Privacy Policy

Content Box


Here at Jukebox Collective, we are an organisation based on transparency and trust, for our staff and our visitors, including visitors to our website. We do not sell, rent or trade databases or email lists with other organisations for any marketing purposes. We will outline below any reason when and why we would collect your personal information, how we would use it, and any limited situations where we may disclose it to others and how we keep it secure.

This page sets out the details of Jukebox Collective’s privacy notice in relation to information collected about you. Jukebox Collective is committed to protecting your privacy, we will use the information we collect about you in accordance with the Privacy and Electronic Communications Regulations 2003, and, from May 2018, the General Data Protection Regulation (GDPR) and Data Protection Act 2018.

Who We Are

Our website address is:

Jukebox Collective is a not for profit arts organisation based in Wales. We work with communities by providing multidisciplinary classes, academy and creative agency where we specialise in artist management, casting, curation & consultancy.

We receive core funding from the Arts Council of Wales (ACW) and generate additional income from a combination of classes fees, external teaching fees, trusts and foundations, grant-giving bodies, individual donations and other trading activities.

Jukebox Collective is a company registered in England and Wales, number 08389489

Jukebox Collective is responsible for the personal data you supply us. In data protection law, this is called being the data controller. This means we decide how to collect and use your data and are responsible for ensuring that your data is kept safely and used lawfully, fairly and in a transparent manner. Your data is processed for the purposes of Jukebox Collective’s legitimate interests in operating its business and, in particular, to let you know about our activities.

If you have any queries regarding this policy please get in touch, our contact details are:

Address: Jukebox Collective, Butetown Community Centre, 40 Loudon Square, CF10 5UZ


Access to your personal information

You are entitled to view, amend, or delete the personal information that we hold. Email your request to us at

Under certain circumstances, you have rights under data protection laws in relation to your personal data including the right to receive a copy of the personal data we hold about you and the right to make a complaint at any time to the Information Commissioner’s Office, the UK supervisory authority for data protection issues (

Changes to this Privacy Notice

This policy was last reviewed on August 1st 2021.
This policy will next be reviewed on August 1st 2022 or before this date if:

Our Website is updated
New Partnerships/ Co-productions are established
We introduce new communication or marketing systems
We introduce any ticketing systems via our website

Data We Collect

Mailing Lists

As part of the registration process for our monthly e-newsletter, we collect personal information. We use that information for a couple of reasons: to tell you about events, classes or other information you’ve asked us to tell you about; to contact you if we need to obtain or provide additional information; to check our records are right and to check every now and then that you’re happy and satisfied. We don’t rent or trade email lists with other organisations and businesses.

We use a third-party provider, MailChimp, to deliver our newsletter. We gather statistics around email opening and clicks using industry standard technologies to help us monitor and improve our e-newsletter. For more information, please see MailChimp’s privacy notice. You can unsubscribe to general mailings at any time of the day or night by clicking the unsubscribe link at the bottom of any of our emails or by emailing us here.

Other Organisations

We may share anonymised personal information with other organisations, particularly Arts Council Wales, who use this to analyse our audience development programmes, participation programmes and self-generated funding to understand the impact of the public investment made in Jukebox Collective.

Some of the programmes at Jukebox Collective are presented in partnership with other companies such as our Grangetown Pavilion Programme. We will let them know about your participation and share your name and contact details with them but they can’t contact you unless you select either the Email or Post option under ‘I would like to hear about events, news and offers from the partner organisations’ as part of your booking.  We will not share sensitive information or your payment details.

We will also share personal information when necessary to comply with any legal obligation to do so. This includes the police and other crime protection and detection agencies or regulatory bodies


A cookie is a small piece of information that is placed on your computer when you visit certain websites. When we refer to “cookies” we include other technologies with similar purposes, such as tags and identifiers. Find out more about the use of cookies on /.

Jukebox Collective’s Website uses non-essential cookies for Google Analytics.

Google Analytics

When someone visits we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

Data – More Information

We have described above when we may collect, use, store and transfer different kinds of personal data. Here we want to describe in further detail what those different types of data might be

Identity Data

A digital identity is the body of information about an individual, organization or electronic device that exists online. Unique identifiers and use patterns make it possible to detect individuals or their devices. We may use this information to identify and track users for personalization and to serve them targeted content and advertising.

Contact Data

Contact data is the contact information a business or a company holds of its most important categories of contacts. Contact data can include various information such as name, address, phone number, email, geocode, social media handle and more.

Financial Data

Financial Data means any number or other personal data used to identify an account opened by, or card or payment instrument issued by a financial institution to a data principal or any personal data regarding the relationship between a financial institution and a data principal including financial status and credit history;

Transaction Data

Transactional data describes an internal or external event which takes place as the organisation conducts business and can be financial, logistical or any business-related process involving activities such as purchases, requests, insurance claims, deposits, withdraws, etc.

We use transactional data to support ongoing business operations included in the information and application systems that are used to automate key business processes such as online transaction processing (OLTP) systems.

Technical Data

Technical data is recorded information, regardless of the form or method of the recording, of a scientific or technical nature (including computer software documentation). The term does not include computer software or data incidental to contract administration, such as financial and/or management information.

Profile Data

Profile data examines the data available from an existing information source and collecting statistics or informative summaries about that data. We may use profile data to know who our customers are – their location, interests and characteristics.

Usage Data

Usage data is certain data generated by use of our services, either by an individual user or from general use of the system. Exactly what type of data depends on the software or system in question. For example, and on-premise application may be completely offline, and no usage data is generated or collected.

Marketing and Communications Data

Marketing and Communications data takes data and applies intelligence and strategic analysis to provide key insights to develop and refine marketing communication activities.

How we keep your data safe

We have implemented security procedures and technical measures to protect the personal data that we have under our control from:

unauthorised access
improper use or disclosure
unauthorised modification

Your personal data will be held and processed on Jukebox Collective’s systems. We always seek to hold your data securely and with all data processing, consideration will be given to the safest method of processing the data before processing begins.

Access to customer information is strictly controlled. Our systems can only be accessed by people who need it to do their job. Certain data, for example sensitive information, is additionally controlled and is only made visible to members of staff who have a reason to work with it. Electronic data by password protection and encryption where appropriate.

Personal data may also be held on Cloud based IT devices, which means that personal data may be transferred outside of the EU. Where this is the case, the Cloud based IT device has confirmed that it has appropriate safeguards in place). We will take all reasonable steps to ensure that your privacy rights continue to be protected as outlined in the privacy policy.

We will keep your information only for as long as is reasonably necessary for the purposes set out in this privacy policy and to fulfil our legal obligations.  We will not keep more information than we need.  The retention period will vary according to the purpose. Some information may be retained indefinitely for historical, statistical or research purposes.

We retain job applicant data for 3 months after the conclusion of the interview process. If we have not had meaningful contact with you within a period of 3 months, we will delete your personal data from our systems unless we believe in good faith that legal obligation requires us to preserve it (for example, in connection with any anticipated legal action).

However, you have the right to require us to erase personal data.