Privacy Notice

Last updated: 14/10/25

Privacy Policy

Multi Story Orchestra complies with the EU General Data Protection Regulation (GDPR) to process, protect, and remove personal data held by the company.

How we collect information about you

We may collect and store information about you whenever you interact with us. For example, when you sign up to our newsletter, register for an event, submit an enquiry, apply for a job, make a donation, or otherwise give us any other personal information. We may also receive information about you from third parties for a specific purpose – but only if you've given them permission to share your information.

What information we collect

Personal data we collect may include your name, address, email address, phone number or the name of your employer, your role and workplace address and email. We collect this data through our contact forms, registration forms, event booking forms, application forms, surveys, competitions and our marketing mailing list. We may also collect your bank account details, if for example you are setting up a donation by direct debit.

We also use Google Analytics to monitor how people use our site so we can improve it. We do this by using cookies, which you can learn more about by reading our cookie policy. Cookies collect information anonymously, including the number of visitors to our site, where visitors have come to our site from and the pages they visited. So you can use our website without giving us any personal information and we won't know who you are.

We may also use your IP address to help diagnose problems with our server and to administer our website and monitor use of our website.

If you're aged 16 or under, please obtain your parent or guardian's permission before providing any personal information to our site.

Use of cookies

You can find information about our use of cookies in our cookies policy.

How we use the data we collect

We use your data to contact you with information you would reasonably expect or have agreed to, like shows and projects, fundraising, and to send general marketing communications.

You can unsubscribe from our marketing communications at any time either by emailing admin@multi-story.org.uk or by clicking the 'Unsubscribe' link in a marketing email.

Our legal basis for processing your data

We process your data based on your consent (when you sign up to our mailing list or register for events), our legitimate interests (to tell existing supporters about our work and fundraising activities), contractual necessity (when processing payments), or legal obligation (keeping financial records for HMRC).

How we use your data for fundraising

We may contact existing supporters about fundraising appeals and campaigns if you've previously donated, attended our events, volunteered, or shown interest in our work. We believe you would reasonably expect to hear from us based on our relationship with you. You can opt out of fundraising communications at any time by emailing admin@multi-story.org.uk or clicking 'Unsubscribe' in any email.

Sharing your data

We don't share, sell or use your personal data for profiling purposes. We may share your data with trusted service providers who help us run our operations (such as email platforms and payment processors), and with partner organisations only with your explicit consent. All third parties must keep your data secure and use it only for the purposes we specify.

How we make sure the data we collect from you is secure

We take appropriate measures to ensure that we keep your personal data secure, accurate and up to date, and that we only keep it as long as is reasonable and necessary.

Although we use appropriate security measures once we have received your personal information, the transmission of information over the internet is never completely secure. We do our best to protect personal information, but we cannot guarantee the security of information shared to our website, so this is at your own risk.

How long we keep your data

We keep your personal data for as long as necessary for the purposes outlined in this policy:

  • Marketing contacts: Until you unsubscribe or after 5 years of inactivity.

  • Donor records: For 7 years after your last donation (to comply with Gift Aid regulations).

  • Financial records: For 7 years (to comply with HMRC requirements).

  • Event participants: For 3 years after the event.

  • Job applications: For 6 months after the recruitment process ends.

Your rights

Under GDPR, you have the right to:

  • Access your personal data and receive a copy

  • Rectify inaccurate or incomplete data

  • Erase your data (in certain circumstances)

  • Restrict how we process your data

  • Object to processing based on legitimate interests, including for marketing purposes

  • Data portability: receive your data in a portable format

  • Withdraw consent at any time where we're relying on consent

To exercise any of these rights, please contact us at admin@multi-story.org.uk.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Privacy policy updates

We may occasionally make changes to this information and our privacy policy. When we do, we will notify you here that it has been updated as appropriate under the circumstances – a direct change to the policy on this web page, and for any other changes, via a public notice on our website or by sending you an email.

Disclaimer

Multi Story Orchestra accepts no responsibility or liability for any loss or damage arising from inaccurate, incomplete or out of date information contained here.

This site contains links to other sites. Links to third party websites are provided for convenience only and Multi Story Orchestra is unable to provide any warranty concerning the accuracy or completeness of any information held within these third party sites. Furthermore, Multi Story Orchestra is not responsible for the privacy practices or the content of other such sites.

Copyright

Unless explicitly stated, copyright and other intellectual property rights in all material on this site is owned by Multi Story, its collaborators or its partners (including, but not limited to, works contributed by photographers, writers, graphic designers and illustrators, as commissioned by either Multi Story or a third party company). Any copying, re-publishing, altering, transmitting or using in any way material from this site, for any purpose, without written permission from Multi Story Orchestra, is prohibited.

Contact us

If you have any questions about this privacy policy or how we handle your data, please contact: admin@multi-story.org.uk