Your data
Privacy.
What this site records, why it is recorded, and how long it is kept.
What is recorded
When you select a ticket link, or open a show page, the site records the show identifier, the part of the site the link appeared on, the page path, the country Cloudflare reports for the request, and the time.
The record contains no cookie, IP address or other identifier. It cannot be linked to an individual, and separate records cannot be combined to reconstruct a visit.
The purpose is to measure outbound interest in listings and sponsored shows. These counts do not tell us whether a ticket was purchased. The lawful basis is legitimate interests: understanding how the site is used.
What is not recorded
The site does not use third-party analytics or cross-site tracking. Sponsored shows are clearly labelled and their outbound clicks are counted separately using the same anonymous records. Public visitors receive no analytics or advertising cookies. Fonts and images are served from this site. Requests to the public API are not counted.
Admin sign-in
The private sponsorship panel uses a secure sign-in cookie lasting up to eight hours. Failed sign-in attempts are rate limited using a short-lived hashed network address; these counters expire after 15 minutes, are cleared on later sign-in attempts, and are never combined with audience analytics.
Hosting
Cloudflare serves the site and processes each request. It keeps its own security and performance logs under Cloudflare’s privacy policy. The site operator does not receive or retain visitor-level logs. Cloudflare may set a security cookie when it checks whether a request is automated.
Messages sent to info@glasgowtheatre.com are kept, together with the sender’s address, in order to reply and to correct listings.
Links to venues
Ticket links lead to venue booking pages. Once followed, the venue’s privacy policy applies.
Retention
Click and page-view records are kept for up to 13 months. After that they are reduced to aggregate totals, which are retained for comparison over time.
Your rights
The click records do not identify individuals, so individual records cannot be retrieved or deleted on request. Where personal data is held for another reason, such as correspondence, you can ask to see it or have it deleted under UK GDPR by writing to info@glasgowtheatre.com.
Changes
Material changes to this policy will be reflected in the date below.
Last updated: 30 October 2026.