Introduction

This privacy policy explains how Joshua Brooks Manchester Limited (“we”, “us”, or “our”) collects, uses, and protects your personal data when you interact with us. We are committed to being transparent about what data we collect and how we use it.

This policy applies to personal data collected through our website, ticketing platforms, email sign-up forms, social media lead forms, and any other interactions you have with us.

We take your privacy seriously. This policy has been written in plain English so you can understand exactly how your data is handled.

Who We Are

Joshua Brooks Manchester Limited is the data controller responsible for your personal data.

Our details are:

• Legal entity: Joshua Brooks Manchester Limited
• Trading name: Joshua Brooks Manchester
• Registered office: Joshua Brooks, 106 Princess Street, Manchester, M1 6NG, United Kingdom
• Contact email for data and privacy enquiries: hello@joshuabrooks.co.uk
• We are a live events and hospitality venue based in Manchester city centre.

What Data We Collect

We collect and process the following types of personal data:

• Name
• Email address
• Phone number (where you have provided it)
• Ticket purchase and event attendance data
• Marketing preferences
• Website usage data, including cookies and tracking pixels

We only collect personal data that is necessary for the purposes outlined in this policy.

How We Collect Data

We collect your personal data through the following methods:

• Website sign-up forms where you subscribe to our mailing list
• Ticketing platforms when you purchase tickets to our events
• Social media lead forms and advertising campaigns
• Website analytics and advertising pixels

Data from ticketing platforms

When you purchase a ticket to one of our events through a third-party ticketing platform, we receive your contact details and purchase information from that platform. This data sharing is covered in the ticketing platform’s own privacy policy, which you agree to at the point of purchase.

We use this data to communicate with you about the event you have purchased tickets for, and may also use it for marketing purposes where permitted (see Marketing Communications below).

We may also collect data when you contact us directly, attend our events, or interact with us on social media.

How We Use Data

We use your personal data to:

• Sell tickets and manage event attendance
• Communicate essential event information, such as changes to event times or venue details
• Send marketing emails about future events
• Send marketing SMS messages (where you have given specific consent)
• Build and analyse marketing audiences
• Run digital advertising and retargeting campaigns
• Improve our events, communications, and customer experience

We will never use your data in ways that are incompatible with these purposes.

Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

Contractual necessity

When you purchase a ticket, we need to process your data to fulfil that contract. This includes sending you confirmation emails and any essential information about the event you are attending.

Legitimate interests

We have a legitimate interest in understanding our audience, improving our events, and running our business effectively. We always balance our interests against your rights and will not process your data where it would be unfair to you.

Consent

For certain marketing communications, we rely on your consent. This includes SMS marketing and email marketing to individuals who have not previously purchased from us. You can withdraw your consent at any time.

Marketing Communications

We send marketing communications about our events, including upcoming nights, artist announcements, and ticket releases. How we contact you depends on your relationship with us:

If you have purchased a ticket to one of our events

Under the Privacy and Electronic Communications Regulations (PECR), we may send you marketing emails about similar events without requiring separate consent. This is known as the “soft opt-in”. You will always have been given the opportunity to opt out when you purchased your ticket, and every email we send includes an unsubscribe link.

If you would prefer not to receive these emails, you can unsubscribe at any time using the link in any email, or by contacting us directly.

If you have signed up to our mailing list

If you have subscribed to our mailing list through our website, a sign-up form, or a social media lead form without making a purchase, we rely on your consent to send you marketing emails. You gave this consent when you signed up.

You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link at the bottom of any email, or by contacting us at hello@joshuabrooks.co.uk.

SMS marketing

We only send SMS marketing messages where you have given us specific consent to do so. You can opt out at any time by replying STOP to any message, or by contacting us directly.

Please note that unsubscribing from marketing communications will not affect essential communications about events you have already purchased tickets for.

Cookies and Tracking

Our website uses cookies and similar tracking technologies. Cookies are small text files that are placed on your device when you visit our website.

We use the following types of cookies:

Essential cookies

These are necessary for the website to function properly. They enable basic features like page navigation and access to secure areas.

Analytics cookies

These help us understand how visitors interact with our website. We use this information to improve our website and services.

Advertising cookies

These are used to deliver relevant advertisements and to track the effectiveness of our advertising campaigns. We may use advertising pixels from platforms such as Meta and Google to show you relevant content about our events.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

Data Sharing

We do not sell your personal data to third parties.

We share your data only with trusted service providers who help us operate our business, including:

• Ticketing platforms that process your ticket purchases
• Email and SMS service providers that send communications on our behalf
• Advertising and analytics platforms that help us reach and understand our audience

These service providers are only permitted to use your data for the purposes we specify and are required to keep your data secure.

We may also receive data from ticketing platforms when you purchase tickets to events we are promoting. This is covered by the ticketing platform’s privacy policy and terms of service.

We may also share your data where required by law or to protect our legal rights.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected.

For marketing subscribers, we retain your data while you remain subscribed to our communications. If you unsubscribe, we will remove your data from our active marketing lists, though we may retain a suppression record to ensure we do not contact you again.

For ticket purchasers, we retain your purchase history and contact details for a reasonable period to handle any post-event queries and for our legitimate business records.

We may retain certain data for longer periods where required by law or for legal claims.

Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access

You have the right to request a copy of the personal data we hold about you.

Right to rectification

You have the right to request that we correct any inaccurate or incomplete personal data.

Right to erasure

You have the right to request that we delete your personal data in certain circumstances, for example if we no longer need it for the purposes it was collected.

Right to object

You have the right to object to our processing of your personal data where we are relying on legitimate interests. You also have the right to object to direct marketing at any time.

Right to restrict processing

You have the right to request that we limit how we use your data in certain circumstances.

Right to data portability

You have the right to receive your personal data in a structured, commonly used format and to have it transferred to another organisation where technically feasible.

To exercise any of these rights, please contact us at hello@joshuabrooks.co.uk. We will respond to your request within one month.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues. You can contact the ICO at www.ico.org.uk.

Data Security

We take the security of your personal data seriously. We have implemented appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction.

These measures include secure data storage, access controls, and regular security reviews. Our service providers are also required to maintain appropriate security measures.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the “Last updated” date at the top of this policy.

We encourage you to review this policy periodically to stay informed about how we protect your data.

Contact Details

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

• Email: hello@joshuabrooks.co.uk
• Post: Joshua Brooks, 106 Princess Street, Manchester, M1 6NG, United Kingdom
• We aim to respond to all enquiries within a reasonable timeframe and will do our best to address any concerns you may have.