Privacy Policy

1. Who We Are

The Freddie Story is a theatrical production managed and produced by Best Acts, a theatre production company based in Scotland. This Privacy Policy explains how we collect, use, and protect your personal data when you visit this website or contact us regarding our productions and services.

For the purposes of UK data protection law, the data controller is:

2. Data We Collect

We may collect the following personal information:

• Name and email address (when you submit an enquiry)
• Phone number (if provided voluntarily)
• Message content submitted via our contact form
• Details relating to the type of enquiry (e.g. venue booking, show information, press)
• Technical data such as browser type and IP address (collected only where you have consented to analytics cookies)

We do not collect sensitive (special category) personal data.

3. Ticket Sales — TicketSource

Tickets for The Freddie Story are sold through TicketSource, an independent ticketing platform operated by TicketSource Ltd. When you purchase a ticket via ticketsource.co.uk, your transaction and personal data (including name, email, and payment information) are handled directly by TicketSource under their own Privacy Policy and Terms of Service.

Best Acts does not process, store, or have access to your payment card details. We may receive your name and contact information from TicketSource solely for the purpose of managing attendance at our events. In this context TicketSource acts as a data processor on our behalf and is bound by appropriate data processing agreements.

We encourage you to review TicketSource's privacy policy before purchasing tickets.

4. How We Use Your Data

Your data is used to:

• Respond to booking, venue hire, and production enquiries
• Provide information about The Freddie Story and forthcoming tour dates
• Improve the performance and usability of our website (only where analytics consent has been given)

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your personal data for any automated decision-making or profiling.

5. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR Article 6:

• Legitimate interests (Article 6(1)(f)) — the primary basis for processing enquiry form data. We have a legitimate interest in responding to business and service enquiries.
• Contractual necessity (Article 6(1)(b)) — where a booking or service agreement is in place.
• Legal obligation (Article 6(1)(c)) — where we are required to retain records (e.g. financial records for HMRC purposes).
• Consent (Article 6(1)(a)) — for optional analytics and functional cookies only. You may withdraw consent at any time via our Cookie Policy.

6. Cookies

We use a small number of cookies on this website, categorised as Essential, Functional, and Analytics. Essential cookies are strictly necessary for the site to operate. Functional and Analytics cookies are optional and only set with your prior consent, in line with UK PECR and UK GDPR.

We do not use advertising cookies, third-party tracking networks, or social media tracking pixels. No data derived from cookies is sold or shared with third parties.

You can manage or withdraw your consent at any time via our Cookie Policy.

7. International Data Transfers

We do not intentionally transfer personal data outside the United Kingdom. Our website is hosted on infrastructure operated by Base44 (a platform provider); please refer to their privacy documentation for details of their data hosting arrangements. Where any transfer does occur, we ensure appropriate safeguards are in place in accordance with UK GDPR Chapter 5.

8. Data Retention

• Contact form enquiries: retained for up to 12 months from receipt, unless an ongoing business relationship requires longer retention
• Cookie consent records: 12 months from consent (stored locally on your device)

Once data is no longer needed, it is securely deleted or anonymised.

9. Your Rights Under UK GDPR

As a data subject, you have the following rights:

• Right of access — to obtain a copy of the personal data we hold about you
• Right to rectification — to request correction of inaccurate or incomplete data
• Right to erasure — to request deletion of your data where there is no compelling reason for its continued processing
• Right to restrict processing — to ask us to limit how we use your data
• Right to data portability — to receive your data in a structured, commonly used format
• Right to object — to object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to complain — you have the right to lodge a complaint with the ICO at ico.org.uk/make-a-complaint or by calling 0303 123 1113

We will respond to all valid requests within one calendar month as required by UK GDPR.

10. Contact & Data Enquiries

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated date. Continued use of our website following any changes constitutes acceptance of the updated policy.