Privacy

Riverside Adventure Park is responsible for the personal information used to manage your booking. Parkstack provides the ticketing system and processes that information for the park. Stripe handles card payments. Parkstack never stores your full card number.

Why it is used, and the legal basis for each use: to provide your booking, send your tickets and manage cancellations and refunds, because it is needed for your contract with the park; to keep financial and tax records, because the law requires it; and to answer messages and enquiries, prevent fraud and keep the ticketing secure, because the park has a legitimate interest in running its bookings properly and safely. Your information is not sold or used for advertising.

Messages sent through the Contact page are emailed to the park and are not kept by Parkstack.

Who else handles it, on the park's behalf: Stripe takes card payments (Ireland and the United States); Parkstack runs the ticketing and website using Railway for hosting (the Netherlands), Neon for its database (London), Cloudflare to deliver the website and store files (a worldwide network) and Resend to send emails (Ireland). Information sent to the European Economic Area is covered by the UK's adequacy regulations. Where it goes to the United States, it is protected by the UK–US data bridge or the UK's approved international data transfer clauses.

Contact details for an incomplete checkout are removed after 30 days. For a paid order, direct contact details are removed 24 months after the purchase and any booked visit. The original order and payment references may be kept for up to seven years for financial records and disputes. After that, Parkstack keeps only de-identified ticket counts, dates and financial totals for historical reporting.

You can ask to access, correct or delete information, to receive a copy in a portable format, or to object to or restrict its use, using the Contact page. Some information may need to be kept where the law requires it or while a payment dispute is open. You can also complain to the Information Commissioner’s Office.

This website uses first-party, anonymous analytics to count visits and understand which pages, attractions, searches and ticket steps are useful. For each visit it also notes the kind of place you came from (for example a search engine, social media or a link on one of our posters, never the address of that page) and whether you are using a phone, tablet or computer. It does not use advertising trackers, follow you across websites or collect your email, IP address, full card details or browser fingerprint for analytics.

The legal basis is the park's legitimate interest in understanding how its website is used, so that it can improve it; UK law allows storing the short-lived identifiers this needs for that purpose alone, with this notice and a way to turn it off. Words typed into the site's search box are counted in the daily totals, so please do not type personal details there. Random visitor and session identifiers last only for this browser tab. Detailed events are kept for up to three days, then replaced by permanent daily totals and grouped counts that are not linked to a browser or session. Ticket conversions are counted as anonymous totals and are not linked to an order number.

Nothing is counted until you press OK on the short notice shown on your first visit, which also lets you turn this off. You can object at any time. Turning analytics off also discards events that are still waiting to be sent.