Privacy policy

1. Who is responsible for your information

NPG Producing Limited, registered in England and Wales, company number 17417245. Registered office: 4th Floor, Silverstream House, Fitzroy Street, London, England, W1T 6EB. We are the controller for personal information used to run this website and respond to HUMBUG enquiries. Contact hello@humbugchristmas.co.uk about privacy or write to our registered office. For the other Niche Productions Group shows mailing list, the responsible company is Niche Productions Limited, company number 15177043, registered office: 4th Floor Silverstream House, 45 Fitzroy Street, Fitzrovia, London, England, W1T 6EB. For Immersive Everywhere marketing, the company is Immersive Everywhere Ltd, number 16052479. For Ticketing Everywhere marketing and ticketing services, the company is Ticketing Everywhere Ltd, number 12384072. Both have their registered office at 2 Maple Court, Davenport Street, Macclesfield, Cheshire, England, SK10 1JE. You can write to the relevant registered office for privacy enquiries or contact us for help directing your request. This notice covers website visitors, people who contact us and people who choose to join the HUMBUG mailing list; separate booking services may provide their own privacy notices.

2. Information we receive

If you email us or submit the corporate enquiry form, we receive your email address, name and any information you include, such as a telephone number, organisation, preferred dates, group size and correspondence. Website delivery involves technical information such as IP address, browser information, requested pages, timestamps and security or error logs. If you sign up for emails, we collect your email address, any optional details you provide, your selected marketing preferences and evidence of your consent, such as the time, source and wording of your opt-in. Mailchimp also processes subscription status and delivery information, including bounces and unsubscribes. The enquiry form identifies required fields; without these we cannot process the form. Your phone number and requests are optional. Providing enquiry information is not a statutory requirement. We do not collect payment-card details through this website. Please do not email card details or unnecessary sensitive information; if you need to discuss accessibility, ask us how to share relevant details securely.

3. Why we use information

We use enquiry information to answer questions and discuss your requirements. Where you ask us to take steps towards a contract with you, our lawful basis is taking those steps or performing that contract. For general questions and enquiries made on behalf of an organisation, we rely on our legitimate interests in responding to requests and managing business relationships. We use technical information for our legitimate interests in delivering a reliable website, preventing misuse and investigating faults. Information needed to meet a specific legal requirement is processed on the basis of that legal obligation. Sending an enquiry does not subscribe you to marketing. For newsletter sign-ups, we rely on your consent to email you HUMBUG show news, promotional updates and on-sale announcements. We also rely on consent for optional Google Analytics measurement. We use consent-preference records to respect your choices and demonstrate compliance with applicable data-protection and electronic-communications obligations. Consent is optional and separate from accepting website terms or making a booking.

4. Service providers and sharing

Our website is hosted by Vercel. Corporate enquiry forms are processed by Formspree, which stores submissions and delivers email notifications to our sales team. The submitted information includes your contact details, company, group size, preferred performance and any requests. This does not subscribe you to marketing. See Formspree’s privacy policy for information about its processing. Our email is handled through Google Workspace. Cookie Script provides consent controls and may process consent records, including the choice, time, page, browser information and consent identifier, according to its enabled features. See Cookie Script’s privacy policy. Hosting, IT and email service providers process information as necessary to deliver their services. Relevant authorised team members can handle your enquiry. We may share information with professional advisers or public authorities where necessary to obtain advice, meet a legal obligation or establish or defend legal claims. Newsletter data is stored and processed using Speakeasy Project’s Mailchimp account. Speakeasy Project and authorised people administering the mailing list have access to subscriber information for managing subscriptions and sending the communications you select. Mailchimp provides the email platform. NPG Producing Limited is responsible for its HUMBUG marketing. If you separately opt in to other Niche Productions Group shows, your email address and the relevant consent record are exported to Niche Productions Limited’s mailing platform so it can send the news and offers you requested. Where a separate Ticketing Everywhere marketing opt-in is offered and selected, the same applies to Ticketing Everywhere Ltd and its own mailing platform. There is currently no Ticketing Everywhere marketing checkbox on this website. No partner receives marketing permission simply because you joined the HUMBUG list. Each organisation is responsible for the marketing it sends and must honour the preferences and withdrawals that apply to it. Using Speakeasy Project’s account does not give it or any other organisation permission to send its own marketing without the corresponding separate opt-in. If an enquiry needs to be passed to a separate booking or event partner, we will explain that arrangement when relevant.

5. International processing

Hosting and communications providers may process information outside the UK, including in the United States. Formspree’s privacy policy describes its US and international processing; Google’s privacy policy and Cookie Script’s privacy policy describe their international arrangements. Where UK data protection law requires safeguards for such a transfer, an applicable UK adequacy regulation or approved contractual safeguards must be used. You can contact us for information about the safeguards relevant to your data. Mailchimp processes information in the United States and other locations described in its documentation. Its Data Processing Addendum includes international transfer provisions, including UK safeguards where applicable. Vercel describes its international processing arrangements in its Data Processing Addendum.

6. How long information is kept

Retention depends on why the information is needed. Enquiry correspondence is kept for as long as necessary to respond and deal with relevant follow-up. The criteria are the time since the last meaningful contact, whether discussions or a complaint remain open, and whether the records are needed for an identified contractual, accounting or legal purpose. This does not depend on knowing whether someone later booked through another channel. These criteria apply to stored Formspree submissions, sales-inbox correspondence and any copies exported for follow-up. Where an enquiry becomes a booking or dispute, relevant records may need to be kept for applicable accounting, legal and claims requirements. Technical records are retained according to the hosting provider’s service settings and the time needed to resolve security or reliability issues. Mailing-list information is retained while your chosen subscription remains active and necessary for that purpose. If you unsubscribe, marketing for that choice stops; a limited suppression record and evidence of consent may be retained to respect your opt-out and demonstrate compliance. Unsubscribing from one mailing list does not automatically withdraw a separate subscription you have chosen for another. You can ask us for help withdrawing all choices recorded through this website. Records should be deleted or anonymised when those purposes no longer require them. Contact us if you need the retention period applicable to a particular record.

7. Cookies, analytics and maps

Cookie Script provides our cookie-preference controls. Its CookieScriptConsent cookie remembers your choices and is needed to operate those controls. Optional analytics is not required to use the website or send an enquiry. Use Cookie settings to review the cookie declaration, accept or decline optional categories, or withdraw consent.

With your permission, Google Analytics helps us understand visits, page views and use of the website. It can process browser and device information, page and interaction information, and identifiers stored in cookies such as _ga and _ga_DNT6FW4MX0. Our Google tag is G-DNT6FW4MX0. The website loads it only after you accept Performance cookies. Withdrawing that choice disables subsequent analytics tracking through our integration and removes the accessible first-party Google Analytics cookies. It does not undo information already collected. Cookie Script’s declaration provides the cookie durations detected for this site; expiry and retention of information already sent to a provider are different things. See Google’s privacy policy.

With separate Targeting-cookie permission, Meta Pixel (ID 654870473079011) reports page views and signup confirmations to Meta to measure advertising and help deliver relevant Facebook and Instagram ads. Meta may match website activity with information it holds about you; see Meta’s privacy policy. You can withdraw permission through Cookie settings. Email signup consent is separate from cookie consent.

Google Tag Manager (GTM-5M4HH94B) manages additional measurement tags. It loads after you accept Performance or Targeting cookies. Your choices are communicated through Google Consent Mode. Google Analytics remains disabled without Performance consent; advertising storage and personalisation remain denied without Targeting consent.

The interactive location map uses MapLibre software hosted with this website and map data requested from OpenFreeMap when you approach the location section. Those requests share technical connection information, including your IP address, with the map-delivery service. We use this service in our legitimate interests to help visitors find the venue. OpenFreeMap states that it does not use cookies or tracking technologies; its privacy policy explains logging and delivery providers. If the map cannot load, we offer a directions link rather than automatically loading a Google Maps embed. Opening the Google Maps link takes you to Google’s service and privacy controls.

Website images, videos and fonts are hosted with the site. Cookie Script, hosting and security services process technical request information to deliver their services. The newsletter form sends the information you submit to Mailchimp. Speakeasy Project uses Mailchimp’s email-open and link-click tracking for HUMBUG campaigns to understand engagement and improve communications. Open tracking uses an image or similar technology in an email, and click tracking records use of tracked links. These features can associate engagement with a subscriber and collect technical information. Email privacy settings and automated security tools can affect the accuracy of this data. Website cookie preferences do not automatically control tracking inside emails. Agreeing to receive marketing emails is not blanket permission for optional tracking; where consent is required, it must be obtained before that tracking is used. You can unsubscribe from HUMBUG emails using the link in any campaign or contact us about your information.

8. Your choices and rights

You can object to direct marketing at any time. Use the unsubscribe link in the relevant sender’s email or contact us. You can also object to processing based on legitimate interests on grounds relating to your particular situation.

Depending on the circumstances, you can ask for access to your information, correction, erasure, restriction of processing or a portable copy. You can object to processing based on legitimate interests and to direct marketing. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights are subject to legal conditions and exemptions. Contact us to exercise them; we may request proportionate information to verify your identity. We normally respond within one month, subject to any lawful extension. This website does not make automated decisions with legal or similarly significant effects about you.

9. Choosing your emails

The current sign-up form offers two separate, unticked choices: HUMBUG show news and on-sale announcements from NPG Producing Limited; and other Niche Productions Group shows and offers from Niche Productions Limited. Joining a mailing list is optional. To submit the signup form, select at least one of the two choices; you can browse and enquire without subscribing. Selecting a partner’s choice includes permission to share your email address and the relevant consent record with that named organisation for that purpose. The responsible companies are identified above. Speakeasy Project, Immersive Everywhere and Ticketing Everywhere marketing choices are not included in the current form. Their own marketing would require a separate opt-in with relevant controller and contact details. We will not treat acceptance of these terms, browsing, an enquiry or a ticket purchase as newsletter consent. Only the choices you select authorise the corresponding marketing.

Each marketing email must identify its sender and include an unsubscribe link. You can withdraw HUMBUG consent at any time through that link or by emailing hello@humbugchristmas.co.uk. For other selected organisations’ emails, unsubscribe directly using the link in their messages or contact that sender using its privacy information. Exported subscriptions are managed on each selected organisation’s own mailing platform. An unsubscribe from HUMBUG does not automatically unsubscribe you from a separate Niche or Ticketing Everywhere subscription, and vice versa. A withdrawal must be respected in future exports so an opted-out person is not re-added without a fresh opt-in. You may also contact us to help route a request. Withdrawal does not affect processing that was lawful before withdrawal. See Intuit’s Global Privacy Statement for Mailchimp’s own privacy practices.

10. Ticketing Everywhere and booking messages

Ticketing Everywhere will provide the ticketing service for HUMBUG. When you book, it will explain how it handles booking, payment and customer-service information in its own checkout privacy notice. Information necessary to fulfil your booking may be shared with NPG Producing Limited. Booking confirmations, ticket delivery and essential event updates are service communications, separate from optional promotional emails. Buying a ticket does not select the marketing choices described here. Immersive Everywhere and its sister company Ticketing Everywhere have separate marketing choices; consent to one does not automatically cover the other.

11. Sharing information with the venue

We and the ticketing provider may share relevant booking and attendance information with the operator of Greenwich Borough Hall and its authorised venue staff so they can manage audiences and deliver your visit. This may include your name, ticket or booking reference, ticket validity and entry status, purchased add-ons and redemption status, and relevant contact details or customer-service information.

The purposes are to scan and validate tickets, manage admissions, redeem purchased packages and add-ons, communicate necessary emergency or safety information, and resolve customer-service issues while you are on site. Only information reasonably needed for these duties should be made available, with access limited to staff who need it. This sharing does not authorise the venue to add you to its marketing lists.

Where necessary to deliver a booking with you, the lawful basis is performance of that contract. For other attendees and operational support, we rely on our legitimate interests in delivering the event, managing admissions and providing customer service. Where a specific legal safety obligation applies, the basis is compliance with that obligation. In an emergency, information may also be used or shared where necessary to protect someone’s life. Any accessibility or health information requires additional safeguards and an applicable special-category condition; only the minimum necessary information should be shared.

Venue access and retention should be limited to the time needed to deliver the event and resolve associated enquiries or incidents, unless a legal requirement or a relevant claim requires longer retention. Where the venue processes information for its own legal, safety or incident-management responsibilities, its own privacy information also applies. Contact us if you need details of the venue operator’s handling of a particular record.

12. Complaints and updates

Please contact us first if you have a concern so we can investigate. You can also complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, or telephone 0303 123 1113. We may update this notice when the website or our handling of information changes. The date at the top shows when it was last updated.