This document explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data, and keep it safe.
There’s a lot of information here and it’s possible (if you’ve started reading) that you might not make it all the way to the end, but we want to make it as easy as we can for you to understand your rights and how we use your data.
Hopefully the rest of this document will make things clear for you, but if not, feel free to contact us via the website and we’ll do what we can to help you.
The Cinema Society (we’ll call it TCS from now on) is a club that offers its members the opportunity to buy vouchers that may be exchanged for cinema tickets with partner cinema companies. The price of the vouchers normally (unless the cinemas themselves are running a special offer) represent a discount against the face value of a cinema ticket.
The Cinema Society is a trading name of Mongoose Promotions Limited, a company trading in England and Wales, from now on when we refer to “we” or “us” take it to mean both Mongoose and TCS.
To take advantage of the discounted prices of vouchers you will need to register your details with us to become a member. Only those people who are part of a closed user group with whom we are working (we’ll refer to the as “clients” from here on) are allowed to register. Those people who are entitled to join will typically either be employees of our clients or customers (for example gym members or members of a charity).
We use various digital techniques in order to link to our client’s businesses, it’s not necessary to go into those here (because they don’t affect your privacy) but we’d be very happy to talk you through them if you wish – just get in touch through the website.
In accordance with the law there are a few reasons why we collect your data:
In specific situations, we can collect and process your data with your consent. For example, when you tick a box to allow us to let you know about forthcoming movies.
In certain circumstances, we need your personal data to comply with our contractual obligations. For example, some of our clients wish to know how many of their members are taking up the offer of discounted cinema tickets and so we need to identify you as a member of a particular client and we may tell that client about your cinemagoing habits in order to help them communicate more effectively with you..
If the law requires us to, we may need to collect and process your data. For example, we can pass on details of people involved in fraud or other criminal activity affecting us to law enforcement.
In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected to help us build and operate a successful business and which does not materially impact your rights, freedom or interests.
For example, we may, over time build a picture of the types of films you like to watch so that we can let you know when something is coming up that we think you may enjoy.
We only use your data in order to try and give you the best experience of using TCS that we possibly can, that might include:
We know how much data security matters to you. With this in mind we treat your data with the utmost care and take all appropriate steps to protect it.
We secure access to all transactional areas of our websites and apps using ‘https’ technology.
Access to your personal data is password-protected, and sensitive data (such as payment card information) is secured by SSL encryption and not stored in our servers.
We maintain our systems using the latest software updates.
Typically we will only retain your data for as long as you are a member of TCS though we will retain access to your transactional information for 5 years.
We sometimes share your personal data with trusted third parties. For example, our transactional partner, delivery couriers, for fraud management, to handle complaints, to help us personalise our offers to you and so on.
Sometimes we will need to share your personal data with third parties and suppliers outside the European Economic Area (EEA), such as Ireland or the USA.
If you are based outside the UK and place an order with us, we will transfer the personal data that we collect from you to our business in the UK.
The EEA includes all EU Member countries as well as Iceland, Liechtenstein and Norway. We may transfer personal data that we collect from you to third-party data processors in countries that are outside the EEA.
This might be needed in order to fulfil your order, process your payment details or provide support services.
You can at any time:
Whenever you have given us your consent to use your personal data, you have the right to change your mind at any time and withdraw that consent – you just need to contact us to let us know.
We will always need to confirm your identity should you wish to make any changes to the data we hold. In most cases you can do this by logging into TCS though on occasion we may need to take further steps to confirm who you are.
We’ll always do our best to ensure that you are satisfied with the way your data has been handled, however if you are not satisfied then we hope you will contact us in the first instance.
If however, you want to take things further then you have the right to make a complain to the Information Commissioner’s Office (ICO).
If you are based outside the UK, you have the right to lodge your complaint with the relevant data protection regulator in your country of residence.
If you have any questions about this policy, please contact us at [email protected] or contact us via the TCS web platform.