Wicksteed Park understands that privacy is important to you and that you care about how your personal data is used and shared online. This Privacy Policy sets out how Wicksteed Park collects and processes your personal data.

We will take all reasonable steps to ensure that personal data is safeguarded and kept in accordance with applicable data protection legislation. Should we ask you to provide information by which you can be identified, then it will only be used in accordance with this Privacy Policy.

By providing us with your data, you warrant that you are over 16 years of age.

Wicksteed Park is privately owned by the Wicksteed Charitable Trust, Registered Charity No.1142103. Our registered office address is Barton Road, Kettering, Northamptonshire NN15 6NF. We are registered with the Information Commissioner’s Office (ICO) for data protection reference number 00014418336.

Where we manage personal data, we identify as a Data Controller and recognise and act on our obligations under applicable data protection laws.

Information that you provide to us is retained and processed in accordance with UK data protection legislation. This includes personal data from the following categories:

• Customers
• Employees or other workers
• Suppliers
• Professional Advisors and Consultants
• Enquirers and Complainants

We collect your data from the following interactions with us:

Bookings

When you purchase tickets from us or book Weddings, Private Hire, Corporate Events and camping we will collect personal data from you. All such data will be treated in accordance with this Privacy Policy and in accordance with data protection laws. Personal data may be processed using our authorised CRM software.

Communications with us

When you contact us, by phone or email, we will collect details such as your name and email as well as recording any message or other details that are discussed. We will use these details to respond to your questions, provide details of our services, manage any relationship with you and deal with general company enquiries. Data is held on the grounds of being legitimate to our business interests. We may retain copies of emails sent to us. Your personal information will be processed by us in accordance with this Privacy Policy.

Phone calls to us may be recorded and any data relating to the call may be retained by us. The data will be held on the basis of being for our legitimate business needs or in order to fulfil our contractual obligations if you are a client of ours.

Competitions

By entering our competitions and completing our entry forms you give your consent to your data to be used to administer the competition. Unless you opt-in to receive other services from us or we have another lawful purpose to continue to process your data, it will be archived and/or erased once the competition closes.

Wicksteed Park uses photos and videos to promote our work and events via our social media accounts, our website, our e-newsletter and other communications. Where possible, we will try to gain your consent in advance. However, if we are using an image of you, and you would like us to stop, please contact us. We do not pay or provide credit for use of your image in our photographs or videos. You should also refer to the Privacy Policy of YouTube which governs the use of videos on its website, https://policies.google.com/privacy

We use social media to engage with users through links to our pages on the below channels. We do not keep any specific data that identifies you as an individual, although we may process details of our followers.

If you send us a direct message via social media, the details may be retained by us only as relevant to any ongoing contract or to further our legitimate business interests or as required for legal purposes. You should note that the social media provider may also retain your personal details in accordance with their Privacy Policy. You should refer to the Privacy Policies of these channels to understand how they treat your data in relation to linking to our site.

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https://help.instagram.com

Pinterest: https://policy.pinterest.com/en/privacy-policy

Twitter: https://www.twitter.com/en/privacy

YouTube: https://policies.google.com/privacy

Some of the information you provide to us may be considered sensitive personal data which includes information about ethnic or racial origin, political opinions, religious beliefs, trade union membership, physical or mental health, sexual life or criminal record. We will take appropriate additional measures to secure the confidentiality of any special category data.

We do not market this website or our services at those under 18 years old. Consistent with the GDPR we will never knowingly request personally identifiable information from anyone under the age of 16 years old except where legally permitted and with an appropriate adult’s consent.

We will take appropriate steps to delete any personal data of individuals less than 16 years of age that has been collected on our website upon learning of the existence of such data. If you are the parent or legal guardian of a child under 16 who has subscribed to website services, please contact us at hello@wicksteedpark.org to have the child’s information deleted.

We automatically collect information from your browser when you visit our website. This information includes your IP address. You are advised to refer to our Cookie Policy for further details.

We use CCTV at various locations around the Park and within our facilities. These will process pictures of guests and may also record audio. Cameras are used for health and safety and security purposes and are positioned so to be of minimal intrusion. Videos and images are kept in accordance with our Data Retention Policy. If there is evidence of a criminal act, any recordings may be passed to the appropriate authorities.

From time to time, we may need to obtain information from third parties about you. This will only apply where it is necessary to provide our services and as permitted by law.

We may use the information we collect from you in the following ways:

• To administer and improve the website;
• To personalise the content and your experience of the website;
• To allow us to respond to communications sent to us;
• To administer a contest, promotion, survey or other site feature;
• To process your transactions;
• To send you email notifications which you have specifically requested;
• To send to you marketing communications, where expressly agreed;
• To provide third parties with statistical information about our users;
• To ask for feedback, ratings, reviews or testimonials;
• To publish photographs representative of our services for promotional purposes;
• To deal with enquiries and complaints made by or about you relating to the website
• To manage and prevent security issues.

Users contacting this website and/or its owners do so at their own discretion and provide any such personal details requested at their own risk. Your personal information is kept private and stored securely until a time it is no longer required or has no use.

We don’t share, sell, or distribute your data to third parties, except as contractually agreed with you or as provided in this Privacy Policy. We may disclose your personal information if we are required to do so by law, in connection with any legal proceedings, and in order to establish, exercise or defend our legal rights, or if otherwise legally permitted.

We may use Data Processors who act on our instruction in relation to the management of personal data and they must adhere to all data protection laws and regulations. This includes 3rd parties that we use to supply our services. They are provided with personal data on a need-to-know basis and must follow our data security procedures as appropriate.

We will ensure that Data Processors we use only operate on our written instructions and comply with their obligations under the GDPR and all other relevant data protection legislation as may be in force from time to time.

We will only send you emails about our services, i.e. direct marketing, with your express consent. You have the option not to give consent and to withdraw consent at any time. You may withdraw your consent for us to contact you by contacting us at hello@wicksteedpark.org. Non-personally identifiable visitor information may be provided to third parties for marketing, advertising or other uses.

Users of the website are advised to adopt a policy of caution before clicking on any external web links. Clicking an external link will take the user away from our website. Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s terms and conditions. We cannot guarantee or verify the contents of any externally linked website and users click on external links at their own risk. Wicksteed Park and its owners cannot be held liable for any damages, or the consequences of visiting any external links.

Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are subject to our terms and conditions as well as the privacy policies held with each social media platform respectively.

Users are advised to use social media platforms wisely and communicate and/or engage with them with due care and caution in regard to their own privacy and personal details. This website nor its owners will not ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

Wicksteed Park uses social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised that before using such social sharing buttons, that they do so at their own discretion, and should consider that the social media platform may track and save requests to share a web page, through the users’ social media platform account.

Some social media platforms shorten lengthy urls (i.e. web addresses) by default. Users are advised to take caution and good judgement before clicking any shortened urls as these are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.

This website does not accept payment for services online and does not store or process payment data on our servers. We do not share financial details with 3rd parties.

Payments made directly to us do not require us to process your personal data and only transactional data will be held, both in our manual and electronic filing systems.

We are obliged to keep a record of all accidents reported to us which occur on our premises. We will not use the information for any other purpose and it will be stored securely for the minimum time legally required.

We keep your personal information for as long as is necessary to fulfil the purposes for which we collected it for. We will consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, and the purpose for which the personal data is processed. We are also required to process personal data in order to meet legal, statutory and regulatory obligations. The need to hold personal data is regularly reviewed and data will be disposed of when no longer required.

Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

We take appropriate steps to ensure a safe processing of personal data, however, we cannot guarantee the security of data transmitted through our website or by email. Any transmission is at your own risk.

Any information that you supply to us may be stored and processed by servers located in the UK or within the EEA. Your personal data will only be transferred in accordance with relevant data protection law and if this is to a country outside of the EEA it will be to a country where there are ‘adequate’ or appropriate safeguards in place. The circumstances of this are:

• Where there are specific contracts or codes of conduct or certification mechanisms approved by the European Commission which give personal data the same protection it has in Europe
• To the US under the EU-US Privacy Shield which provides similar protection to personal data shared between the Europe and the US.

Wicksteed Park recognises a data subjects rights and will uphold these in accordance with data protection laws. You are entitled to see the information held about you and you may ask us about any of the following:

1. Subject access requests

Data subjects (i.e. individuals) have the right to access personal data that is held by submitting a subject access request (SAR). We will endeavour to respond quickly to any such requests, which legally require us to respond within one month of receiving the request and necessary information. A subject access request can be made by email to hello@wicksteedpark.org

2. Right to rectification

Data subjects have the right to request that we amend or change personal information that is inaccurate or incorrect.

3. Right to erasure

Data subjects have the right to ask us to delete personal information from our systems without giving any reason and at any time. We will act on any such request without delay.

4. Right to restrict processing

Data subjects have the right to rectification or erasure of personal data in the following circumstances:

• Personal data is not accurate;
• The processing of data is unlawful – data subjects may request that processing is restricted;
• Data is required to exercise legal rights or defend legal claims;
• Data is unlawful but there may be lawful grounds for processing, which override this right.

5. Right to data portability

Data subjects have the right to obtain and request the transfer of their data to different service providers.

6. Right to object

Data subjects have the right to object to the processing of data at any time based on their particular situation. This includes objecting to profiling unless it is in the ‘public interest’ or exercised lawfully by an official authority. We will only process data under lawful grounds.

7. Right not to be subject to decisions based on automated processing

We do not use any automated processing that results in any automated decision based on a data subject’s personal information.

We will report any unlawful breach of data as required by the GDPR within 72 hours of the breach occurring, if it is considered that there is an actual, or possibility, that data within our control including the control of our data processors, has been compromised. If the breach is classified as ‘high risk’ we will notify all data subjects concerned using an appropriate means of communication. We will report any relevant breaches to the ICO, see below.

If you wish to invoke any of these rights, you should contact the person responsible for data protection by emailing us at hello@wicksteedpark.org

You can control the use of your data by signing up to one or more of the preference services operating in the UK: The Telephone Preference Service (TPS), the Corporate Telephone Preference Service, or the Mailing Preference Service (MPS). These services can prevent you from receiving unsolicited marketing communications.

If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by writing to or emailing us at hello@wicksteedpark.org

If you have any concerns about how we handle your data, please contact the us by email to hello@wicksteedpark.org

If you want to raise a concern about the use of your data, you can contact us by email to hello@wicksteedpark.org. Alternatively, you can formally raise a concern or complaint to the Information Commissioner’s Office (ICO) directly on 0303 123 1113, or see the options for reporting issues on https://ico.org.uk/concerns/

Wicksteed Park may change this policy from time to time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. You will be deemed to have accepted any changes to the terms of the privacy policy on your next visit of the website following an amendment.

No failure or delay by us in exercising any of our rights in accordance with this Privacy Policy or our terms and conditions shall be deemed to be a waiver of that right, and no waiver of a breach of any provision of the Agreement shall be deemed to be a waiver of any subsequent breach of the same or any other provision.

If one or more of the provisions of this Privacy Policy or our terms and conditions is found to be unlawful, invalid or otherwise unenforceable, those provision(s) shall be deemed severed from the remainder of these terms and conditions and shall remain enforceable.

The terms of this Privacy Policy shall not confer rights on any third parties and accordingly the Contracts (Rights of Third Parties) Act shall not apply.

The terms of this Privacy Policy and all disputes, whether contractual or otherwise, arising out of or in connection with the policy are governed by and shall be construed in accordance with the laws of England and Wales and each party submits to the exclusive jurisdiction of the English courts.

Copyright © 2021 Wicksteed Trading Limited

This includes most incoming and outgoing telephone calls that are handled by Wicksteed Trading with the exception of calls where payment is taken by Wicksteed Trading (recording manually terminated), or outgoing calls transferred to the registration service where a payment may be taken (recording automatically terminated on transfer).

It has become common practice to record calls due to the growth of business conducted by telephone. Recording customer conversations allows organisations to assess customer satisfaction, train and develop staff, review call quality, and have access to a verbal record of what is said in the event of a subsequent complaint. It also hopefully means employees feel more protected knowing that any threatening behaviour can be evidenced and acted upon where necessary.

• Quality monitoring – Written records only provide partial information. A call recording provides a more rounded view and allows us to better understand customer experience and assess the processes applied. This can help us identify any improvement areas.
  Training and Development – Listening to a sample number of calls, allows managers to identify training needs. Sample scenarios are based on the recordings but any transcripts are anonymised.
• Gaining a better understanding of our customers – Many calls are verbally resolved without the need to complete any records. Listening to sample calls will help us better understand our customer needs and gain a more informed view of organisations we signpost to.
  Cm
• plaints and disputes – Some calls are verbally resolved. Where information is entered onto an electronic system this becomes the established record. In the event of a complaint or dispute, a call recording (if available), may provide additional information to help us investigate any allegations.
• Employee safety and wellbeing – A recording may become a vital piece of evidence in the event of any threats being made to the organisation or an individual.

Our data handling guarantee outlines the good principles for handling customer data that we follow and ensures information is accurate and reliable.

Call recordings are destroyed after two months. If the recording is available, you can request a copy of your conversation by making a request for access in writing to customerfeedback@wicksteedpark.org. This will be provided to you in accordance with the terms of the Data Protection Act 2018.