Return to IDST!

Privacy policy

This notice explains what we collect through idst.org, why, how long we keep it, and what you can ask us to do. Last updated: October 2026.

Who we are

IDST! is an Invisible Theatre company based in the West Midlands. We are the controller of the personal data described here.

What we collect

  • If you use the contact form: your name, email address and message.
  • If you sign up as a mystery shopper: your name, email address and town or area.
  • For both: that you ticked the consent box, the date and time, and, to stop spam, your IP address, browser type, the page you came from and your country.

We don't use cookies on the public site. We count visits with Cloudflare Web Analytics, which doesn't use cookies or identify you. To show the evening version of the page after sunset, your browser is given an approximate location (city level) worked out by Cloudflare from your connection; it is used for that page only and never stored.

Why we use it

  • To reply to you, or to involve you in a mystery shopper performance. Our lawful basis is your consent, which you can withdraw at any time.
  • To keep the forms free of spam and abuse. Our lawful basis is our legitimate interest in running a safe website.

Who handles it for us

The website runs on Cloudflare, which stores form submissions in its database service, sends them to us by email, and runs Turnstile, a check that you are a person rather than a bot. Turnstile looks at signals from your browser to do this; see Cloudflare's privacy policy. Cloudflare may process data outside the UK under the safeguards in its data processing agreement. We do not sell or share your details with anyone else.

How long we keep it

Form submissions are deleted automatically 12 months after you send them. We delete the matching notification emails on the same schedule. If you ask us to delete your details sooner, we will.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, or to stop us using it, and you can withdraw your consent at any time. Use the contact form or write to hello@idst.org. We'll reply within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office: ico.org.uk or 0303 123 1113.