Privacy policy

1. Who is responsible for your information

NPG Producing Limited, registered in England and Wales, company number 17417245. Registered office: 4th Floor, Silverstream House, Fitzroy Street, London, England, W1T 6EB. We are the controller for personal information used to run this website and respond to HUMBUG enquiries. Contact hello@humbugchristmas.co.uk about privacy or write to our registered office. For the other Niche Productions Group shows mailing list, the responsible company is Niche Productions Limited, company number 15177043, registered office: 4th Floor Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB. For Immersive Everywhere marketing, the company is Immersive Everywhere Ltd, number 16052479. For Ticketing Everywhere marketing and ticketing services, the company is Ticketing Everywhere Ltd, number 12384072. Both have their registered office at 2 Maple Court, Davenport Street, Macclesfield, Cheshire, England, SK10 1JE. You can write to the relevant registered office for privacy enquiries or contact us for help directing your request. This notice covers website visitors, people who contact us and people who choose to join the HUMBUG mailing list; separate booking services may provide their own privacy notices.

2. Information we receive

If you email us, we receive your email address, name and any information you include, such as a telephone number, organisation, preferred dates, group size and correspondence. Website delivery involves technical information such as IP address, browser information, requested pages, timestamps and security or error logs. If you sign up for emails, we collect your email address, any optional details you provide, your selected marketing preferences and evidence of your consent, such as the time, source and wording of your opt-in. Mailchimp also processes subscription status and delivery information, including bounces and unsubscribes. We do not collect payment-card details through this website. Please do not email card details or unnecessary sensitive information; if you need to discuss accessibility, ask us how to share relevant details securely.

3. Why we use information

We use enquiry information to answer questions and discuss your requirements. Where you ask us to take steps towards a contract with you, our lawful basis is taking those steps or performing that contract. For general questions and enquiries made on behalf of an organisation, we rely on our legitimate interests in responding to requests and managing business relationships. We use technical information for our legitimate interests in delivering a reliable website, preventing misuse and investigating faults. Information needed to meet a specific legal requirement is processed on the basis of that legal obligation. Sending an enquiry does not subscribe you to marketing. For newsletter sign-ups, we rely on your consent to email you HUMBUG show news, promotional updates and on-sale announcements. Consent is optional and separate from accepting website terms or making a booking.

4. Service providers and sharing

Our website is hosted by Vercel. Hosting, IT and email service providers process information as necessary to deliver their services. Relevant authorised team members can handle your enquiry. We may share information with professional advisers or public authorities where necessary to obtain advice, meet a legal obligation or establish or defend legal claims. Newsletter data is stored and processed using Speakeasy Project’s Mailchimp account. Speakeasy Project and authorised people administering the mailing list have access to subscriber information for managing subscriptions and sending the communications you select. Mailchimp provides the email platform. NPG Producing Limited is responsible for its HUMBUG marketing. If you choose to receive other Niche Productions Group shows, Speakeasy Project, Immersive Everywhere or Ticketing Everywhere marketing, your email address and the relevant consent record may also be shared with that selected organisation so it can send its own show news and offers. Each organisation is responsible for the marketing it sends and must honour the preferences and withdrawals that apply to it. Using Speakeasy Project’s account does not give it or any other organisation permission to send its own marketing without the corresponding separate opt-in. If an enquiry needs to be passed to a separate booking or event partner, we will explain that arrangement when relevant.

5. International processing

Hosting and communications providers may process information outside the UK. Where UK data protection law requires safeguards for such a transfer, an applicable UK adequacy regulation or approved contractual safeguards must be used. You can contact us for information about the safeguards relevant to your data. Mailchimp processes information in the United States and other locations described in its documentation. Its Data Processing Addendum includes international transfer provisions, including UK safeguards where applicable. Vercel describes its international processing arrangements in its Data Processing Addendum.

6. How long information is kept

Retention depends on why the information is needed. Enquiry correspondence is kept for as long as necessary to resolve the enquiry and any related follow-up. Where an enquiry becomes a booking or dispute, relevant records may need to be kept for applicable accounting, legal and claims requirements. Technical records are retained according to the hosting provider’s service settings and the time needed to resolve security or reliability issues. Mailing-list information is retained while your chosen subscription remains active and necessary for that purpose. If you unsubscribe, marketing for that choice stops; a limited suppression record and evidence of consent may be retained to respect your opt-out and demonstrate compliance. Unsubscribing from one mailing list does not automatically withdraw a separate subscription you have chosen for another. You can ask us for help withdrawing all choices recorded through this website. Records should be deleted or anonymised when those purposes no longer require them. Contact us if you need the retention period applicable to a particular record.

7. Cookies and external links

With your permission, we use Google Analytics (Google tag G-DNT6FW4MX0) to understand visits, page views and how people use this website. Google Analytics loads only after you select Accept analytics. You can reject analytics and still use the website, or change your choice through Cookie settings in the footer. We store your preference in your browser. Google may process device, browser and usage information; see Google’s privacy policy for further details. Images and videos are served with the site. Hosting and security services may process technical request information to deliver and protect the website. Clicking an email link opens your email application; clicking a map or partner link takes you to a separate service with its own privacy practices. The Mailchimp form sends the information you submit to Mailchimp using Speakeasy Project’s account. If optional tracking, including email open or click tracking requiring consent, is introduced, it will be explained and the required consent obtained before it runs. Agreeing to receive emails is not blanket consent to tracking.

8. Your choices and rights

Depending on the circumstances, you can ask for access to your information, correction, erasure, restriction of processing or a portable copy. You can object to processing based on legitimate interests and to direct marketing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights are subject to legal conditions and exemptions. Contact us to exercise them; we may request proportionate information to verify your identity. We normally respond within one month, subject to any lawful extension. This website does not make automated decisions with legal or similarly significant effects about you.

9. Choosing your emails

The current sign-up form offers two separate, unticked choices: HUMBUG show news and on-sale announcements from NPG Producing Limited; and other Niche Productions Group shows and offers from Niche Productions Limited. You can select any combination or none. Selecting a partner’s choice includes permission to share your email address and the relevant consent record with that named organisation for that purpose. The responsible companies are identified above. Speakeasy Project, Immersive Everywhere and Ticketing Everywhere marketing choices are not included in the current form. Their own marketing would require a separate opt-in with relevant controller and contact details. We will not treat acceptance of these terms, browsing, an enquiry or a ticket purchase as newsletter consent. Only the choices you select authorise the corresponding marketing.

Each marketing email must identify its sender and include an unsubscribe link. You can withdraw HUMBUG consent at any time through that link or by emailing hello@humbugchristmas.co.uk. For other selected organisations’ emails, use the unsubscribe link in their messages or contact the sender using its privacy information. You may also contact us to help route a request. Withdrawal does not affect processing that was lawful before withdrawal. See Intuit’s Global Privacy Statement for Mailchimp’s own privacy practices.

10. Ticketing Everywhere and booking messages

Ticketing Everywhere will provide the ticketing service for HUMBUG. When you book, it will explain how it handles booking, payment and customer-service information in its own checkout privacy notice. Information necessary to fulfil your booking may be shared with NPG Producing Limited. Booking confirmations, ticket delivery and essential event updates are service communications, separate from optional promotional emails. Buying a ticket does not select the marketing choices described here. Immersive Everywhere and its sister company Ticketing Everywhere have separate marketing choices; consent to one does not automatically cover the other.

11. Sharing information with the venue

We and the ticketing provider may share relevant booking and attendance information with the operator of Greenwich Borough Hall and its authorised venue staff so they can manage audiences and deliver your visit. This may include your name, ticket or booking reference, ticket validity and entry status, purchased add-ons and redemption status, and relevant contact details or customer-service information.

The purposes are to scan and validate tickets, manage admissions, redeem purchased packages and add-ons, communicate necessary emergency or safety information, and resolve customer-service issues while you are on site. Only information reasonably needed for these duties should be made available, with access limited to staff who need it. This sharing does not authorise the venue to add you to its marketing lists.

Where necessary to deliver a booking with you, the lawful basis is performance of that contract. For other attendees and operational support, we rely on our legitimate interests in delivering the event, managing admissions and providing customer service. Where a specific legal safety obligation applies, the basis is compliance with that obligation. In an emergency, information may also be used or shared where necessary to protect someone’s life. Any accessibility or health information requires additional safeguards and an applicable special-category condition; only the minimum necessary information should be shared.

Venue access and retention should be limited to the time needed to deliver the event and resolve associated enquiries or incidents, unless a legal requirement or a relevant claim requires longer retention. Where the venue processes information for its own legal, safety or incident-management responsibilities, its own privacy information also applies. Contact us if you need details of the venue operator’s handling of a particular record.

12. Complaints and updates

Please contact us first if you have a concern so we can investigate. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, or telephone 0303 123 1113. We may update this notice when the website or our handling of information changes. The date below shows when it was last updated.