Privacy Policy

Effective: February 2026 · BrightDog Theatre Ltd

1. Who We Are

BrightDog Theatre Ltd ("we", "us", "our") operates the members portal at members.brightdogtheatre.com. We are the data controller for the personal information described in this policy.

Questions or requests about your data: contact@brightdogtheatre.com

2. What Data We Collect and Why

Data	Why we collect it	Legal basis
Full name, email address	Creating and managing your membership account	Contract
Membership level & expiry	Providing the correct level of access to content and events	Contract
Password (hashed — never stored in plain text)	Authenticating you securely	Contract
Payment information	Processing membership fees. We do not store card details — payments are handled entirely by Stripe	Contract
Email address (newsletter opt-in)	Sending you news and updates about BrightDog Theatre productions and events	Consent (you can withdraw at any time)
Account creation date	Membership record keeping	Legitimate interest

3. Third Parties We Share Data With

We only share your data where necessary to deliver our service:

Stripe — payment processing for membership fees. Stripe is PCI-DSS compliant and GDPR-ready. See stripe.com/privacy.
IONOS — outbound email delivery (newsletters and transactional emails sent from contact@brightdogtheatre.com).

We do not sell your data to any third party. We do not use advertising or tracking services.

4. How Long We Keep Your Data

Active accounts: for as long as your membership is active.
After cancellation or account deletion: up to 2 years, for legal and accounting purposes, after which it is permanently deleted.
Newsletter consent records: kept for as long as you remain subscribed, then deleted when you unsubscribe.

5. Your Rights Under UK GDPR

You have the right to:

Access — request a copy of the data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your account and personal data.
Restriction — ask us to limit how we use your data.
Portability — request your data in a machine-readable format.
Object — object to processing based on legitimate interest, including marketing.
Withdraw consent — unsubscribe from newsletters at any time via the unsubscribe link in any email, or by contacting us directly.

To exercise any of these rights, email us at contact@brightdogtheatre.com. We will respond within 30 days.

6. Browser Storage

We use your browser's local storage (not cookies) to keep you logged in between sessions. This stores a secure login token on your device only. It is not used for tracking and is not shared with third parties. You can clear it at any time by logging out or clearing your browser data.

We do not use advertising cookies, analytics cookies, or tracking pixels.

7. Security

Passwords are hashed using bcrypt and are never stored in plain text. All traffic between your browser and our servers is encrypted via HTTPS. Database backups are stored securely and encrypted at rest.

8. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk.

9. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will always reflect the latest version. Significant changes will be communicated by email.

← Back to Dashboard