Privacy Policy
Forma is committed to protecting your personal information and respecting your privacy. We respect the choices you make about how you would like to hear from us and how we make use of your personal data.
1. Privacy Notice
This privacy policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed, shared or transmitted by us. Please read the following information carefully to understand our views and practices regarding your personal data and how we will treat it.
Policy updated 21 May 2018.
1.1. About us
Forma (Forma Arts and Media Ltd) is a registered charity, supported using public funding by Arts Council England. Registered charity no. 1152156. Registered company no. 04338639.
We can can be contacted by email at info@forma.org.uk, phone +44 (0)207 249 9767 or by post at Data Protection Officer, Forma, Studio F13, 23-27 Arcola Street, London E8 2DJ.
You can manage your subscription to our mailing list as follows:
Click here to subscribe
Click here to unsubscribe
Update your personal preferences at any time by clicking the ‘update preferences’ or ‘unsubscribe’ links in any email sent by our mailing list (these are found in the footer of every email we send)
You can update your preferences in other products and services that we provide by using the user preferences options of the the respective products and services.
If you wish to contact us about our privacy policy, or any personal data we might hold on you, then please email us at info@forma.org.uk. We will notify subscribers to our mailing list of any changes to our privacy policy.
1.2. Legal Compliance
Forma Arts and Media Ltd is a Data Controller for the purpose of compliance and we operate in accordance with UK and EU law, including:
The Data Protection Act, 1998
The Privacy and Electronic Communications (EC Directive) Regulations, 2003
EU General Data Protection Regulation (GDPR), 2018
2. Our Privacy Promise
Forma promises to use your data ethically and to allow you access so that you can update it, restrict its use, or ask us to delete it. We believe the data we hold about you is your property so you should have the right to control it, amend it or ask that it be erased.
2.1. What are your rights?
The EU General Data Protection Regulation gives you the right to access, amend and revoke any consent that you have provided allowing us to store and use your personal data. You have the right to ask us not to process your personal data for marketing purposes. We will inform you before collecting your data if we intend to use your data for marketing, or if we intend to disclose your personal data to any third party for marketing.
You can exercise your right to prevent such processing by selecting the appropriate options on the forms we use to collect your data and the forms that allow you to amend your data. You can also exercise your data rights at any time by contacting us (see 1.1).
You also have the right to be notified of any changes we may make to our privacy policy. Any changes will be posted on this page, and where appropriate you will be notified by email. Please be aware that if you have opted out of our marketing emails then you will not be notified about changes to our privacy policy so should instead check this page for any updates or changes to our privacy policy.
2.2. What type of data do we collect about you?
We may process, i.e. collect, store, use, delete and otherwise manipulate or access, personal data about you.
You may provide us with personal data about yourself when you correspond with us by phone, e-mail, in person, or by completing a contact form on our website or another service that we use. We may collect your personal data to keep you informed and up-to-date with our events and activities. We may also collect your personal data to help manage the products and services we provide to you, such as via our online shop or third party ticketing platforms such as Eventbrite (see 2.8).
You may provide us with personal data when you search for a product or service, or report a problem about a particular product or service you use, via our website or another service. We collect this personal data to inform you about the products and services we offer, or to help manage those products and services, including resolving any problems you report to us.
You may provide us with personal data when you use a third party service that we work with, including our business partners and subcontractors, cloud app services, analytics services, software providers, delivery services, and other systems and services.
You may provide us with financial and credit card information if it is needed to supply or help manage the products and services we provide to you, either directly or via a financial services providers or credit reference agencies that we use.
You may also provide us with more sensitive personal data, including health information, ethnicity, sexuality, religious or political opinions. Examples of this may include when you complete an audience survey, or when you complete an equal opportunities monitoring form as an artist we work with, an applicant to a job or opportunity we advertise, or a freelancer we hire. This sensitive personal data is only ever stored in anonymised aggregate form.
You may also provide us with personal data each time you visit our website, or use a product or service we provide or help manage, from a computer or mobile device. We may automatically collect technical information about you, which can include the internet protocol (IP) address used to connect you to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, plus your operating system and platform.
You may also provide us with personal data about your visit that our website, products and services collect, including the full Uniform Resource Locators (URL) clickstream to, through and from our website or other service, including date and time. We may also collect information about the products and services you viewed or searched for, including analytics about your browser such as page response times, download errors, length of visits to certain pages, and page interactions information such as scrolling, clicks, and mouse-overs. We may also collect methods used to browse away from the page, plus any phone number used to ring us to provide customer support or marketing information.
2.3. What type of data do we collect about you?
We use the personal data held about you to provide you with information about the products and services you request from us, and to carry out our obligations arising from any agreements entered into between you and us to provide our products and services.
We may also use the personal data held about you to provide marketing information about our activities or other products and services we offer similar to those that you have already purchased or enquired about.
We also use the personal data held about you to ensure that the content from our website and other products and services is presented in the most effective manner for you and for the device you use to access it.
We also use the personal data held about you to notify you about changes to our products and services.
We also use your personal data to conduct research about our audiences using audience segmentation tools, via The Audience Agency.
2.4. How does our website use your data?
We use cookies on our website and other services to distinguish you from other users. This helps us to improve our website and other services so that we can offer you the best possible experience when you browse our website or use other services.
A cookie is a small file of letters and numbers that is stored in your browser or the hard drive of your computer or mobile device if you agree. Information about your browsing may be tracked using web analytics software and services including Web server stats and Google Analytics.
If you would prefer that we don’t track you using cookies then you can opt out using the Cookies consent pop-up on our website, or by adjusting your browser settings to block cookies. You can also clear the cookie cache in your browser to clear any cookies we may have stored on your device.
Please note that other third parties, including advertising networks and providers of web analytics, may also use cookies over which we have no control, but are likely to be analytical and/or performance targeting cookies.
Our website and other services may also contain links to and from the websites and services of our partners, clients, affiliates and other third parties. Please note that we are only responsible for your privacy in respect of your use of our website and services. Please check other websites and services for their own privacy policies before you submit any personal data.
2.5. How do we collect and use personal data?
We collect and use personal data when administering our website and managing our products and services. We also collect and use personal data for internal operations, including to help you manage your products and services, troubleshooting, data analysis, testing, research, employee and partner training, plus for statistical and survey purposes.
We collect and use personal data as part of our efforts to improve our website and the services we use, plus our own products and services, and keep them safe and secure.
We collect and use personal data to measure and understand the effectiveness of the products and services we offer, including any advertising we may serve, and to deliver relevant advertising to you and others.
We collect and use personal data to make suggestions and recommendations about the products and services which may interest you or others.
We may also combine the personal data we hold with information from other sources for the purposes set out above, depending on the types of information we receive.
2.6. Where do we store your personal data?
We store your personal data on the systems and services we use to help collect and manage the data we process. The data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, amongst other things, the fulfilment of your order, the processing of your payment details or the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure your data is treated securely and in accordance with this privacy policy.
2.7. How do we keep information secure?
We endeavour to ensure that there are appropriate and proportionate technical and organisational measures to prevent the loss, destruction, misuse, alteration, unauthorised disclosure of or access to your personal information. We anonymise data where applicable.
Our website and other services use encryption to protect your personal data. Any information we transmit via the internet, including our email communications, are encrypted while in transit. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website or other services over networks that we do not control. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We also expect you to use strict procedures and security to prevent unauthorised access to your personal data. If we have supplied you with the ability to set a password to access any part of our website, or any other service which have provided to you or help you manage, then you are responsible for keeping this password secure. Use a unique, secure password and do not to share your password with anyone. Where it is available you should always use two-factor authentication to protect your personal data.
We do not process payments on our website, but may use other third party websites or services to do so (such as Shopify or Eventbrite). All payment transactions will be encrypted.
2.8. When do we share information with others?
The personal data you submit to us will only ever be used for the specific purposes indicated to you and will not be passed onto unauthorised third parties without your explicit consent. We may use agencies and/or suppliers (such as The Audience Agency) to process and analyse data on our behalf. We may share your personal data with selected third parties including business partners, suppliers, service providers and subcontractors for the performance of any agreement we enter into with you, which may include analytics and search engine providers who assist us in the improvement and optimisation of our website and other services.
We may also share your personal data with a third party in the event we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets, or if we, or substantially all of our assets, are acquired by a third party, in which case personal data held by it about its customers will be one of the transferred assets.
We may also share personal data if we are under a duty to disclose or share it in order to comply with any legal obligation, or in order to enforce or apply our website’s terms of use or our terms and conditions of supply and other agreements, or to protect our rights, property, or safety or that of our customers or others, including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
We may also share your personal data with any member of our group, which means our subsidiaries, or our ultimate holding company and its subsidiaries, as defined in section 1159 of the UK Companies Act 2006.