Website Privacy Notice

Cameron Mackintosh Limited

Last updated: 20.05.2026

WHO ARE WE?

Cameron Mackintosh Limited (company number 1490880) registered in England & Wales at One Bedford Square, London, WC1B 3RB, is one of the world's most successful theatrical producers. Since 1967, we've been bringing audiences some of the most legendary musicals in theatre history - Les Misérables, The Phantom of the Opera, Cats, Miss Saigon, Hamilton, and many more.

Under data protection law, Cameron Mackintosh Limited is the 'data controller' for your personal information. In simple terms, this means we are responsible for deciding what personal data we collect when you visit our websites, how we use it, and keeping it safe and secure.

We are committed to protecting your privacy and keeping any personal data, you always provide to us confidential, in accordance with UK data protection laws. This Privacy Notice sets out the information processing activities that Cameron Mackintosh Limited carries out in its capacity as data controller. All personal data collected by Cameron Mackintosh Limited is processed in compliance with the requirements of the UK General Data Protection Regulation, the UK Data Protection Act 2018 and the Privacy and Electronic Communications Regulation 2003 (PECR).

Please read this Privacy Notice alongside our Terms and Conditions.


Our Data Protection Officer:

Email: [email protected]
Post: Data Protection Compliance Manager, Cameron Mackintosh Limited, One Bedford Square, London, WC1B 3RB
ICO Registration Number: ZA152194


WHO DOES THIS PRIVACY NOTICE APPLY TO?


This Privacy Notice applies to you if you:

  • Visit and browse our websites cameronmackintosh.com
  • Contact us through our website with enquiries about our shows or theatres
  • Interact with content on our websites


By using our website, you agree to this Privacy Notice.


OTHER PRIVACY NOTICES


Cameron Mackintosh Limited has separate privacy notices for different groups of people we work with. These notices are tailored to each specific relationship and contain information more relevant to those activities.


This website privacy notice does NOT apply to:

  • Employees and job applicants - If you are applying for a job, please see our Careers Privacy Notice on our careers page.
  • Performers and talent - View our Performer & Talent Privacy Notice
  • Auditionees - View our Auditionee Privacy Notice
  • Musicians and contractors - View our Musician & Contractor Privacy Notice


If you fall into any of these categories, please request the relevant privacy notice that applies to you.


HOW IS YOUR INFORMATION COLLECTED?


Personal data is any information about you from which you can be identified. The personal information we may collect about you falls into the following categories:


Information that you provide voluntarily

We collect information when you choose to interact with us through our websites. For example:

  • When you contact us with an enquiry about one of our shows
  • When you enter a competition to win tickets
  • When you complete a feedback survey about our productions
  • When you message us through our website contact forms


It will always be clear what information you're providing at the point you submit it.


Information that we collect from your activities

We automatically collect information about how you use our website through cookies and similar technologies. This includes:

  • Which pages you visit
  • How long you spend on each page
  • What device you're using (phone, tablet, computer)
  • Your approximate location (country or region)
  • How you found our website


Some cookies can be enabled or disabled through your browser settings. More information can be found in the 'Use of cookies' section below.


HOW IS YOUR INFORMATION USED?


We only process (use) your personal information where we have a lawful reason to do so. Specifically, we process your information when:

  • We have a contract with you that requires using your personal information
  • We have a legitimate interest to do so to support our business aims, in a way that's fair and balanced and doesn't unduly impact your rights
  • We need to comply with a legal obligation
  • We have your consent for a specific purpose


The table below shows the types of personal data we use, what we use them for, and our lawful basis for processing:

Purpose Type of data Lawful Basis for processing
To respond to enquiries, you make about our shows, theatres, or accessibility Name, email address, phone number, enquiry details Necessary for our legitimate interests (to provide excellent customer service and maintain relationships)
To collect feedback about our shows and services Name (optional), email (optional), survey responses Consent (when you agree to complete the survey)
To improve our website and understand which shows people are interested in Website analytics (anonymous browsing data, pages visited, time on site) Legitimate interests (improving our website and understanding our audiences)
To keep records of our communications with you Contact details, correspondence history Legitimate interests (business record-keeping and continuity of service)
To detect and prevent fraudulent competition entries IP addresses, entry patterns, device information Legitimate interests (protecting our business and ensuring fair competitions)
To comply with legal obligations and protect legal rights Any relevant personal data Legal obligation; Legitimate interests (complying with law and protecting our legal position)
We don't send marketing emails or newsletters as this function is not currently active on our website.

SPECIAL CATEGORIES OF PERSONAL DATA


"Special categories" of personal data (like health information, racial or ethnic origin, religious beliefs, trade union membership, genetic data, biometric data, or information about sexual orientation) require higher levels of protection under data protection law.


We don't routinely collect special category data through our websites. However, if you voluntarily provide sensitive information (for example, if you mention a disability when asking about theatre accessibility), we will:

  • Only use it to respond to your specific query
  • Process it under the lawful basis of your explicit consent or where necessary for reasons of substantial public interest
  • Keep it secure and confidential
  • Delete it in line with our retention periods


CCTV AND AUDIO RECORDING


We operate CCTV cameras at our offices at One Bedford Square, London. These cameras record both video and audio for the purposes of premises security and the safety of our staff and visitors.


Our lawful basis for this processing is legitimate interests under Article 6(1)(f) of UK GDPR. Access to recordings is restricted to authorised members of the Office Management team and footage is retained for 31 days before being securely deleted.


If you would like to request access to footage in which you appear, please contact [email protected].


WHO WE SHARE YOUR INFORMATION WITH


We don't sell or rent your personal information to anyone. We may share your personal information with the following categories of recipients:

Recipient/Category of organisation Purpose of sharing
Website hosting and IT service providers To keep our website running and secure
Analytics providers (Google Analytics, Google Tag Manager) To understand how people use our website (anonymous data only)
Email service providers If we activate newsletters in future
Social media platforms When you interact with embedded content or social features on our website
Co-producers and partner theatres When necessary for specific shows or productions
Legal and regulatory authorities When required by law or to protect legal rights
Professional advisors (lawyers, accountants, auditors) For legal, financial, or business advice


When we share your information with third parties, we ensure:


  • We provide only the information they need to perform their specific services
  • They may only use your data for the exact purposes we specify in our contract with them
  • We work closely with them to ensure your privacy is respected and protected at all times
  • If we stop using their services, your data held by them will either be deleted or rendered anonymous
  • All third parties are contractually bound to comply with UK data protection laws

INTERNATIONAL DATA TRANSFERS


Your information is primarily stored in the United Kingdom. However, some of our service providers (like Google Analytics) may transfer your data outside the UK and European Economic Area.

When we transfer data internationally, we ensure it i's protected by:

  • UK International Data Transfer Agreement (IDTA)
  • EU Standard Contractual Clauses (SCCs)
  • Adequacy decisions (where the destination country has been approved as having adequate protections)
  • Contractual obligations requiring our service providers to protect your data

If you would like more information about the appropriate safeguards, please contact [email protected].


HOW LONG WILL WE HOLD INFORMATION ABOUT YOU?


We only hold information about you for as long as needed for the purpose it was collected, or as required by law.

Personal data Retention period
Website analytics (Google Analytics) 26 months (automatically deleted)
Contact enquiries and correspondence 6 years from last contact (to maintain business records and handle any legal claims)
Survey responses Project duration + 12 months (to complete analysis)
Feedback and testimonials (if used in marketing) Duration of use + 6 years

For complete details about retention periods specific to your data, contact [email protected]
When we no longer need your information, we securely delete or anonymize it.

HOW AND WHEN WILL YOU HEAR FROM US

Email newsletters

Our newsletter sign-up function is not currently active. If we activate it in future, we'll update this notice and clearly explain how to subscribe and unsubscribe.

Service communications

We may send you certain communications without your prior consent when:

  • We are under a legal obligation to do so
  • It's in both your and our interests to send the communication
  • It would disadvantage you if we didn't

These may include:

  • Responses to your enquiries or contact form submissions
  • Changes to our Terms and Conditions or Privacy Notice that affect you
  • Requests for feedback on services you've used


YOUR RIGHTS


Under UK data protection law, you have the following rights:

Your right of access - You can ask us for copies of your personal information. This is free of charge unless your request is manifestly unfounded or excessive.

Your right to rectification - You can ask us to correct personal information you think is inaccurate or complete information you think is incomplete.

Your right to erasure
- You can ask us to delete your personal information in certain circumstances (for example, when we no longer need it for the original purpose).

Your right to restriction of processing
- You can ask us to limit how we use your personal information in certain circumstances (for example, while you're challenging the accuracy of data).

Your right to object to processing
- You can object to us processing your personal information in certain circumstances (particularly when we're relying on legitimate interests).

Your right to data portability
- You can ask us to transfer the personal information you gave us to another organization, or to you, in a structured, commonly used format.

Your right to withdraw consent
- If our lawful basis for processing is consent, you can withdraw it at any time. This won't affect any processing we've already done, but we'll stop using your data for that purpose going forward.


Your right not to be subject to automated decision-making
- You have rights around decisions made solely by automated means that significantly affect you. We don't currently use automated decision-making on our websites.


HOW TO EXERCISE YOUR RIGHTS

To exercise any of these rights, contact:

Email: [email protected]
Post: Data Protection Compliance Manager, Cameron Mackintosh Limited, One Bedford Square, London, WC1B 3RB

We will respond within one month. For complex requests, we may extend this to three months - we'll let you know if we need extra time. You won't usually need to pay a fee. However, we may charge a reasonable fee or refuse to comply if your request is clearly unfounded, repetitive, or excessive.

MAKING A COMPLAINT


If you have any concerns about how we have handled your personal data, we would always encourage you to contact us first so we can try to resolve the matter for you.

Data Protection Officer: Email: [email protected] Post: Data Protection Compliance Manager, Cameron Mackintosh Limited, One Bedford Square, London, WC1B 3RB

If you are not satisfied with our response, or you feel we have not handled your concern appropriately, you have the right to lodge a complaint directly with the Information Commissioner's Office (ICO).

Information Commissioner's Office (ICO): Website: www.ico.org.uk Telephone: 0303 123 1113 Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

USE OF COOKIES

Like many websites, our website uses cookies. Cookies are small text files stored on your device that help websites work properly and provide information to website owners. They collect anonymous statistical data about your browsing actions and patterns - they don't identify you personally.

We use cookies to:

  • Understand which pages are popular
  • See how people navigate our website
  • Improve website functionality
  • Remember your preferences
  • Identify technical problems

Types of cookies we use:


  • Google Analytics - tracks anonymous website usage
  • Google Tag Manager - manages analytics and tracking
  • Social media cookies - from Facebook, Instagram, Twitter/X, and YouTube when you interact with embedded content


Managing your cookies:

You can control and delete cookies through your browser settings. Most browsers accept cookies automatically, but you can modify your settings to decline them.

Please note:
Blocking some cookies may affect website functionality and your experience may be less smooth. For more detailed information, visit our separate Cookie Policy or manage your preferences in your browser settings.

LINKS TO OTHER WEBSITES

Our website contains links to other websites, including:

  • Theatre venue websites where our shows are performed
  • Production-specific websites

This privacy notice applies only to our websites. Once you leave cameronmackintosh.com, we have no control over how those organizations collect, use, or protect your information. We encourage you to read the privacy policies of other websites you visit. We cannot be responsible for the privacy practices of other sites, even if you access them using links from our website.

CHANGES TO OUR PRIVACY POLICY

We may update this Privacy Notice from time to time to reflect:

  • Changes in how we use your data
  • New legal requirements
  • Improvements to our services
  • Your feedback

When we make changes, we will:

  • Post the updated notice on this page
  • Update the "Last Updated" date at the top
  • For significant changes, we may email you directly or display a prominent notice on our website

Please check this page periodically. Continued use of our website after changes means you accept the updated notice.

CONTACT US

If you have any questions about this policy, our website, or our services:

Data Protection Officer:
Email: [email protected]
Telephone: 020 7637 8866
Post: Data Protection Compliance Manager, Cameron Mackintosh Limited, One Bedford Square, London, WC1B 3RB

For general enquiries about our shows and theatres:
Visit: cameronmackintosh.com/contact