

• relevant Big Mouth Theatre franchise LLPs, where there is a lawful and necessary reason to share information;

• website, hosting and technology providers;

• professional advisers, such as accountants, insurers or legal advisers;

• schools, venues or partner organisations where necessary to deliver a service and where lawful;

• safeguarding or child-protection organisations or authorities where necessary;

• emergency services or medical professionals where necessary to protect a child's or individual's vital interests;

• government bodies, regulators, law enforcement agencies or other authorities where we are legally required or permitted to do so; and

• a purchaser, prospective purchaser or successor organisation in connection with a sale, merger, acquisition or restructuring of all or part of Big Mouth Theatre.

ThinkSmart Software stores information collected through our booking and registration processes, including children's information and medical or health information where provided.

We only provide access to personal information where there is a legitimate reason and lawful basis for doing so.

Where a third party processes personal data on our behalf, we take appropriate steps to ensure that suitable contractual, confidentiality and security protections are in place.

16. International transfers

Some of our service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will ensure that the transfer is lawful and that appropriate safeguards are in place where required by UK data protection law.

Depending on the circumstances, these safeguards may include:

• a UK adequacy regulation;

• appropriate contractual safeguards;

• the UK International Data Transfer Agreement;

• the UK Addendum to applicable standard contractual clauses; or

• another lawful transfer mechanism.

Further information about a particular international transfer may be requested by contacting us at hello@bigmouththeatre.com.

17. How we protect your information

We take appropriate technical and organisational measures to protect personal information against:

• unauthorised access;

• accidental loss;

• destruction;

• alteration;

• inappropriate disclosure; and

• other forms of unlawful or unauthorised processing.

These measures include appropriate access controls, secure systems and storage, restricted access to sensitive information and appropriate safeguards for paper records.

Access to children's, medical and safeguarding information is restricted to people who need that information for legitimate purposes.

No method of storing or transmitting information over the internet can be guaranteed to be completely secure. However, we take reasonable and appropriate measures to protect the information in our care.

18. Data breaches

We maintain procedures for identifying, investigating and responding to personal data breaches.

Where a personal data breach occurs, we will assess the circumstances and take appropriate action in accordance with applicable data protection law.

Where legally required, we will notify the Information Commissioner's Office (ICO) and affected individuals.

19. How long do we keep personal information?

We do not keep personal information indefinitely.

We retain information only for as long as reasonably necessary for the purpose for which it was collected, taking account of our legal, accounting, safeguarding, insurance, contractual and operational requirements.

Different types of information may therefore be retained for different periods.

For example:

• customer and booking information will normally be retained for as long as necessary to administer the customer relationship and for an appropriate period afterwards;

• financial and transaction records will be retained for as long as required to meet applicable accounting and tax obligations;

• marketing records will be retained while you remain subscribed, together with appropriate records of withdrawal or suppression where necessary to ensure we do not contact you again;

• health and medical information will be retained only for as long as necessary for the relevant safety, participation, safeguarding or legal purpose;

• consent records may be retained for as long as reasonably necessary to demonstrate how and when consent was obtained;

• incident and safeguarding information may need to be retained for longer periods where this is necessary to protect children, comply with legal obligations, manage safeguarding responsibilities, or establish or defend legal claims.

We maintain internal retention procedures to determine appropriate retention periods for different categories of information.

The retention of safeguarding records will be determined according to the nature and circumstances of the information and applicable safeguarding, legal and insurance requirements. Such information is not retained automatically or indefinitely without justification.

Where information is no longer required, we will securely delete it, anonymise it or otherwise dispose of it appropriately.

For franchise bookings, the relevant franchise LLP may apply its own retention periods where it is the data controller for the relevant information.

20. Your data protection rights

Subject to certain legal exemptions and limitations, you have rights under UK data protection law.

These may include the right to:

Access your personal information

You can ask us for a copy of the personal information we hold about you.

Correct inaccurate information

You can ask us to correct information that is inaccurate or incomplete.

Request deletion

In certain circumstances, you can ask us to delete your personal information.

Restrict processing

In certain circumstances, you can ask us to restrict how we use your personal information.

Object to processing

You may have the right to object to certain processing, including processing based on legitimate interests and direct marketing.

Data portability

In certain circumstances, you can ask us to provide personal information to you in a structured, commonly used and machine-readable format or request that it is transferred to another organisation.

Withdraw consent

Where we process your personal information on the basis of consent, you can withdraw your consent at any time.

Rights relating to automated decision-making

You may have rights relating to certain solely automated decisions that produce legal or similarly significant effects.

We do not currently use children's personal information for solely automated decision-making that produces such effects.

The availability of particular rights depends on the lawful basis and circumstances of the processing.

If your information is processed by a separate Big Mouth Theatre franchise LLP acting as the data controller, requests concerning that processing should normally be directed to the relevant franchise LLP.

21. How to exercise your rights

To exercise your rights or ask a question about how we process your personal information, please contact:

Email: hello@bigmouththeatre.com

Post:
Big Mouth Theatre
21 Long Close Road
Hedge End
Hampshire
SO30 4GB
United Kingdom

We may need to verify your identity before providing personal information or acting on a request.

We will respond to valid requests within the time period required by applicable data protection law.

You will normally not have to pay a fee to exercise your data protection rights.

If your request concerns information controlled by a separate franchise LLP, we may direct you to the relevant franchise business.

22. Complaints

If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can try to resolve your concern.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent supervisory authority for data protection.

Further information about making a complaint is available from the ICO website:

https://ico.org.uk/make-a-complaint

Where your complaint concerns processing carried out by a separate franchise LLP acting as the data controller, you may also contact that franchise LLP directly.

23. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small text files placed on your device which can be used for purposes such as enabling website functionality, remembering preferences, measuring website usage and, where permitted, marketing or advertising.

We distinguish between cookies that are necessary for the website to function and cookies or similar technologies that are used for optional purposes.

Essential cookies

Some cookies are necessary for the website to operate, provide requested services, maintain security or remember choices you have made.

These may be used without consent where permitted by law.

Analytics cookies

We use Google Analytics to help us understand how visitors use our website.

Google Analytics may use cookies or similar technologies to collect information about website usage.

Where consent is required for analytics cookies or similar technologies, we will seek that consent before using them.

Marketing, advertising and referral cookies

From time to time, our website may use cookies or similar technologies associated with advertising, referral or promotional activity.

Where consent is required, these technologies will not be activated until the appropriate consent has been obtained.

Cookie consent

Where consent is required for non-essential cookies, our website provides a cookie consent mechanism that allows you to make a clear choice.

Our cookie banner provides a clear “Accept” option and an appropriate means of declining non-essential cookies.

We will not make acceptance of non-essential cookies a condition of using our website where consent is required by law.

You can also control cookies through your browser settings, although blocking certain cookies may affect website functionality.

24. External websites and links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, security or content of websites operated by third parties.

You should review the privacy notice of any third-party website before providing personal information to it.

25. Social media

Big Mouth Theatre may maintain accounts or pages on third-party social media platforms.

Interactions with those platforms are governed by the privacy policies and terms of the relevant platform.

We do not ask customers to provide sensitive personal information through social media.

If you need to discuss medical, safeguarding, payment or other sensitive information with us, please contact us through our official communication channels instead.

Our website may also include social sharing buttons or other social media features.

Using these features may allow the relevant third party to collect information about your interaction with the feature, depending on your settings and the platform concerned.

26. Shortened links

We may occasionally share links through social media or other communications.

Some social media platforms automatically shorten links.

You should exercise appropriate caution when clicking links, particularly shortened links, and check that you are accessing a legitimate Big Mouth Theatre or third-party website.

27. Business sale or acquisition

If Big Mouth Theatre is involved in a merger, acquisition, restructuring, sale of the business or sale of some or all of its assets, personal information may be transferred to the relevant purchaser, successor organisation or professional advisers where this is lawful and necessary.

Any such transfer will be handled in accordance with applicable data protection law.

The organisation receiving the information will be expected to handle it in accordance with applicable legal requirements and any relevant privacy information provided to individuals.

28. Accuracy of your information

We aim to keep the personal information we hold accurate and up to date.

Please let us know if your contact details, your child's details, medical information or other relevant information changes.

This is particularly important for medical, emergency contact and safeguarding information.

You can contact us at:

hello@bigmouththeatre.com

29. Changes to this Privacy Notice

We may update this Privacy Notice from time to time to reflect:

• changes in our services;

• changes to the systems or providers we use;

• changes in applicable law or regulatory guidance; or

• changes to how we process personal information.

The latest version will be published on our website.

We recommend checking this page periodically for updates.

30. Contact us

If you have any questions about this Privacy Notice, how we use your personal information, or wish to exercise your data protection rights, please contact:

Big Mouth Theatre
21 Long Close Road
Hedge End
Hampshire
SO30 4GB
United Kingdom

Email: hello@bigmouththeatre.com

We will be happy to help with questions concerning your personal information and privacy.