Privacy Policy

This general privacy notice is for any individual who provides personal data or special category data to YorkConcerts, University of York.

For the purposes of this privacy notice, the University of York is the Data Controller as defined in the General Data Protection Regulation. We are registered with the Information Commissioner’s Office and our entry can be found here. Our registration number is Z4855807.

What data do we have?

Ticketing data

When you purchase tickets or a membership product through our Box Office (at the Department of Music, University of York) your name, email address, phone number(s) and postal address will be stored by our ticketing partner, Ticketsolve. This applies to bookings made in person, via the website or by telephone. We will work to ensure we keep your details up to date. 

Online data

When you book tickets online, data is shared between the University of York, Global Payments (our card payment gateway) and Ticketsolve (the ticketing platform) in order to process the transaction. Where customers have opted to provide their details to receive emails from us then data will also be shared with MailChimp, our email partner.

What is our legal basis for processing your data?

 Typically, data will be processed:

  • on the grounds of contractual requirement or to take steps to enter into a contract with you, eg to sell you a ticket for an event;
  • because you have given us your consent, eg to receive a copy of our newsletter.

How do we use your data?

To deliver a business service to you, namely the provision of concert tickets;

  • to administer the financial aspects of our relationship with you including processing any payments made by you to YorkConcerts;
  • to send you email or postal marketing materials. 

Marketing messages will only be sent to those who have opted in to receive emails. We may also include information about other third-party events we think you may be interested in. When you sign up for our mailing list – either at the time of booking or separately through our sign-up form – we collect personal information. We use that information for the following reasons: 

  • to share information such as upcoming shows
  • to check our records are correct
  • and to occasionally confirm that you are happy and satisfied with the service we provide.

We also gather statistics around email opening and clicks within emails using industry-standard technologies to enable us to monitor and improve our marketing. You can unsubscribe by clicking the 'unsubscribe' link at the bottom of any of our emails or by contacting the Box Office at

Who do we share your data with? 

  • We use MailChimp to send marketing messages, as well as to welcome new customers, interact with lapsed customers, provide special offers and to thank customers who donate to the Music Development Fund through Ticketsolve.
  • We use Ticketsolve and Global Payments to manage your purchase and administer card payments.

For further information, see Ticketsolve's privacy policyGlobal Payment's privacy notice and Mailchimp's privacy policy

How do we keep your data secure?

The University takes information security extremely seriously and has implemented appropriate technical and organisational measures to protect personal data and special category data. Access to information is restricted on a need-to-know basis and security arrangements are regularly reviewed to ensure their continued suitability. Find out more information on the University's IT security

How long will we keep your data?

The University will retain your data in line with legal requirements or where there is a business need. Retention timeframes will be determined in line with the University’s Records Retention Schedule.

What rights do you have in relation to your data?

Under the General Data Protection Regulation (GDPR), you have a right of access to your data, a right to rectification, erasure (in certain circumstances), restriction, objection or portability (in certain circumstances). You also have a right to withdraw consent. You can verify or correct information in your student record at any time. For all other requests, see your individual rights.  

Questions or concerns

If you have any questions about this privacy notice or concerns about how your data is being processed, please contact Box Office at in the first instance. You can also direct requests directly to the University’s Data Protection Officer at

Right to complain

If you are unhappy with the way in which the University has handled your personal data, you have a right to complain to the Information Commissioner’s Office.

We will regularly review this Privacy Policy to ensure we are continuing to operate within all relevant legal frameworks and to provide as much transparency as possible with regard to our activities. This version (1.1) was adopted on 31 July 2018.

Cookie Policy 


A cookie is a small text file that helps your web browser navigate through a particular website. The cookie can then be read back later by the web browser as required. The use of cookies is a convenient way of allowing a computer to remember specific information relating to a website that has been visited. For further information about cookies including a detailed definition, please consult All About Cookies.

Cookie usage

When someone visits our website ( and our ticketing site ( we use a number of third-party services to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site, types of devices used and length of time on pages.




Universal Analytics (Google)


These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, device used, where visitors have come to the website from and the pages they visited.

Managing / deleting cookies from this site

You can manage cookies from this site, including blocking or deleting them, by changing the settings in your web browser. However, please note that deleting cookies may result in parts of this site and its online services not working as expected.