Privacy Policy

ABOUT THIS DOCUMENT

This Privacy Notice will help you understand how we collect, use and protect your personal information. If you have any queries about this Privacy Notice or how we process your personal information, please contact the Data Protection Officer by email: dpo@orbitaltrampolinepark.co.uk or by post: Data Protection Officer, Orbital Trampoline Park (Luton) Limited, Units 1 & 2 Premier Business Park, Dencora Way, Luton, LU3 3HP.

Whenever you give us personal data, you are consenting to its collection and use in accordance with this privacy notice, including our use of cookies. If you give us personal data on behalf of someone else, you are confirming that you have given them the information in this privacy notice and that they have agreed for us to use their personal data in the way we describe in this privacy notice.

WHO WE ARE

The organisation responsible for the processing of your personal information is Orbital Trampoline Park (Luton) Limited of Units 1 & 2 Premier Business Park, Dencora Way, Luton, LU3 3HP. This means that we are a ‘data controller’ under the Data Protection Act 1998 (and, once in force, to the General Data Protection Regulation (also known as the GDPR)). Our registration number with the Information Commissioner’s Office is ZA361585.

THIRD-PARTY LINKS ON OUR WEBSITE

Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

WHAT INFORMATION WE COLLECT ON YOU

The personal data you have provided, we have collected from you, or we have received from third parties includes:

name, address and address history, date of birth and gender
contact details, including telephone numbers and email addresses
financial information, including credit/debit card details (although we do not retain complete payment card information)
identifiers assigned to your computer or other devices, including your Internet Protocol (IP) address
when you contact us through any digital channel we will inform you of the methods used by each of those channels at point of entry and at any point where we capture personal information. The information we collect includes IP addresses and is used for fraud prevention and to improve customer experience.

HOW WE COLLECT INFORMATION ABOUT YOU

Most of the personal information we hold about you is that which we collect directly from you, for example:

when you purchase our products or services
when you register to receive information from us
when you complete waivers and fitness questionnaires
each time you interact with us, respond to communications or surveys, or enter competitions

when you make enquiries or raise concerns with our customer service team.

WHAT WE USE YOUR INFORMATION FOR AND THE LEGAL BASES FOR PROCESSING

We may store and use your personal information for the purposes of:

(a) administering your orders and bookings (as is necessary for performance of a contract between you and us and/or as is necessary for our legitimate interests);

(b) using your payment details to process payments relating to bookings and refunds (as is necessary for the performance of a contract between you and us and/or as is necessary for our legitimate interests);

(d) handling insurance claims (as is necessary for the performance of a contract between you and us and/or as is necessary for our legitimate interests);

(e) communicating with you about your orders and bookings, including responding to your enquiries (as is necessary for the performance of a contract between you and us and/or as is necessary for our legitimate interests);

(f) administering debt recoveries, where you owe us money under a contract or otherwise (as is necessary for the performance of a contract between you and us and/or as is necessary for our legitimate interests);

(g) undertaking market research and statistical analysis, including analysing your use of our website. (as is necessary for our legitimate interests); and

(h) fulfilling our obligations owed to a relevant regulator, tax authority or revenue service (as is necessary for compliance with our legal obligations and/or as is necessary for our legitimate interests).

Our “legitimate interests” as referred to above (and below) include our legitimate business purposes and commercial interests in operating our business in a customer-focused, efficient and sustainable manner, in accordance with all applicable legal and regulatory requirements.

USING YOUR PERSONAL DATA FOR MARKETING

We will send you marketing about similar products and services by post, telephone, email, SMS and through digital channels. Digital channels include social media and similar such digital marketing channels. We may upload and match the personal data you provide to us with the data you provide to social media and similar such digital marketing channels. This allows us to improve our knowledge of you and, in return, serve you with relevant marketing messages.

You can object to receiving marketing from us at any time. Please follow the unsubscribe link in our marketing emails or SMS; or send us your name, address and date of birth via email to dpo@orbitaltrampolinepark.co.uk or by post to: Data Protection Officer, Orbital Trampoline Park (Luton) Limited, Units 1 & 2 Premier Business Park, Dencora Way, Luton, LU3 3HP.

We consider that it is within our legitimate interests to send you information about our products and services for marketing purposes.

USE OF CCTV

We monitor areas using CCTV for visitor safety, building security, crime prevention and prosecution of offenders, identifying accidents, incidents and emergency situations. In locations that have CCTV there are signs displayed notifying you that CCTV is in operation.

We will use CCTV video images to help with our investigations into any alleged crime, incident or safety related matter.

We will retain CCTV video images for no more than 90 days unless the footage is being used to investigate an alleged crime or incident in which case it may be retained for up to 2 years following the conclusion of any investigation.

We may share your data where we are legally obliged or able to do so, for example, to comply with the law; where there is a clear health and safety risk and for the detection and prevention of crime, prosecution of offenders and for the detection and prevention of fraud.

COOKIES

We may use cookies to monitor how people use our website. This helps us to understand how our customers and potential customers use our website so we can improve things like layout, function and design.

A cookie is a piece of information stored on your computer’s hard drive that records how you have used a website. The next time you visit that website, it can tailor your options based on the information it has stored about your last visit.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.

Further information can be found at https://ico.org.uk/for-the-public/online/cookies.

WHO WE SHARE YOUR DATA WITH

Where relevant, given the nature of the products and services provided to you, we may also share your information with the following categories of third parties:

third party service providers who support the operation of our business, such as IT and marketing suppliers, financial service providers, and insurers (as is necessary for the performance of a contract between you and us and/or as is necessary for our legitimate interests);
regulators and law enforcement agencies, including the police, HM Revenue and Customs or any other relevant authority who may have jurisdiction (as is necessary for compliance with our legal obligations).

PROCESSING OUTSIDE OF THE EUROPEAN ECONOMIC AREA (EEA)

The personal information that we collect from you may be transferred to and processed in a destination outside of the EEA. It may also be processed by staff operating outside the EEA who work for one of our suppliers. In these circumstances, your personal information will only be transferred on one of the following bases:

the country that we send the data is approved by the European Commission as providing an adequate level of protection for personal information; or
the recipient has agreed standard contractual clauses approved by the European Commission with us, obliging the recipient to safeguard the personal information (in particular, our transfer of personal information to suppliers in India and the United States for marketing are protected in each case by the use of appropriate model clauses); or
there exists another situation where the transfer is permitted under applicable data protection legislation (for example, where a third party recipient of personal data in the United States has registered for the EU-US Privacy Shield).

To find out more about how your personal information is protected when it is transferred outside the EEA (and if you wish to obtain a copy of the appropriate and suitable safeguards), please contact our Data Protection Officer using the details above.

DATA SECURITY

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

HOW LONG YOUR INFORMATION IS KEPT

We will retain your personal information for a number of purposes, as necessary to allow us to carry out our business. Your information will be kept for up to 7 years on our main systems after which time it will be archived, deleted or anonymised. Some of the archived information may be retained for up to 50 years for the purposes of processing of any existing or future claims. Any retention of personal data will be done in compliance with legal and regulatory obligations and with industry standards. These data retention periods are subject to change without further notice as a result of changes to associated law or regulations. If you have any questions in relation to the retention of your personal data, please contact our Data Protection Officer at the details provided above.

YOUR RIGHTS

Under the Data Protection Act 1998 you have the following rights:

to obtain access to, and copies of, the personal information that we hold about you;
to require that we cease processing your personal information if the processing is causing you damage or distress; and
to require us not to send you marketing communications.

Once the GDPR comes into force on 25 May 2018, you will also have the following rights:

to require us to erase your personal information;
to require us to restrict or object to our data processing activities;
to receive from us the personal information we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of you transmitting that personal information to another data controller; and
to require us to correct the personal information we hold about you if it is incorrect.

Please note that these rights may be limited by data protection legislation, and we may be entitled to refuse requests where exceptions apply.

If you are not satisfied with how we are processing your personal information, you can make a complaint to the Information Commissioner.

You can find out more about your rights under data protection legislation from the Information Commissioner’s Office website: www.ico.org.uk.

Basket

Privacy Policy

01582 262 050