Privacy policy

Who we are

onsombul is a service provided by Stageleader Ltd ("we", "us", "our"), a company registered in England and Wales (company number 16376742). "onsombul" is a trading name of Stageleader Ltd. Our registered office is 3rd Floor, 86-90 Paul Street, London, England, EC2A 4NE.

Our role. For your account and the running of the platform (signing in, security, support and billing), Stageleader Ltd is the data controller. For the content a society puts into onsombul - including cast & crew records and any young-performer information - the society decides what to add and why, so the society is the controller and Stageleader Ltd acts as its data processor, handling that information on the society's instructions.

How to contact us about your data

For any privacy question or to make a data-protection request, please use our enquiry form and select "Privacy / data request" as the reason. You can also write to us at the registered office above.

What this policy covers

This policy explains what personal information we collect through the onsombul platform, why we collect it, how we look after it, who it is shared with, and the rights you have over it.

The information we collect

• Account details - your name and email address, and a securely hashed version of your password. We never store your password in readable form.
• Content you and your society add - rehearsal audio recordings, photos, staging images and videos, scenes and running orders, schedules, notes and documents, and cast & crew records (which may include the names and roles of other people in your production).
• Availability - dates or date ranges you choose to mark yourself unavailable, and any reason you add.
• Young performers (where a society chooses to use this feature) - for a child managed by a parent/guardian we hold the child's name and date of birth, the guardian link(s), the supervision settings the guardian chooses, and a record of the guardian's consent (what was consented to, by whom, and when). A society's administrators may also record child-performance-licence details and chaperone arrangements for their own compliance. We ask for the date of birth so a society can meet its legal duties for young performers (licences, chaperones, permitted hours); we keep this to the minimum needed.
• Enquiries - if you contact us through the enquiry form, the details you provide (society name, your name, email, optional phone number, reason and message). To help prevent spam we also record the IP address and browser information of the submission.
• Technical information - our hosting provider keeps standard web-server logs. We use essential cookies (see below).

Cookies

We only use cookies that are necessary for the service to work:

• A session cookie that keeps you signed in and protects forms against cross-site request forgery.
• A theme preference cookie that remembers your chosen colour theme.

We do not use advertising or third-party tracking cookies.

How we use your information, and our legal bases

• To provide the platform - giving you and your society access to recordings, scenes, schedules, media, cast & crew and availability. Legal basis: performance of a contract, and our legitimate interests in running the service.
• To keep accounts secure - authentication, access control and preventing misuse. Legal basis: legitimate interests.
• To respond to enquiries - dealing with messages you send us. Legal basis: legitimate interests and taking steps at your request before any agreement.
• To prevent spam and abuse of our public forms. Legal basis: legitimate interests.

Who can see your information

onsombul is organised by society and production. Content and personal details you add are visible to others according to each production's settings - this can include your society's administrators, production contributors and members, and, where a production is shared publicly or via a share link, public viewers. Society administrators control these visibility settings. Please only add information you are happy to share within that audience, and only add other people's details where you are entitled to do so.

A young performer's profile is private by default: it is never shown to public or share-link viewers unless their guardian opts in, and even then only under the name format the guardian chooses. Messages and notifications about a child are sent to their guardian(s).

Service providers we use

We use a small number of trusted providers to run onsombul. We do not sell your personal information.

• OVH - our hosting and storage provider, which stores the platform's data on servers in the EU.
• Google Fonts - we load fonts from Google to display the site. Your browser's IP address may be processed by Google to deliver these fonts.

How long we keep it

We keep your personal information for as long as your account, and your society's use of onsombul, remains active. We will delete or anonymise your personal information on request, or when your account or society is closed, unless we need to keep some of it to meet a legal obligation. Enquiry messages are kept while we deal with them and for a reasonable period afterwards.

We keep a young performer's information only while they are involved in a production. A guardian, or the society, can remove it at any time, and we delete it once it is no longer needed - automatically within 30 days of the child leaving or the production being archived. We do not keep children's data any longer than necessary.

Your rights

Under UK data-protection law you have the right to:

• access the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased in certain circumstances;
• restrict or object to how we use it;
• receive certain information in a portable format; and
• withdraw consent where we relied on it.

To exercise any of these, use our enquiry form and select "Privacy / data request". We will respond within the time allowed by law.

If you are unhappy with how we have handled your information, you can complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or by calling 0303 123 1113. We'd appreciate the chance to put things right first.

Children and young people

onsombul is built for adult-run societies. Whether to involve under-18s, and to put any of a child's information on the platform, is the society's decision - and the society is the data controller for that information. We provide the tools and act as the society's processor. Where a society chooses to work with young performers, onsombul supports them through guardian-managed accounts with the protections below.

A parent or legal guardian sets up and supervises the child's profile and confirms they are entitled to do so. The guardian stays in control: they decide what is shared, how the child's name appears, and how the society makes contact - by default, the society contacts the guardian on the child's behalf, and a child does not log in unless the guardian enables a supervised login.

Privacy by default. A child's profile is never shown to public or share-link viewers unless the guardian opts in (and then only under the name format the guardian chooses). We apply privacy-protective defaults, collect the minimum we need, and do not use children's data for advertising, profiling or any kind of automated decision-making. A child under 13 is always guardian-operated.

Date of birth. We ask for the child's date of birth so the society can meet its legal responsibilities for young performers - for example child performance licences, chaperones and permitted hours. It also lets us apply the right protections by age.

Consent. The guardian's consent (for the account, and for any photo/video or public listing) is recorded with a date and kept so it can be evidenced. A guardian can change a setting, withdraw consent, or remove the child's profile at any time from the "My children" area, and a child's information is deleted automatically within 30 days once it is no longer needed.

If you are a parent or guardian and have any question about a young person's information on onsombul, please contact us and we will help.

How we protect your information

We store passwords using one-way hashing, serve the site over encrypted (HTTPS) connections, and limit access to personal information through role-based access controls. No online service can be guaranteed completely secure, but we take reasonable steps to protect your information.

Changes to this policy

We may update this policy from time to time as onsombul develops. When we do, we will change the "last updated" date at the top of this page.

Back to home