Privacy statement

The short version

This site asks for as little as it can. We collect nothing about you unless you send us the contact form, write to us in a chat, book a lesson, support us with a payment, or agree to be counted. There is no advertising, no profiling, and nothing is sold to anybody.

When you use the contact form

We receive your name, your email address, your message and — if you arrived by pressing a button on a course page — the name of that course. We use it for one thing: to answer you.

The legal ground is our legitimate interest in replying to someone who has written to us, and, when you are asking about a course or a booking, the steps leading up to an agreement with you.

The message is stored in this website's own database and is also sent to our inbox through Resend. We keep enquiries for as long as the theatre exists, because an old conversation is often the context for a new one. That is longer than many sites keep them, which is why we say it plainly: ask us to delete yours and we will, and you do not have to give a reason.

When you write to us in a chat

The WhatsApp and Telegram links on this site are plain links: nothing from WhatsApp or Telegram loads on our pages. A message you send there goes through WhatsApp or Telegram under that company's own privacy terms, not through this website.

We see what the app shows us: your name or phone number, your message, and anything you choose to send. We use it for one thing: to answer you, on the same legal ground as the contact form. The conversation stays in the app on our phones; ask us and we delete it.

When you book a lesson

The vocal lesson page shows a calendar supplied by Cal.com. It loads from Cal.com's own servers, so opening that page tells Cal.com your IP address and something about your browser, and lets it set its own cookies. If you go on to book, Cal.com handles your name, your email address and the time you chose, on our behalf.

When you buy a ticket

Ticket sales do not happen here. The ticket buttons send you to weTicket, and what you type there is between you and them.

When you support us

The support buttons on this site send you to a payment page run by Stripe. You type your email address and your card or bank details there, not here. We see your email address, the amount, the date and the kind of payment you used (for a card, also its last four digits). We never see a full card or bank account number.

The legal ground is the payment itself, and our legal duty to keep business records. That duty is seven years, so we keep the payment record for seven years. Stripe also keeps payment data for its own legal duties, such as fraud prevention, under its own privacy policy.

After you pay, Stripe sends you back to a thank-you page on this site.

Counting visits

We would like to know which pages people read and which buttons they press, so we use Google Analytics 4 — but only if you have said yes. Until you answer, and for good if you say no, nothing at all is loaded from Google and no statistics cookie is set. The banner is not decoration: the decision is made on our server, and a no means the Google script is not on the page.

If you say yes, Google Analytics sets cookies called _ga and _ga_ followed by our measurement number, which stay in your browser for about thirteen months. Google Analytics 4 does not record full IP addresses. Our settings keep the collected statistics for fourteen months, have Google's data sharing switched off, and are not used for advertising. You can change your mind at the bottom of this page at any time, or by clearing this site's cookies.

Google's own account of what it does with this is in its privacy policy.

The cookies this site uses

• artcode_consent — remembers whether you said yes or no to being counted, for six months. Without it we would have to ask again on every page.
• csrftoken — a security token proving that a form was really sent from this site. It appears when a page shows you a form, the consent banner included.
• sessionid — only if you are one of us, logging in to edit the site.
• _ga and _ga_… — Google Analytics, and only after you have agreed.

The first three are needed for the site to work and to stay safe, so they are set without asking. The last two are not needed for either, which is why they are not.

Server logs

The server writes down each request it answers: the page asked for, the time, the answer it gave, what the browser says it is, and the IP address it came from. These logs are kept for thirty days and exist so we can find a fault or an attack. They are not used to build a picture of anybody.

Who else is involved

• Google Cloud — the hosting and the database, on servers in the Netherlands.
• Resend — delivers the enquiry email to our inbox.
• Google Ireland / Google LLC — the statistics, only with your consent.
• Cal.com — the lesson calendar and the bookings made in it.
• Stripe — the payment page behind the support buttons. For its own legal duties Stripe is responsible itself.

Each of them acts on our instructions and may not use what passes through it for its own ends, except Stripe for its own legal duties. Where one of them moves data outside the European Economic Area, that is covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework.

What you can ask of us

You can ask to see what we hold about you, to have it corrected, to have it deleted, to have its use restricted, to object to its use, and to receive it in a form you can take elsewhere. If you agreed to being counted, you can withdraw that agreement, and withdrawing it is as easy as giving it was.

Write to us and we will answer. If our answer does not satisfy you, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes to this statement

The date under the title is the date this text last changed. We keep no archive of earlier versions. If a change affects a decision you have already made — the statistics consent is the only such decision here — we will ask you again.