We will only collect and process your personal data where we have a legal basis to do so. This legal basis will vary depending on the manner and purpose for which we are collecting your personal information. We will use your personal information as follows: Where it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into such a contract (eg where you are a customer at one of our venues we will need to send you your tickets (if purchased online) and process your financial data to take payment for the tickets); Where it is necessary to comply with a legal or regulatory obligation that we are subject to (eg health and safety legislation); Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests (see below); and Where we have your consent to do so, subject to your right to withdraw consent (further details provided in the section headed “Your rights” below). Our legitimate interests in processing your personal data for our own business purposes include (without limitation): To provide and improve our products and services and to operate our venues; To process your order for tickets, including managing payments and collecting and recovering money owed to us; To respond to an enquiry from you submitted to us via the Group Bookings page of our site or social media accounts or by post, email, telephone or in person at our venues; To administer and protect our business, our site and Wi-Fi network (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data); To use data analytics to improve our site, services, marketing, customer relationships and experiences; To deliver relevant website content; To manage our relationship with you and notify you of changes to our terms and conditions or privacy policy; To promote our services, including sending discounts and information about our venues by email (such as offers); To monitor and improve the effectiveness of our marketing communications, which may include monitoring or tracking responses and engagement; To fulfil our legal, regulatory and risk management obligations, including for the purpose of establishing, exercising or defending legal claims; To ensure our site, Wi-Fi network and venues are being used in compliance with relevant terms and conditions; For fraud prevention, anti-money laundering, and for the prevention or detection of crime; To maintain our CCTV systems for the purpose of ensuring the safety and security of our people and premises. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you require further detail about the specific legal ground we are relying on to process your personal data.