GDPR Policy — Freelancers

Northern Ballet Technical Equipment Management System

Last Updated: 24 April 2026

1. Data Controller

Northern Ballet Ltd ("we", "us") is the data controller for personal data processed through our Freelancer Access portal. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Personal Data We Collect

Identity Data: Your full name as provided during account setup

Contact Data: Email address (if provided for notifications)

Access Data: Login password (encrypted), session tokens

Availability Data: Dates you mark as available, unavailable, or booked

Communication Data: Chat messages sent through the freelancer chat

Device Data: Push notification subscription IDs (OneSignal) if you opt in

Documents: Purchase orders and any uploaded files

3. Lawful Basis for Processing

Performance of Contract (Article 6(1)(b)): Processing your availability and booking dates to fulfil your freelance engagement with Northern Ballet

Legitimate Interest (Article 6(1)(f)): Managing tour crew scheduling, internal communication, and operational planning

Consent (Article 6(1)(a)): Push notifications — you can enable or disable these at any time in Settings

4. How We Use Your Data

Display your availability to Northern Ballet production management
Send you booking confirmations and schedule notifications
Enable chat communication with the production team
Provide access to health & safety documentation and truck pack images
Generate and deliver purchase orders for your engagements

5. Who Sees Your Data

Northern Ballet Admin Staff: Production management and technical directors can view your availability and booking dates

Service Providers: OneSignal (push notifications), Base44 (hosting), SendGrid (emails)

We never share your personal data with other freelancers, venues, third-party recruiters, or advertisers.

6. Data Retention

Availability & booking records: Retained for 2 years after last engagement
Chat messages: Retained for 2 years
Purchase orders: Retained for 7 years (financial record keeping)
Account data: Deleted upon request to Northern Ballet

7. Your Rights Under UK GDPR

Access — Request a copy of all personal data we hold about you
Rectification — Correct any inaccurate or incomplete data
Erasure — Request deletion of your personal data
Restriction — Limit how we process your data
Portability — Receive your data in a machine-readable format
Object — Object to processing based on legitimate interest
Withdraw Consent — Disable push notifications at any time

To exercise any of these rights, contact the Northern Ballet Technical Department.

8. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Contact

Northern Ballet Technical Department

Address: Quarry Hill, Leeds, LS2 7PA, UK
Email: technical@northernballet.com
Phone: +44 (0)113 220 8000