PRIVACY AND COOKIES POLICY

TL;DR (The Short Version)
  • What we collect: Basic information like your name, email, and how you use our website.
  • Who we share it with: Only essential service providers (like our website host or secure marketing agencies) OR the specific Lead Producer/Marketing Agency for a show, but only if you explicitly signed up for that specific production.
  • Your control: You can unsubscribe from our emails at any time, or ask us to delete your data by emailing info@dbce.uk.

Welcome to the privacy notice of DB Concert Enterprises Limited ("DBCE"), trading as Darren Bell Productions ("DBP").

DBCE respects your privacy and is committed to protecting your personal data. This privacy notice will inform you as to how DBP looks after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

Please also use the Glossary (Section 10) to understand the meaning of some of the terms used in this privacy notice.

Table of Contents

1. IMPORTANT INFORMATION AND WHO WE ARE

PURPOSE OF THIS PRIVACY NOTICE

This privacy notice aims to give you information on how DBP collects and processes your personal data through your use of this website, including any data you may provide when you sign up to our mailing list, contact us via email, purchase services, or opt-in to partner communications for specific productions.

CONTROLLER

DBCE is the legal entity that acts as the primary data controller and is legally responsible for your personal data (collectively referred to as “we”, “us”, “our”, or “DBP” in this privacy notice). We are the controller for the purposes of the Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).

Please note: This privacy policy applies across various websites, shows, and brands where DBCE/DBP acts as the Producer, Co-Producer, Executive Producer, or General Manager.

IMPORTANT NOTE ON PRODUCTION-SPECIFIC DATA:
DBP frequently acts as a data controller for individual, specific theatrical productions. As part of our sign-up process, if we are collecting email addresses or other personal data for a specific project or show, that data will be handed over to the Lead Producer or the designated Marketing Agency of that specific project. This data is shared strictly on the condition that it is ONLY to be used for marketing and communications related to that specific project, in accordance with the preferences you express at the point of sign-up.

CONTACT DETAILS

  • Full name of legal entity: DB Concert Enterprises Ltd (Company No. 16470910)
  • Trading as: Darren Bell Productions
  • Email address: info@dbce.uk
  • Postal address: 86 to 90 Paul Street, London EC2A 4NE

You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO) (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact DBP in the first instance.

CHANGES TO THE PRIVACY NOTICE

This version was last updated on 11th April 2026. It is important that the personal data we hold about you is accurate and current. Please keep DBP informed if your personal data changes during your relationship with us.

THIRD-PARTY LINKS

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. DBP does not control these third-party websites and is not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

2. THE DATA WE COLLECT ABOUT YOU

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

This website is not intended for children and we do not knowingly collect data relating to children.

💡 In Plain English (The Data We Collect): Most of this is exactly what you'd expect—your name and email if you sign up for a newsletter or buy something. When we mention "Technical" and "Usage" data, it just means our website automatically notes things like whether you are using a mobile phone or a computer, and which pages you clicked on, so we can make sure the website works properly for everyone.

DBP may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data: includes first name, last name, title, or similar identifier.
  • Contact Data: includes email address, telephone numbers, and billing/postal address.
  • Transaction Data: includes details about products and services you have purchased from DBP.
  • Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Usage Data: includes information about how you use DBP's website, products, and services.
  • Marketing and Communications Data: includes your preferences in receiving marketing from DBP, our specific production partners, and your communication preferences.

DBP does not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data).

3. HOW YOUR PERSONAL DATA IS COLLECTED

DBP uses different methods to collect data from and about you including through:

  • Direct interactions: You may give DBP your Identity, Contact, Transaction, and Marketing and Communications Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes personal data you provide when you subscribe to our mailing lists, request marketing to be sent to you, enter a competition, or purchase services.
  • Automated technologies or interactions: As you interact with our website, DBP may automatically collect Technical and Usage Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies.
  • Third parties or publicly available sources: DBP may receive data from analytics providers (such as Google Analytics) and advertising networks (such as Meta/Facebook).

4. HOW WE USE YOUR PERSONAL DATA

DBP will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • Where DBP needs to perform a contract we are about to enter into or have entered into with you.
  • Where it is necessary for DBP's legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
  • Where DBCE needs to comply with a legal or regulatory obligation.
  • Where you have consented to DBP processing your personal data (e.g., to send marketing communications). You have the right to withdraw consent to marketing at any time by contacting us at info@dbce.uk.
💡 In Plain English (Lawful Basis): GDPR says we need a valid legal reason to use your data. Usually, this breaks down into three things: Contract (you bought something from us and we need your details to deliver it), Consent (you explicitly ticked a box saying we can email you), or Legitimate Interest (we are doing something standard for a business, like checking our website analytics, that doesn't unfairly harm your privacy).

We do not carry out any automated decision-making or profiling that would produce legal or similarly significant effects on you.

PURPOSES FOR WHICH WE WILL USE YOUR PERSONAL DATA

We have set out below, in a table format, a description of all the ways DBP plans to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest
To manage DBP's relationship with you which will include:
(a) Notifying you about changes to our terms or privacy policy
(b) Asking you to leave a review or take a survey		 (a) Identity Data
(b) Contact Data
(c) Transaction Data
(d) Marketing and Communications Data		 (a) Performance of a contract with you
(b) Necessary to comply with a legal obligation
(c) Necessary for DBP's legitimate interests (to keep our records updated and to study how customers use our products/services)
To enable you to partake in a prize draw, competition, complete a survey, or enter a ticket lottery. (a) Identity Data
(b) Contact Data
(c) Usage Data
(d) Marketing and Communications Data		 (a) Performance of a contract with you
(b) Necessary for DBP's legitimate interests (to study how customers use our products/services, to develop such products/services and grow our business)
To administer and protect DBP's business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity Data
(b) Contact Data
(c) Technical Data		 (a) Necessary for DBP's legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation)
(b) Necessary for DBCE to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising DBP serves to you (including via the Meta Pixel) (a) Identity Data
(b) Contact Data
(c) Usage Data
(d) Marketing and Communications Data
(e) Technical Data		 (a) Necessary for DBP's legitimate interests (to study how customers use our products/services, to develop such products/services, to grow our business and to inform our marketing strategy)
(b) Consent to send marketing communications or use tracking cookies
To share your data with specific Producers or Marketing Agencies for a specific project (As outlined in Section 1) (a) Identity Data
(b) Contact Data
(c) Marketing and Communications Data		 Consent (Explicit opt-in required via specific forms for the specific production)

OPTING OUT

You can ask DBP or third parties to stop sending you marketing messages at any time by following the opt-out links on any marketing message sent to you or by contacting DBP at info@dbce.uk at any time.

5. DISCLOSURES OF YOUR PERSONAL DATA

DBP may have to share your personal data with the parties set out below for the purposes set out in the table in paragraph 4 above.

  • Internal/External Third Parties: As set out in the Glossary.
  • Production Partners (Project-Specific): If you sign up for a mailing list for a specific production, DBP will transfer your data to the Lead Producer or Marketing Agency attached to that specific project. We require that they ONLY use your data in relation to the project you signed up for. Once shared, they act as independent data controllers of your data for that project.
  • Advertising Partners & Marketing Agencies: Where you consent to non-essential cookies or advertising tracking, DBP may share Technical and Usage Data with platforms like Meta to measure performance. Additionally, we may use secure methods like "data hashing" to share obscured data with our appointed external marketing agencies to help us securely deliver targeted campaigns.
  • Business Transfers: Third parties to whom DBCE may choose to sell, transfer, or merge parts of our business or our assets.

DBP requires all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

6. INTERNATIONAL TRANSFERS

Some of DBP's external third parties (such as Squarespace) are based outside the UK or the European Economic Area (EEA), so their processing of your personal data will involve a transfer of data outside the UK/EEA. Whenever DBP transfers your personal data out of the UK/EEA, we ensure a similar degree of protection is afforded to it by ensuring appropriate safeguards (such as Standard Contractual Clauses) are in place.

💡 In Plain English (International Transfers): Sometimes the software we use to run our business (like website hosting or email systems) is based in the US or elsewhere. If your data passes through their servers, we make sure those companies have signed strict, legally approved contracts that protect your data exactly as if it were still in the UK.

7. DATA SECURITY

DBP has put in place appropriate security measures (such as using SSL/HTTPS encryption on our websites and securing all databases with password protection and restricted access) to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, DBP limits access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

8. DATA RETENTION

HOW LONG WILL YOU USE MY PERSONAL DATA FOR?

DBCE will only retain your personal data for as long as necessary to fulfil the purposes DBP collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax and legal purposes.

💡 In Plain English (How Long We Keep Your Data): We don't keep your info forever. If you unsubscribe from a mailing list, we stop emailing you immediately. However, we might securely keep a record of your request on a "suppression list" so we know *not* to email you in the future, or we might need to keep records of a purchase you made for accounting and tax reasons, as required by law.

To determine the appropriate retention period for personal data, DBP considers the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which DBP processes your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

9. YOUR LEGAL RIGHTS

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Right to withdraw consent.

Further details are set out in the Glossary below. If you wish to exercise any of the rights set out above, please contact DBP at info@dbce.uk.

💡 In Plain English (Your Rights): It's your data! You have the right to ask us: "What information do you have on me?" (Access), "Can you fix this typo in my name?" (Correction), or "Please delete me from your databases completely" (Erasure/Right to be Forgotten). Just email us and we will sort it out.

NO FEE USUALLY REQUIRED

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, DBP may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, DBP may refuse to comply with your request in these circumstances.

10. GLOSSARY

KEY TERMS

Term Definition
Data Controller The organisation that decides how and why your personal data is collected and used. In most cases on this website, this is DBCE. In specific production sign-ups, the Lead Producer becomes the Data Controller.
Data Processor A third-party company that only processes data on behalf of, and under the strict instructions of, the Data Controller (e.g., our website hosting platform or email software).
Hashing A digital security measure that scrambles personal data (like an email address) into an unreadable string of characters before it is shared with an advertising platform. It allows systems to securely match audiences without revealing your actual email address.
Standard Contractual Clauses (SCCs) Strict, legally binding contracts approved by the UK government. We use these to ensure that if your data is processed by a company in a country outside the UK, it remains protected to the same high UK standards.

LAWFUL BASIS

Basis Definition
Legitimate Interest means the interest of DBP's business in conducting and managing our business to enable us to give you the best service/product and the best and most secure experience. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before DBP processes your personal data for our legitimate interests. DBP does not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
Performance of Contract means processing your data where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract.
Comply with a legal or regulatory obligation means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that DBCE is subject to.
Consent means you have consented to DBP processing your personal data in order for us to send marketing communications to you or use tracking technologies. You have the right to withdraw consent at any time by contacting DBP at info@dbce.uk.

THIRD PARTIES

Party Type Description
Internal Third Parties Other companies in DBCE's corporate group from time to time.
External Third Parties
  • Service providers (acting as processors) who provide IT, system administration, website hosting, data storage, and email marketing platforms.
  • Marketing and advertising agencies (acting as processors) who help manage our promotional campaigns. We use secure, privacy-safe methods (such as hashing) before sharing data, and any system access they are granted is strictly controlled and monitored.
  • Professional advisers (acting as processors) including lawyers, bankers, auditors and insurers who provide consultancy, banking, legal, insurance or accounting services.
  • HM Revenue & Customs, regulators and other authorities (acting as processors) who require reporting of processing activities in certain circumstances.

YOUR LEGAL RIGHTS

You have the right to:

Right Description
Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data DBP holds about you and to check that we are lawfully processing it.
Request correction of the personal data that DBP holds about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though DBP may need to verify the accuracy of the new data you provide to us.
Request erasure of your personal data. This enables you to ask DBP to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask DBP to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where DBP may have processed your information unlawfully or where DBCE is required to erase your personal data to comply with local law. Note, however, that DBP may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing of your personal data where DBP is relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where DBP is processing your personal data for direct marketing purposes. In some cases, DBP may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request restriction of processing of your personal data. This enables you to ask DBP to suspend the processing of your personal data in the following scenarios: (a) if you want DBP to establish the data’s accuracy; (b) where DBP's use of the data is unlawful but you do not want us to erase it; (c) where you need DBP to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to DBP's use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. DBP will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for DBP to use or where DBP used the information to perform a contract with you.
Withdraw consent at any time where DBP is relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, DBP may not be able to provide certain products or services to you. DBP will advise you if this is the case at the time you withdraw your consent.

(in accordance with the Privacy and Electronic Communications (EC Directive) (Amendment) Regulations 2011 (SI 2011/1208))

INFORMATION ABOUT OUR USE OF COOKIES

DBP's website uses cookies to distinguish you from other users of our website. This helps DBP to provide you with a good experience when you browse our website and also allows us to improve our site. By continuing to browse the site, you are agreeing to DBP's use of cookies.

💡 In Plain English (Cookies): A cookie isn't a program; it's just a tiny text file saved to your phone or computer. We use them so our website remembers things like what you put in your shopping cart, or to understand which of our webpages are the most popular.

A cookie is a small file of letters and numbers that DBP stores on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.

DBP uses the following cookies:

  • Strictly necessary cookies: These are cookies that are required for the operation of DBP's website. They include, for example, cookies that enable you to log into secure areas of our website or process payments.
  • Analytical/performance cookies: They allow DBP to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps DBP to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
  • Functionality cookies: These are used to recognise you when you return to DBP's website. This enables DBP to personalise our content for you and remember your preferences (for example, your choice of language or region).
  • Targeting cookies (including Meta Pixel): These cookies record your visit to DBP's website, the pages you have visited and the links you have followed. DBP will use this information to make our website and the advertising displayed on it more relevant to your interests. DBP may also share this information with third parties (such as Meta) for this purpose, provided you have granted consent.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which DBP has no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of DBP's site.

12. FREQUENTLY ASKED QUESTIONS (Plain English Answers)

1. Do you sell my personal data?

Absolutely not. We never sell your personal data to third parties. We only share it with trusted partners (like a specific show's producer) when you explicitly ask us to.

2. I signed up for updates on "Show A". Will I start getting emails about "Show B"?

No. If you sign up for a specific project, your data is ring-fenced for that project only. The producer of "Show A" is not legally allowed to use that email to sell you tickets for "Show B" unless you specifically opt-in for it.

3. How do I stop getting emails?

It's easy! Every marketing email we send has an "unsubscribe" link at the very bottom. Click that, and you'll be taken off the list. You can also email us directly at info@dbce.uk to request removal.

4. If I unsubscribe, do you delete my data entirely?

Usually, yes! However, we often have to keep your email address on a secure, hidden "Do Not Contact" list (called a suppression list) just to make absolutely sure our systems know never to email you again. We may also need to keep purchase records for tax laws.

5. What are cookies and do I have to accept them?

Cookies are tiny text files saved on your device that help our website remember things (like what's in your shopping cart). You don't have to accept non-essential cookies (like those used for tracking ads), but blocking "strictly necessary" cookies might break parts of the website.

6. Are my payment details safe on your site?

Yes. We don't actually see or store your full credit card number. Payments are securely processed through trusted, encrypted third-party payment providers (like Stripe or PayPal).

7. You mentioned "hashing" data for marketing agencies. What does that mean?

It’s a privacy shield. Instead of sending an advertising platform your actual email address (like name@email.com), the system turns it into a long, scrambled code (like 8x9f2a...). The platforms can match the code to serve you a relevant ad without ever knowing your real email.

8. Can your marketing agencies use my data for their other clients?

No. Our marketing agencies act as "Data Processors," meaning they only act on our strict instructions. They are legally prohibited from using your data for anything other than our specific campaigns.

9. What happens if your company is sold or merges with another?

If our business assets are ever transferred or merged, your data may be transferred to the new owners so they can continue providing you with the services you requested. However, they must still treat your data exactly as outlined in this privacy policy.

10. I still have questions. Who can I talk to?

We’re here to help. You can email us anytime at info@dbce.uk and we’ll be happy to clear up any concerns about your privacy or how your data is being used.