We understand that your personal information and privacy is important to you. We make every effort to ensure that the information you share with us is recorded accurately, retained securely and only according to your wishes and consent. We protect the personal information that you give us and adhere to all current data protection legislation with respect to protecting your privacy. We do not give, sell or trade our mailing list with any other organisations.

What information do we collect from you?
When you sign up to our mailing list, donate to our fundraising pages, consent to Gift Aid, purchase any goods or book tickets, join one of our programmes, enquire about working or volunteering with us, enquire about our services, or contact us via email, you may provide us with personal information regarding yourself. This may include: –

  • Your full name and title, date of birth

  • Your postal address, your email address and phone number

We will also collect and hold information about any contact you have with us as a supporter, donor, a user of our programmes, potential volunteer or member of staff, or purchaser of goods/tickets and may include:-

  • Ticket purchases/bookings and attendance at concerts/performances

  • Retail purchases

  • Gift information including payment details where applicable

  • Gift aid status

  • Details of correspondence sent to you, or received from you

  • Donor status

  • Any other information provided by yourself at the request of NORCA and Sistema in Norwich

When we ask you to provide your personal information we will let you know why we are asking, and how we will use this data, by directing you to this Privacy Policy and to our Data Protection Policy HERE

How do we use this information?
We use this information to provide you with information or services that you request, to provide information we feel may interest you, to notify you of any changes to our projects/programmes, for record keeping, for evaluation, for monitoring fundraising and may include:-

  • News and updates about events, activities and opportunities (eg volunteering) provided by and related to Norfolk Community Arts (NORCA)

  • Information on fundraising operations

  • Other relevant communications based upon your relationship with us

  • We may also disclose anonymous information regarding demographics, funding and other similar information to third parties for funders and grant givers.

  • We will not share your details with third parties without your consent, or unless we are required to do so by law, or, in exceptional circumstances where we think someone is at serious risk of being harmed or there is a Safeguarding issue and we need to contact the police or a local authority Safeguarding team, as our duty to report overrides Data Protection legislation.

How do we protect your information?
Norfolk Community Arts (NORCA) takes appropriate organisational and security measures against unlawful or unauthorised processing of personal data, and against the accidental or unlawful destruction, damage, loss, alteration, unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed. We have in place reasonable procedures and systems to maintain the security of personal data from the point of collection, to processing and to destruction.

This applies to data held centrally at the Norfolk Community Arts (NORCA) office, where sensitive personal data in paper form is stored in secure locked cabinets; and in electronic form is password protected. Passwords are changed regularly.

Norfolk Community Arts (NORCA) only permit personal data to be processed by personnel who agree to comply with our Data Protection policy. We make our personnel aware of data protection legislation and of this policy, and of procedures to maintain security of personal data. Norfolk Community Arts (NORCA) personnel are required to sign to confirm that they have read and understood our Data Protection Policy. We maintain data security by protecting the confidentiality, integrity and availability of the personal data.

If we transfer any personal data we hold to an organisation based outside of the European Economic Area (EEA), or to an international organisation, we will ensure that the data subject is aware of this and gives their consent.

See our Data Protection Policy for more information about how we protect your information HERE

If you have opted-in to receive our newsletter, we will store your name/business name and email address in our newsletter system, and you may receive occasional emails with information on new releases.  You can unsubscribe anytime using the link at the bottom of our emails.

Your rights
Under GDPR you have the right to: –

  • Access your personal information

  • Rectification of your personal information

  • Erasure or “right to be forgotten”

  • Restrict processing

  • Data portability

  • Object

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. If you wish to exercise any of your rights, please write to the Operations Manager at Norfolk Community Arts (NORCA), Martineau Memorial Hall, 21, Colegate, Norwich, NR3 1BN or Email Us.

If you make a request relating to any of the rights listed above, we will consider each request in accordance with the General Data Protection Regulations. Compliance with the request and a response will be provided within 30 days. Upon successful verification of your identity you are entitled to obtain the following information about how your personal information is processed:-

  • The purpose of the collection

  • The use

  • The storage

  • The source(s) if it was not obtained from you

Internet Security
The transmission of information via the internet or email is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of data whilst you are transmitting it to our website; any transmission is therefore at your own risk. Information can only be accessed by authorised staff within our organisation. We are reliant on the security of the servers which support our email, but we do this via reliable companies who are themselves GDPR compliant (Google, Wix, etc.)

Third party links
You will find links to third parties (eg funders, other music organisations) on our website. These websites should have their own privacy policies, which you should check. We do not accept any responsibility or liability for their policies whatsoever as we have no control over them. In cases when we use external websites linked to, for example, Twitter, Facebook or YouTube, then we would advise you to consult their privacy policies.

Changes to this policy
We may change the Privacy Policy from time to time. If we make any significant changes in the way we treat your personal information we will make it clear on our website or by contacting you directly.  Norfolk Comunity Arts (NORCA) Limited is compliant with the General Data Protection Regulation which requires organisations to review how they manage data.

This Privacy Notice was last updated June 2022