Privacy Policy

Last updated: 15 June 2026

He’s Behind You Ltd respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and share personal information when you visit hesbehindyou.com, join our mailing list, contact us or otherwise interact with us.

This policy has been prepared with reference to the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

1. Who we are

He’s Behind You Ltd is the controller of the personal information described in this policy.

2. Information we collect

Depending on how you interact with us, we may collect:

• Your name and email address.
• Your telephone number, postal address or other contact details where you provide them.
• Your mailing-list subscription status and marketing preferences.
• The contents of messages, enquiries or correspondence you send to us.
• Information relating to access requirements or customer-service requests.
• Technical information such as your IP address, browser type, device type, operating system and approximate location.
• Information about how you use our website, including pages visited, links selected and referring websites.
• Cookie identifiers and similar technical information.
• Information you provide when entering a promotion, completing a survey or otherwise interacting with us.

Please do not send us sensitive personal information unless it is necessary for us to deal with your request.

Because our productions are particularly popular with LGBTQ+ audiences, a person’s interaction with us could potentially suggest information about their sexual orientation. We do not use mailing-list membership, ticket interest or website activity to identify or profile anyone’s sexual orientation.

3. How we collect your information

We collect personal information:

• Directly from you when you join our mailing list, contact us or submit information through the website.
• Automatically through cookies, server logs and similar technologies.
• From ticketing venues, box offices, event partners or service providers where this is necessary to administer a booking or respond to an enquiry.
• From publicly available sources, including social-media platforms, where you interact with our public accounts.
• From professional representatives, press contacts or business partners where appropriate.

4. How and why we use your information

Where we rely on legitimate interests, we consider whether our use of your information is necessary and whether your privacy rights outweigh those interests.

5. Marketing communications

We may send you emails about our productions, ticket releases, cast announcements, offers and other He’s Behind You news where you have agreed to receive them.

You may withdraw your consent at any time by selecting the unsubscribe link in a marketing email or emailing hello@hesbehindyou.com.

Withdrawing consent will not affect the lawfulness of marketing sent before your withdrawal.

We may retain a minimal suppression record containing your email address after you unsubscribe. This allows us to honour your request and avoid adding you back to the mailing list accidentally.

6. Ticket purchases

Unless expressly stated otherwise, tickets for our productions are sold by the relevant theatre, venue, box office or ticketing provider.

When you follow a ticket link and purchase tickets on another organisation’s website, that organisation will normally be responsible for the personal information it collects during the booking process. Its own privacy policy will apply.

We do not ordinarily receive or store your full payment-card details. Payments are processed by the relevant venue, box office or payment provider.

A venue or ticketing provider may share limited booking information with us where necessary to:

• Manage a production or event.
• Provide customer service.
• Respond to an access request.
• Administer a ticket-related offer.
• Comply with legal or accounting requirements.

We will not add ticket purchasers to our marketing list unless there is an appropriate lawful basis to do so.

7. Access requirements

Where you contact us or a venue about an access requirement, the information you provide may reveal information about your health or disability.

We will only use that information to help respond to your request, arrange appropriate assistance or communicate with the relevant venue. Where required, we rely on your explicit consent or another condition permitted by data-protection law.

Please provide only the information reasonably necessary to explain the assistance you require.

8. Cookies and similar technologies

Our website may use cookies and similar technologies to:

• Make the website function correctly.
• Maintain security.
• Remember choices or preferences.
• Measure website traffic and performance.
• Understand how visitors use the website.
• Support embedded content or links to third-party services.

Some cookies are essential for the operation of the website. Other cookies, including certain analytics, advertising or social-media technologies, may require your consent.

Where consent is required, those technologies should not be activated until you have made your choice. You should also be given a straightforward way to reject or later change your preferences.

You can also control cookies through your browser settings. Blocking some cookies may affect how the website operates.

Further details about the particular cookies used on the website may be provided through our cookie banner or cookie settings panel.

9. Who we share information with

We may share personal information with carefully selected organisations where necessary, including:

• Our website-hosting and website-management providers, including Squarespace.
• Our email-marketing provider, including Mailchimp.
• Theatres, venues, box offices and ticketing providers.
• IT, cloud-storage, communications and security providers.
• Professional advisers, including accountants, lawyers and insurers.
• Production partners, contractors and service providers who need the information to perform their duties.
• Press or marketing agencies where you have contacted us about a relevant matter.
• Law-enforcement agencies, regulators, courts or public authorities where disclosure is legally required.
• A purchaser, investor or successor organisation in connection with a proposed sale, restructuring or transfer of our business or assets.

These recipients may act as our processors, independent controllers or joint controllers, depending on the circumstances.

We do not sell your personal information.

10. Third-party websites and social media

Our website contains links to third-party websites and services, including theatres, ticketing providers, Mailchimp, Instagram, Facebook and X.

Those organisations may collect information about you when you visit their websites or interact with their content. We do not control their privacy practices, and you should review their privacy policies before providing personal information.

Our social-media pages are also subject to the relevant platform’s privacy terms.

11. International transfers

Some of our service providers may process personal information outside the United Kingdom, including in the United States or other countries in which they or their subcontractors operate.

Where personal information is transferred outside the UK, we will take reasonable steps to ensure that an appropriate legal safeguard is in place. This may include:

• Transferring information to a country covered by UK adequacy regulations.
• Using the UK International Data Transfer Agreement.
• Using the UK Addendum to approved standard contractual clauses.
• Relying on another legally permitted transfer mechanism.

You may contact us for further information about the safeguards used for a particular transfer.

12. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting and reporting requirements.

Our usual retention periods are:

• Mailing-list information: until you unsubscribe or we determine that the list is no longer active, after which we may retain a suppression record.
• General enquiries: normally for up to two years after the enquiry has been resolved.
• Access-related information: only for as long as needed to deal with the relevant booking, performance or request, unless a longer period is required in connection with a complaint or legal obligation.
• Contractual and financial records: normally for six years after the end of the relevant financial year or contractual relationship.
• Website and security logs: normally for a limited period appropriate to security, troubleshooting and fraud prevention.
• Legal claims and disputes: for as long as reasonably necessary to establish, exercise or defend the claim.

We may retain information for longer where required by law or where legal proceedings are underway or reasonably anticipated.

13. How we protect your information

We use reasonable organisational and technical measures designed to protect personal information against accidental or unlawful loss, misuse, alteration, disclosure or access.

Access to personal information is limited to people and service providers who reasonably require it for their work. However, no website or internet transmission can be guaranteed to be completely secure.

14. Your rights

Depending on the circumstances, you may have the right to:

• Be informed about how your information is used.
• Request access to your personal information.
• Ask us to correct inaccurate or incomplete information.
• Ask us to erase your information.
• Ask us to restrict how we use your information.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Withdraw consent where processing is based on consent.
• Receive certain information in a portable format.
• Complain to the Information Commissioner’s Office.

These rights are not absolute, and exemptions may apply.

To exercise a right, email hello@hesbehindyou.com. We may need to verify your identity before completing your request.

15. Complaints

Please contact us first if you have concerns about how we use your personal information.

You also have the right to complain to the UK supervisory authority:

16. Children’s information

Our website and mailing list are not directed at children, and we do not knowingly collect personal information directly from children through the website.

Our productions may be subject to age restrictions established by the relevant venue or ticketing provider. A parent or guardian should make ticketing or access enquiries on behalf of a child where appropriate.

17. Changes to this policy

We may update this Privacy Policy periodically to reflect changes to our website, services, suppliers or legal obligations.

The latest version will be published on this page, and the date at the top will indicate when it was last updated.