top of page

GDPR Privacy Policy

Privacy Policy

This Privacy Policy describes how we collect, use, and protect your personal information when you use our website.

Last updated: 21 September 2026

Updates to this Privacy Policy

This Privacy Policy was updated on 21 September 2026 to reflect our change of company name to Romanian Cultural Heritage C.I.C., our use of Wix for website services, ticket sales and event bookings, and additional information about ticket purchases, seating arrangements, accessible seating, companion tickets, event photography and filming, data retention, data sharing and cookies.

1. Who We Are

The organisation responsible for your personal data (the data controller) is Romanian Cultural Heritage C.I.C., registered in the United Kingdom under company number 12493719, with its registered office in County Durham, UK.

Our website is operated using Wix. We use Wix's website, booking and ticketing functionality to provide online services and sell tickets for our events.

For privacy questions, requests or complaints to us, contact romanianculturalheritage@gmail.com.

2. What Personal Data Do We Collect?

The information we collect depends on how you interact with us. We aim to collect only information that is relevant and necessary for the purpose for which it is used.

2.1 Information You Provide Directly

We may collect:

  • Full name;

  • Email address;

  • Telephone number;

  • Billing or contact address, where required;

  • Information provided when contacting us;

  • Information provided when registering for an event, class or activity;

  • Information provided when purchasing or reserving tickets;

  • Information relating to accessibility requirements or companion ticket arrangements, where voluntarily provided and necessary to fulfil your request;

  • Marketing preferences and consent records;

  • Any other information you choose to provide to us.

2.2 Ticket and Event Information

When you purchase or reserve tickets through our website, including through Wix, we may process:

  • Your name and contact details;

  • The event you are attending;

  • Event date and time;

  • Ticket type or category;

  • Seat or seating information, where applicable;

  • Number of tickets purchased;

  • Booking or order reference;

  • Purchase date and transaction information;

  • Information required to administer your booking;

  • Information necessary to provide accessible seating or companion arrangements where requested.

Payment card information is processed through the payment services made available through our website. We do not normally receive or store your full payment card details.

2.3 Information Collected Automatically

When you use our website, certain technical information may be collected automatically, depending on the Wix configuration, cookies and services enabled on the site:

  • IP address;

  • Browser type and version;

  • Device type and operating system;

  • Pages visited and interactions with the website;

  • Date and time of visits;

  • Referring website or source, where available;

  • Cookie identifiers and similar technologies.

2.4 Information We May Receive From Other Sources

In some circumstances, we may receive information from third parties, such as ticketing/payment providers, event partners, venues or other service providers involved in delivering an event. Where we receive personal data from another source, we will provide the relevant privacy information required by applicable data protection law.

3. How We Use Your Personal Data

We may process your personal data for the following purposes:

  • Processing and administering ticket purchases and event bookings;

  • Providing tickets, booking confirmations and receipts;

  • Managing seating arrangements;

  • Providing accessible seating or companion arrangements requested by customers;

  • Communicating important information about an event, including changes to dates, times, venue arrangements, seating, cancellation or other matters affecting your booking;

  • Processing refunds, exchanges or other booking-related requests;

  • Responding to enquiries and providing customer support;

  • Managing our cultural programmes, performances, events, classes and activities;

  • Maintaining appropriate records of bookings, transactions and communications;

  • Processing payments through the payment services available through Wix;

  • Preventing fraud, misuse or unauthorised activity;

  • Maintaining the security of our website, systems and services;

  • Improving our website, services and visitor experience;

  • Sending marketing communications where we have a lawful basis to do so;

  • Complying with legal, accounting and regulatory obligations;

  • Establishing, exercising or defending legal claims.

We will not use personal data for a new purpose that is incompatible with the original purpose without first considering the applicable legal requirements and, where required, providing additional information or obtaining consent.

4. Legal Bases for Processing

We will only process personal data where we have a lawful basis under applicable data protection law. The basis depends on the purpose of the processing.

PurposeTypical lawful basis

Ticket purchases, bookings, confirmations, event administration and customer supportContract – processing is necessary to provide the ticket or service requested.

Legal, accounting and regulatory recordsLegal obligation – processing is necessary to comply with applicable legal requirements.

Website security, fraud prevention, administration, service improvement and protection of our legal rightsLegitimate interests – where our interests are not overridden by your rights and interests.

Marketing where consent is requiredConsent – where you have actively consented to receive marketing.

Optional cookies and similar technologies where consent is requiredConsent – where applicable.

Where we rely on legitimate interests, our legitimate interests may include operating and administering our organisation and events, maintaining website and system security, preventing misuse, responding to enquiries, improving services and protecting our legal rights. Where we rely on consent, you may withdraw that consent at any time.

5. Accessibility and Special Category Data

If you voluntarily provide information about accessibility requirements, a disability or another matter that reveals information about your health, that information may constitute special category data under data protection law.

We will only collect and use such information where it is necessary to fulfil the request or provide an appropriate service and where an applicable lawful basis under Article 6 and an applicable condition for processing special category data under Article 9 are in place. We will limit access to such information to those who need it for the relevant purpose.

6. Marketing Communications

We may send information about our events, performances, cultural programmes and activities. Where consent is required, we will only send marketing communications where you have provided the appropriate consent.

You can unsubscribe from marketing communications at any time by using the unsubscribe option included in the communication or by contacting romanianculturalheritage@gmail.com.

Unsubscribing from marketing communications does not prevent essential service communications relating to a ticket or booking, such as booking confirmations, event changes, cancellation notices or important information about attending an event.

7. Wix, Payment Services and Other Service Providers

We use Wix to operate our website and provide website, booking and ticketing functionality. Information submitted through our website may therefore be processed by Wix as part of providing those services.

We may also use service providers for payment processing, website hosting and technical services, email and communications, IT and security, analytics where enabled, and event administration.

These providers may process personal data on our behalf where necessary to provide their services. We do not sell or rent personal data.

Payment details are handled through the payment services made available through the website. We do not normally receive or store full payment card details.

8. Recipients and Sharing of Personal Data

We may share personal data, where necessary and appropriate, with:

  • Wix and relevant website/ticketing service providers;

  • Payment service providers;

  • Email, communications, IT and security providers;

  • Event venues or partners where necessary to administer an event, booking or accessibility arrangement;

  • Professional advisers where necessary;

  • Public authorities, regulators or law enforcement bodies where we are legally required to do so;

  • Other organisations where you have provided consent or where another lawful basis permits the disclosure.

We do not sell personal data to third parties.

9. International Transfers

Some of our service providers may process personal data outside the United Kingdom. Where personal data is transferred outside the UK, we will use an appropriate legal transfer mechanism and safeguards where required by applicable data protection law.

Where required, further information about relevant safeguards can be requested from us by contacting romanianculturalheritage@gmail.com.

10. Event Photography, Filming and Recording

Our events and performances may be photographed, filmed or otherwise recorded for purposes such as documenting and promoting our cultural activities, performances and organisation.

Photography or filming may include performers, volunteers, audience members and other participants. Where appropriate, we will provide information at relevant events where photography or filming is taking place.

If you do not wish to be included in identifiable promotional photography or filming, please speak to a member of our team at the event or contact us in advance at romanianculturalheritage@gmail.com.

Where specific consent is required for the use of an identifiable individual's image, we will seek consent as appropriate. Parents or guardians who have concerns about identifiable images of children should contact us.

11. Children and Young People

Our cultural programmes and events may involve children and young people. Where personal information relating to children is collected as part of participation in our programmes, classes or performances, we will take appropriate steps to protect that information.

Where parental or guardian consent is required, we will seek it through the relevant registration or participation process.

12. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected. Retention periods vary according to the type of information and why it is needed.

  • Ticket and booking information is retained for as long as necessary to administer the booking, deal with customer enquiries or disputes, and meet applicable accounting, tax and legal requirements;

  • Financial and transaction records are retained for the period required by applicable financial and legal obligations;

  • Marketing preferences and consent records are retained as necessary to demonstrate and respect your communication choices;

  • Information relevant to legal claims may be retained for as long as necessary to establish, exercise or defend those claims;

  • Information collected through cookies or analytics is retained according to the relevant service and cookie settings.

When personal data is no longer required, we will securely delete it or anonymise it where appropriate. If a specific retention period cannot reasonably be stated, we use criteria such as legal requirements, the nature and sensitivity of the information, the purpose for which it was collected, and whether it is needed to establish or defend a legal claim.

13. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or destruction. Measures may include access controls, secure systems, appropriate permissions and procedures for handling personal data.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

14. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies may be placed by Wix and by third-party services used on our website.

Essential cookies: necessary for website operation, security and core functions such as navigation and, where applicable, ticketing or booking.

Functionality and preference cookies: may remember choices and preferences to improve the website experience.

Analytics cookies: where enabled, help us understand how visitors use the website and improve performance and content.

Third-party cookies: services embedded in or connected to the website may use their own cookies or similar technologies, including payment, ticketing, video, social media or analytics services.

Where consent is required, we will request consent before using non-essential cookies. You can manage cookie preferences through the cookie controls available on our website and through your browser settings.

15. Your Data Protection Rights

Subject to applicable legal conditions and exemptions, you may have the following rights:

  • Right of Access: request a copy of the personal data we hold about you;

  • Right to Rectification: request correction of inaccurate or incomplete information;

  • Right to Erasure: request deletion of your personal data in certain circumstances;

  • Right to Restriction: request restriction of processing in certain circumstances;

  • Right to Data Portability: receive certain personal data in a structured, commonly used and machine-readable format;

  • Right to Object: object to certain processing, including processing based on legitimate interests and direct marketing;

  • Right to Withdraw Consent: where processing is based on your consent.

The right to object to direct marketing is absolute. For other forms of processing, the right to object may be subject to legal conditions.

To exercise your rights, contact romanianculturalheritage@gmail.com. We may need to verify your identity before responding.

16. Complaints

If you have concerns about how we process your personal data, please contact us first at romanianculturalheritage@gmail.com so that we can investigate your concern.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO). The ICO's website is ico.org.uk.

17. Third-Party Websites

Our website may contain links to third-party websites, including venues, partners, social media platforms, payment services and other organisations. We are not responsible for the privacy practices or content of third-party websites. We recommend that you read the privacy policies of those websites before providing personal information.

18. Your Choice and Whether Information Is Required

Some personal information is necessary for us to provide a ticket, booking or service. If you do not provide information that is necessary to complete a purchase or booking, we may be unable to process the transaction or provide the requested service.

Other information, such as optional marketing preferences, is not required to purchase a ticket or use our services.

19. Automated Decision-Making and Profiling

We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you. We may use ordinary website analytics and service functionality, where enabled, to understand website usage and improve our services.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our organisation, website, ticketing services, activities, technology or applicable legal requirements.

Where we make significant changes, we will provide a clear summary of the main changes at the beginning of this Privacy Policy and update the “Last updated” date. Where a new use of personal data requires additional information to be provided, we will provide that information before the new processing begins where required by law.

Previous versions may be retained for our records.

21. Contact Us

If you have questions about this Privacy Policy or how we use your personal information, please contact:

Romanian Cultural Heritage C.I.C.
County Durham, UK
Email: romanianculturalheritage@gmail.com
Company Registration Number: 12493719

Last updated: 21 September 2026

bottom of page