Privacy Notice

About this policy

At the Royal Shakespeare Company we take your privacy seriously. We promise to respect any personal data you share with us and keep it safe.

This policy explains who we are, what information we collect, how and why we use it, how it is stored, which partners we work with, and your rights regarding any information you share with us.

We will use any personal information we collect about you in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act, the Data Use and Access Act, and the Privacy and Electronic Communications Regulations (PECR). We aim to be clear when we handle your data, and not do anything you would not reasonably expect.

By visiting shakespearecurriculum.com and app.shakespearecurriculum.com you are accepting and consenting to the practices described in this policy. This privacy policy outlines how we process data for our:

Participating schools Pupils

Please read this information carefully, as by providing your data to us you acknowledge you have read this policy and understand we will process your data in accordance with its terms.

Who we are

The Royal Shakespeare Company (RSC) is incorporated under Royal Charter and is a charity registered in England and Wales (Charity Number 212481).

RSC Enterprise Limited (CRN 2360172) is a private limited company that is a 100% owned subsidiary of The Royal Shakespeare Company that carries out a range of commercial trading activities to generate income for the RSC.

For this policy “RSC,” “we,” “us,” and “our” refer to the Royal Shakespeare Company.

Contact us

Questions, comments, and requests about this Privacy Policy are welcomed.

Email: schools.curriculum@rsc.org.uk

Write to: Royal Shakespeare Theatre, Waterside, Stratford-upon-Avon, Warwickshire, CV37 6BB

Data Collection

How We Collect Your Personal Data
You give us your personal information when you:

• visit The Shakespeare Curriculum website
• sign up to The Shakespeare Curriculum as a participating school
• sign in to your Shakespeare Curriculum account
• upload photograph, video, and audio content or use notebook features
• complete a feedback survey
• communicate with us by post, email, telephone, social media, via our websites, or in person

Online Information

We keep a record of the emails we send and receive from participating school in order to track progress of the project and to keep a record of our relationship with them.

We use cookies to improve your experience on this site. Cookies are small data files stored on your device and are used only for statistical analysis to help us enhance our services. They do not collect any personally identifiable information. Read more in our Cookie Policy.

You can manage or block cookies through your browser settings. Most browsers have a help section that explains how to do this, or you can visit About Cookies for detailed guidance, including how to delete cookies and understand their function.

Please note that restricting cookies may affect the functionality of the site, including features like logging in or submitting content.

Types of Personal Data We Collect

Participating Schools

We collect: First name and last name School name and address Job title
Email address Contact telephone number(s) Your image, voice, and likeness in any photos, videos, or audio you provide IP address, location data, and platform usage data

Pupils
We collect: First name and last name School name and address
Key stage group Year name and class name Your image, voice, and likeness in any photos, videos, or audio you provide Platform usage data

Sensitive data We do not actively collect special category data (such as information about your health, beliefs, or background). However, if you upload photos, videos, or audio – or use notebook features to share personal reflections – this content might include details about your religious or philosophical beliefs, or political opinions.

Types of Personal Data We Collect

We will use your information for the purposes listed below under one of the following lawful bases:

• Performance of a contract between us and you
• To comply with a legal obligation
• Our legitimate interests (except where such interests are overridden by the interests, rights, or freedoms of the individual)

The ways in which we use your data are listed below:

What we do & Lawful basis

• Create user accounts and give users access to the platform - Performance of a contract
• Keep a record of our relationship with participating schools - Legitimate interests
• Share updates about The Shakespeare Curriculum platform with participating schools - Performance of a contract
• Share information about RSC related learning activities - Legitimate interests *Store, process, analyse, and visualise aggregated data from participating schools - Legitimate interests *Use anonymised engagement data to improve the platform - Legitimate interests
• Promote our work to funders, supporters, and the public (e.g. via media and social media) - Legitimate interests *Report and analyse data for our own business needs and those of our funders - Legitimate interests
• Respond to queries, complaints, and feedback (by post, email, phone, social media, or in person) - Legitimate interests
• Ensure we comply with policies, procedures, and legal requirements - Legal obligation

Sharing Your Data With Third Parties

The Shakespeare Curriculum platform is powered by Charanga. Read more in their:

• Privacy Policy
• Child Protection Policy

We may share your data with third party organisations as follows:

TYPE OF ORGANISATION - LAWFUL BASIS

• Third Party Processors providing services to the RSC e.g., Charanga, our CRM and email platform etc. - Performance of a contract
• Funders such as Arts Council England for analysis and reporting purposes (anonymised data only) - Performance of a contract
• Companies House, Charity Commission, our auditors and professional advisers, and other regulatory bodies - Legal obligation
• Analytics and search engine providers to help us with improving and optimising our websites - Consent
• Social media - Legitimate interests

Keeping your data secure

We take every precaution to protect your personal data, and we hold regular security reviews to ensure that the website is safe and secure for your protection.

Your data is processed and stored in secure systems and digital environments. Access to personal data is strictly controlled; only authorised and trained employees and approved contractors/developers are granted access to personally identifiable information. This will be from time to time, and only when they need to perform a specific job or task.

If we need to share personal data with a third party, we ensure that data sharing agreements are in place.

How Long We Keep Your Data

Participating schools We will store data in our database system(s) for a maximum of seven years after your last engagement with us. At that point, your data will be deleted, no longer processed, and you will cease to receive communications from us, unless there is an outstanding issue, claim or dispute requiring us to keep such information until resolution.

Pupils All submitted pupil data are stored in the platform for seven years, after which point aggregated data will be archived for future statistical use.

Giving You Control

Your Individual Rights

Under data protection laws, you have rights including: Your right of access: you have the right to ask us for copies of your personal information.

• Your right to rectification: you have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure: you have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing: you have the right to ask us to restrict the processing of your personal information in certain circumstances. - Your right to object to processing: you have the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability: you have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
• Your right related to automated decision-making including profiling: you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Where you have provided your consent to the collection, processing, and transfer of your personal information for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact us as set out at the beginning of this Privacy Policy. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to.

How to Update Your Personal Data

If you need to update or correct your personal information, please contact the account administrator (aka the ‘lead teacher) at your school. They can make changes within their account settings on your behalf.

How to make a complaint

If you wish to make a complaint about how we are using your data, please email schools.curriculum@rsc.org.uk.

Where you take the view that your personal data is processed in a way that does not comply with the UK GDPR, you have a specific right to lodge a complaint with the Information Commissioner’s Office (ICO). They will then inform you of the progress and outcome of your complaint. You can contact the ICO at:

Helpline number: 0303 123 1113 ICO website: https://www.ico.org.uk

Change to this policy

We may change or update this Privacy Policy from time to time. Any significant changes will be communicated on our website or by contacting you directly.

Last updated November 2025