– LEGAL
Privacy Policy
Last updated on 5 March 2026.
TwentyThree Studios Limited is committed to keeping your personal information (data) safe and meeting our responsibilities under privacy law. Privacy law in the UK is governed by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can find general information about data protection law on the ICO’s website.
This policy is intended to let you know how we use the data we hold about you, and your rights in regard to this. It does not provide exhaustive detail, but we are happy to provide more information or explanation on request.
Who We Are
We are TwentyThree Studios Limited. Our postal address is: TwentyThree Studios, 36 Brookfield Avenue, Dover, Kent, CT16 2AH, United Kingdom.
Data Protection Contact
We do not have a designated Data Protection Officer. Responsibility for data protection matters sits with Gary JJ Spate, who acts as our primary point of contact for all data protection enquiries.
- Email: info{at}twentythreestudios{dot}com
- Post: Gary JJ Spate, TwentyThree Studios, 36 Brookfield Avenue, Dover, Kent, CT16 2AH
Who You Are
You are an individual who has interacted with TwentyThree Studios in one or more of these ways (this list is not exhaustive):
- Used the TwentyThree Studios website
- Asked to join our mailing list or our Network
- Completed an online or paper feedback form or survey
- Contacted us via email or interacted with us on social media
- Sent money to TwentyThree Studios online or by bank transfer, cheque, cash or services in kind
- Booked to attend a TwentyThree Studios screening, performance, or event
- Participated in a TwentyThree Studios project (or are the parent or guardian of a child under 18 who has)
- Been selected by TwentyThree Studios to receive a surprise message, adventure or gift, using publicly available contact details
- Texted a TwentyThree Studios mobile phone
- Told another company that they can pass information about you to TwentyThree Studios
This privacy policy does not cover personal data we hold about you as an employee, trustee, supplier, freelancer or sole trader who we work with or have discussed working with.
What Data We May Hold About You
- Photographs and videos taken during a TwentyThree Studios screening, project or event
- Information you gave us in an online or paper form (such as feedback, contact details, age, ethnicity and gender)
- Details of performances and events you have attended, and purchases or donations you have made, including via WooCommerce, Eventbrite, PayPal, Kickstarter and Indiegogo
- Communications with us (such as emails and notes of phone calls) and any information you send us via email
- Information you gave us during a project or event in order for us to create an interactive experience
- Your publicly available social media activity and interactions with TwentyThree Studios
- Publicly available information we have discovered about you through research, in the course of delivering a project or event you signed up for
Our Lawful Basis for Processing Your Data
UK GDPR requires us to have a lawful basis for processing your personal data. Depending on how and why we use your data, we rely on one or more of: consent, contract, legitimate interests, or legal obligation.
How We Use Data About You
We collect and hold data about you so we can create and deliver experiences and performances, learn from feedback, keep track of attendance, personalise communications, manage our organisation, record donations for Gift Aid purposes, keep in touch with potential collaborators, and send you information about our work and events.
Use of Anonymous Data
We share statistics about our audiences and participants with third parties (such as Arts Council England, BFI, BAFTA and venue partners) to report on our work; this data is always anonymised. We use MailChimp to deliver newsletters and Google Analytics to collect anonymised information about visitors to our website.
Cookies
By visiting our website, you consent to the use of cookies. We use strictly necessary, analytics, and functional cookies. See our Cookie Policy for full details.
Children and Young People
TwentyThree Studios is committed to the welfare of all children, young people and vulnerable adults. We will seek consent from a parent or guardian before collecting data about children. For people under 16, we use a nominated adult as the first point of communication.
How Long We Keep Your Data
As a general rule, we retain personal data for a period of 6 years after our last interaction with you, after which it will be securely deleted or anonymised, reflecting our obligations under UK tax and accounting law.
How We Keep Your Data Safe, and Who Sees It
We make sure your data is kept securely and access is restricted to appropriately trained staff. We will never sell your data, but it may be processed by limited third parties such as payment platforms and ticket sites. Where we transfer data internationally, we ensure an appropriate level of protection is in place under UK GDPR.
Your Rights
Under UK GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object. You also have rights related to automated decision-making. To exercise any of these rights, please contact us at info{at}twentythreestudios{dot}com.
Opting Out of Marketing
You have the right to tell us to stop contacting you for marketing purposes at any time. Email info{at}twentythreestudios{dot}com, or click ‘unsubscribe’ in any MailChimp email.
Right to Complain to the ICO
If you are unhappy with how we have handled your personal data, please contact us in the first instance. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or by phone on 0303 123 1113.
Questions about this policy? Contact us at info{at}twentythreestudios{dot}com.