Privacy policy

Forty Hall promise to protect and respect any personal data you share with us, or that we get from other organisations. 

Enfield Presents is the Culture, Sport and Arts department of the London Borough of Enfield including Millfield Theatre, Forty Hall, Dugdale Centre, Museum of Enfield, Salisbury House, Active Enfield and Enfield Festivals & Events.

This privacy statement tells you about the type of data we collect and how we use it.

We use your information in accordance with all applicable laws concerning the protection of personal information.
This policy explains:
• What information we may collect about you
• How we may use that information
• In what situations we may disclose your details to third parties
• Our use of cookies to improve your use of our website
• Information about how we keep your personal information secure, how we maintain it and your rights to be able to access it

You can email or call 020 2363 8196 to ask about the data we hold on you, make changes or ask us to stop using it.

How we collect data from you

When you give it to us directly

You may give us your information when you register on our website, buy tickets, make a donation, fill in a form or when we speak directly on the phone. During that first point of contact you will be asked if you want to opt in to our marketing communications database too so you can receive relevant marketing materials and updates.
If you choose to receive e-mail communication from us a follow up email will always be sent to confirm your subscription and you can opt out at any time.
When we meet at events, you may give us your business card so we can contact you with relevant information in the future.
We will hold your data for as long as you are interacting with the content we are sending you. If you stop interacting or request to be removed, you will remain on our database indefinitely on a suppression list so we know never to contact you in the future.

When you give it to us indirectly

If we speak at a marketing event the event organisers may share your contact details with us if you have given them permission to do so. When you visit our website, we collect information about how you interact with our content and ads. When we send you a mailing we store a record of this, and in the case of emails we keep a record of which ones you have opened and which links you have clicked on.

When you give permission to other organisations to share or it is available publicly

We may combine information you provide to us with information available from external sources so we get a better understanding of you. This information can also help us improve our service offering. The information we get from other organisations may depend on your privacy settings or the responses you give, so you should regularly check them. This information comes from the following sources:

Third party organisations

You may have provided permission for a company or other organisation to share your data with third parties.

Social media

Depending on your settings or the privacy policies for social media like Linkedin, Instagram, Facebook or Twitter, you might give us permission to access information from those accounts. We will then merge this with our own customer data to get a deep understanding of your business.

Information available publicly

This may include information found in places such as Companies House and information that has been published in articles or newspapers.

When we collect it as you use our website

Like most websites, we use “cookies” to help us make our site – and the way you use it – better. When you visit our site for the first time you will be informed of our use of cookies before you continue to browse.
Cookies are small files that downloaded to your PC or other device when you visit our site. They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields. There are more details in our Cookie Policy.
In addition, the type of device you’re using to access our website and the operating system you’re using may come directly from your device if it is set up to do so.

Use of Cookies

Cookies are small text files that are automatically placed onto your device by some websites you visit. We use cookies to enhance the online experience of our visitors. We also use them to understand how our website is being used, to inform the content we write and to enable us to make improvements to our website and services and to keep track of your basket.
You have the right to choose whether you want to accept these cookies. By default, your browser will accept cookies – this can be changed by amending the controls on your browser to reflect your cookie preferences. Please note, disabling cookies may prevent you from using the full range of services available on this website.
Our website uses tracking software to monitor our visitors to understand how they use it. We use software provided by Google Analytics, which use cookies to track visitor usage. This software will save a cookie to your computer’s hard drive to track and monitor your engagement and use of the website, and to help identify you on future visits. It will not store, save or collect personal information.

The personal data we collect

The type and quantity of information we collect and how we use it depends on why you are providing it.

If you contact us through our website, purchased a ticket or made a donation on the phone, online or face to face, we will usually collect:
• Your name
• Your address
• Your email address
• Your telephone number
• Your previous booking(s)

We will mainly use your data to:
• Provide you with the services, products or information you’ve requested
• Keep a record of your relationship with us
• Ensure we know how you prefer to be contacted
• Send you direct marketing

Building profiles of our prospects and targeting communications

We use profiling techniques to ensure communications are relevant, timely and to provide an improved experience. Profiling also allows us to target our communications effectively so we do not contact you with irrelevant information.
When building a profile, we may analyse geographic and other information relating to you to better understand your needs and preferences so we can contact you with the most relevant communications. We may use additional information from third party sources when it is available. Such information is compiled using publicly available data about you.

Direct marketing

We aim to communicate with you about the work that we do in ways that you find relevant, timely and respectful. To do this we use data that we have stored about you, such as what events you have booked for in the past, as well as any preferences you have told us about.
With the use of our legitimate organisational interests as the legal basis for communications by post and email. In the case of postal mailings, you may object to receiving these at any time by opting out of direct mail via post in your contact preferences in your account with us. In the case of email, we will give you an opportunity to opt out of receiving them during your first purchase with us. If you do not opt out, we will provide you with an option to unsubscribe in every email that we subsequently send you, or you can alternatively log into your account on our website at any time to unsubscribe.
We may also contact you about our work by telephone however we will always get explicit consent from you before doing his. Please bear in mind that this does not apply to telephone calls that we may need to make to you related to your purchase.
If you wish to opt out of our communications you can contact us on 020 2363 8196 or
In all of the above cases we will always keep your rights and interests at the forefront to ensure they are not overridden by your own interests or fundamental right and freedoms. You have the right to object to any of this processing at any time. If you wish to this, please use the contact details at the end of this policy. Please bear in mind that if you object this may affect our ability to carry out tasks above that are for your benefit.

Third parties

We do not sell or share personal details to third parties for the purposes of marketing.

How we keep your data safe and who has access

To our knowledge we comply with GDPR.
There are appropriate technical controls in place to protect your personal details. For example, our network is protected and routinely monitored.
We will not transfer, process or store your data anywhere that is outside of the European Economic Area.
There are certain circumstances under which we may disclose your personal information to third parties. These are as follows:
To our own service providers who process data on our behalf and on our instructions (for example our ticketing system software provider). In these cases we require that these third parties comply strictly with our instructions and with data protections laws, for example around security of personal data.
Where we are under a duty to disclose your personal information in order to comply with any legal obligation (for example to government bodies and law enforcement agencies).
If we run an event in partnership with another named organisation your details may need to be shared. We will be very clear what will happen to your data when you register so you have the option to opt out.

Your debit and credit card information

If you use your credit or debit card to purchase from us or to make a donation, we will ensure
that this is carried out securely and in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). We do not currently store your card details in our system.

Your right to your personal information

You have a right to request a copy of the personal information that we hold about you and to have any inaccuracies in this data corrected. Please use the contact details at the end of this policy if you would like to exercise this right.

Legal basis

There are three bases under which we may process your data:

Contract purposes

When you make a purchase from us or make a donation to us, you are entering into a contract we need to process and store your data. As we may need to contact you by email or telephone in the case of cancellation of a show, or in the case of problems with your payment. If you have signed up yourself or a child to an event or workshop then we will need to store your data in the case we need to contact you in regards to any changes with that event or workshop.

Legitimate business interests

In certain situations we collect and process your personal information for purposes that are in our legitimate organisational interests. However we only do this if there is no overriding prejudice to you by using your personal information in this way. We describe below all situations where we may use his basis for processing.

With your explicit consent

For any situation where the two bases above are not appropriate, we will instead ask for your explicit consent before using your personal information in that specific situation.

Your right to know what we know about you, make changes or ask us to stop using your data

You have a right to ask us to stop processing your personal data by either calling us on 020 2363 8196 or
You have a right to ask for a copy of the information we hold about you. If there are any discrepancies in the information we provide, please let us know and we will correct them.
If you want to access your information, send a description of the information you want to see and proof of your identity to or by post: Forty Hall, Forty Hill, Enfield, EN2 9HA.
If you have any questions please send these to

Changes to this policy

We may change this Privacy Policy from time to time. If we make any significant changes in the way we treat your personal information we will make this clear on the Website or by contacting you directly.

If you have a privacy concern, complaint or question for the Enfield Council Data Protection Officer, please email

You can also contact the Council’s Data Protection Officer directly at or by post: Data Protection Officer, Enfield Council Civic Offices, Silver Street, Enfield, EN1 3XA.

You can also raise concerns with the Information Commissioner if you are not satisfied with our data handling. Please contact them via their website