Privacy policy

We’re here to help people connect to art. The trusted relationship we’ve built over the years with the people we work with and provide services for is at the heart of what we do. In short, we don’t want to do anything to jeopardise that trust.

MAC is a charity and a business limited by guarantee and holds personal data for staff, artists, customer and contractors. MAC’s policies and procedures are in-line with both the General Data Protection Regulations (GDPR) and the Privacy of Electronic Communications Regulations (PECR).

This policy explains how we collect your personal data, what we do with it and how we keep it securely. For ease of reading we’ve split the policy into distinct areas.

Why does MAC collect data?

We have an operational need for collecting personal data:

  • To contact or identify bookers to pass on vital information e.g. changes or updates to events
  • From prospective employees as part of recruitment to a role within the organisation
  • From employees and contractors to pay, employ, develop and maintain a professional relationship
  • To seek donations to enable us to provide arts activities for everyone, keep our prices accessible and undertake updates to our building. Find out more about how we raise funds and our fundraising promise to you.

We’re a registered arts charity with tight financial resources. As an arts centre, we want to make the best possible use of our available funds to bring high quality arts and culture to our visitors and audiences. By developing a better understanding of our users through their personal data MAC can make better decisions, market our products, fundraise more efficiently and, ultimately, ensure we reach our goal of making sure people of all backgrounds can access an excellent arts provision.

What data does MAC hold?
  • Name
  • Contact details e.g phone number, email address, mailing address
  • Date of birth where supplied
  • Your booking and/or donation history with us*
  • Any other information you share with us as part of your interaction with MAC (e.g. access needs, dietary requirements)

We keep a record of the mailings and emails we send you, and we may track whether you receive or open them so we can make sure we are sending you the most relevant information. We may then track any subsequent actions online, such as buying a ticket.

Sensitive information

Sometimes we ask you to provide sensitive information, for example when you book for certain events or participate in some activities, or when you apply for a job. As with all the personal information we hold, sensitive information is held securely and restricted to those who need to use it. We delete sensitive information when we no longer need it.

* We maintain a record of your transaction history, but we never store your card number (although we may keep a note of the last four digits to help us identify transactions)

How is data collected?


  • At the point of sale for tickets, room bookings etc
  • When you voluntarily take part in a survey and give us permission to use your information
  • When you apply for a job at MAC (we hold the application for six months before destroying it for unsuccessful candidates)
  • When employed or contracted by MAC
  • When you make a donation
  • When you join a mailing list
  • If you are a business contact


Your information may be shared with us by fundraising sites we use such as Just Giving or CAF Donate. These independent third parties will only do so when you have indicated that you wish to support MAC and have given your consent. You should check the Privacy Policy of these organisations when you provide your information to understand fully how they will process your data.

Social Media

Depending on your settings or the privacy policies for social media and messaging services like Facebook or Twitter, you might give us permission to access information from those accounts or services.

When you use our website or Wi-Fi

Like most websites, we use cookies to help us make our site – and the way you use it – better. Cookies mean that a website will remember you. They’re small text files that sites transfer to your computer (or phone or tablet). They make interacting with a website faster and easier – for example by automatically filling your name and address in text fields.

In addition, the type of device you’re using to access our website and the settings on that device may provide us with information about your device, including what type of device it is, what specific device you have, what operating system you’re using, what your device settings are, and why a crash has happened. Your device manufacturer or operating system provider will have more details about what information your device makes available to us. You can find our Cookies policy here.

Information available publicly

This may include information found in places such as Companies House, your biography on your work website or information that has been published in articles/ newspapers

Children and vulnerable individuals

We also hold safeguarding information on children, young people and vulnerable adults to ensure we are able to protect them and best meet our statutory obligations. This is held securely and access to this information is further limited.

How do we store your data and who can see it?


All data is stored on a password protected computerised system which is compliant with highest levels of digital and physical security. We use a ticketing system called Spektrix to store all of our data relating to sales, marketing and certain fundraising activities.


Access to this data is only granted to personnel who have been trained on best practice in data handling and related legislation.

Your rights regarding your data

You have the following rights related to your personal data:

  • The right to request a copy of personal information held about you
  • The right to request that inaccuracies be corrected
  • The right to request us to stop processing your personal data in certain circumstances
  • The right to withdraw consent
  • The right to lodge a complaint with the Information Commissioner's Office or Fundraising Regulator

If you want to access your information, please refer to our Subject Access Request Policy and use our Subject Access Request Form which you can download via the links below.

1 4a Subject Access Request Policy Dec 2023

1 4b Subject Access Request Form Dec 2023

How to update your data or preferences

Please let us know if your contact details change or have any discrepancies by contacting our Sales & Events team either in person, by calling 0121 446 3232 or by emailing [email protected]

If you have any questions about our privacy policy or information we hold about you please contact [email protected] or write to us at: Midlands Arts Centre, Cannon Hill Park, Birmingham, B12 9QH