Privacy Policy

What we collect

We only hold data you have given us: your name, email, phone number, audition videos, payment or billing details; when you (apply to) join, renew a membership, buy a ticket, make a donation, or ask us to send you something.

We do not knowingly collect personal data from children under 13, and this site is not aimed at them. If you are under 13 and need to give us any personal information, please ask a parent or guardian to contact us instead.

What we use it for

Sending you information, updates or newsletters you asked for

Consent. Only when you asked for them (e.g. by joining the orchestra), and you can withdraw at any time.

Replying to questions you ask us

Consent. Only when you contact us first, and you can withdraw at any time.

Considering applications for membership

Legitimate interest. We have to read what you send to judge the audition and to reach you about it. You can withdraw from the process at any time.

Running the orchestra you are a member of

Legitimate interest. You can opt out of general communications, though we will still need to contact you about membership itself, such as payments and renewals.

Sending news we think will interest members, ticket buyers, or donors

Legitimate interest. You can object at any time and we will stop.

Sending ticket buyers and donors information about the thing they bought or gave to

Contractual obligation. Tickets, and the details you need in order to use them.

To withdraw consent for any of these, email data@ulso.co.uk.

Photographs and recordings

We photograph and film rehearsals and concerts, and we publish some of it here and on social media. We make it clear when recording is happening. You can object to this when we announce it, and/or email data@ulso.co.uk.

We also print lists of donors and members in concert programmes and publish them on this site. Email data@ulso.co.uk if you would rather not be named.

This website

The site is hosted by Cloudflare, which processes visitors' IP addresses in order to serve pages and to protect the site from attack. The pages carry no advertising and set no cookies.

We count page views with Cloudflare Web Analytics. It stores nothing on your device and records only the page, the site you arrived from, your country, and the kind of browser and device you used. None of that identifies you, and we cannot tell who visited.

Some information loads from 3rd party sites, which may set cookies and collect data:

• Google Fonts, which supplies the typefaces, on every page.
• OpenStreetMap, which draws the map on a concert page where the venue has been pinned.

Other people's sites

We link out to ticket sellers, payment providers, and application forms, among them Ticket Tailor, Stripe, and Google Forms. Once you follow one of those links you are on their site under their privacy policy. We may receive your details back from them on the basis of our legitimate interests, which covers keeping financial records, controlling entry to concerts, and telling attendees what they need to know.

How long we keep it

Only as long as we need it, and in every case no more than seven years after your last contact with us, unless you agree to our keeping it longer or something unresolved requires it.

Who else sees it

We share personal data with the providers who do things on our behalf and to our instructions, such as payment and ticketing providers, email providers, accountants, and lawyers. We pass it to nobody else unless we have told you, or unless we have to in order to protect our rights or comply with a legal process.

Some of it may be stored outside the UK or European Economic Area, for instance where a provider's servers are. We only allow that where the receiving organisation has proper safeguards in place, such as standard contractual clauses.

Your rights

You can ask us for a copy of the personal data we hold about you, and you can require us to correct anything wrong in it. We aim to answer within 30 days and may ask you to prove who you are first.

We keep your data up to date, store and destroy it securely, collect no more of it than we need, and protect it from loss, misuse and unauthorised access, as UK data protection law requires. That law is the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003. Where we process the data of people in the EU, the EU GDPR applies as well.

If you are not satisfied with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

Contact

Any question about this policy, or about data we hold, goes to the same address.

We may change this policy. Anything significant will be announced on the home page.