Privacy Policy

This Privacy Policy explains how Theme Park Direct ("we", "us", "our") collects, uses, shares and protects your personal information when you visit our website or buy tickets and related Products from us. We are committed to handling your data responsibly and in line with applicable data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Information we collect

We collect information that you provide to us and information collected automatically when you use the site. This includes:

• Order and contact details – your name, email address, phone number, billing address and the details of the tickets you buy.
• Payment information – processed securely by our payment providers. We do not store full card numbers on our own systems.
• Account information – if you create an account, your login details and order history.
• Communications – messages you send us through our contact channels.
• Technical and usage data – such as your IP address, device and browser type, and how you navigate the site, collected through cookies and similar technologies.

2. How we use your information

We use your personal information to:

• process and deliver your orders and send you tickets and confirmations;
• provide customer support and handle amendments, cancellations and refunds;
• operate, maintain, secure and improve our website and services;
• detect and prevent fraud and misuse;
• comply with our legal and accounting obligations; and
• where you have consented, send you marketing about offers and products that may interest you. You can withdraw consent or unsubscribe at any time.

3. Legal bases for processing

We rely on the following legal bases: performance of a contract (to fulfil your order), legitimate interests (to run and improve our business and prevent fraud, balanced against your rights), consent (for optional marketing and non-essential cookies), and legal obligation (for example, to keep transaction records).

4. Sharing your information

We share personal information only as necessary, including with: attraction operators and official ticketing partners to fulfil your booking; payment processors to take payment; technology, hosting, email and analytics providers who help us run the service; and authorities or advisers where required by law or to protect our rights. We do not sell your personal information.

5. International transfers

Some of our partners and service providers are based outside the UK, including in the United States, in order to deliver tickets for the attractions you book. Where personal data is transferred internationally, we take steps to ensure it is protected by appropriate safeguards.

6. Cookies and analytics

We use essential cookies to make the site function, and, with your consent, analytics and marketing cookies to understand how the site is used and to improve it. You can accept, reject or manage non-essential cookies at any time using the cookie banner on the site or your browser settings. Where you have not consented to analytics cookies, we anonymise your IP address in our analytics.

7. Data retention

We keep your personal information only for as long as necessary for the purposes set out in this policy, including to fulfil your order, provide support, and meet legal, tax and accounting requirements. When it is no longer needed, we securely delete or anonymise it.

8. Your rights

Subject to applicable law, you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request deletion, to restrict or object to certain processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, please contact us using the details below. You also have the right to complain to the UK Information Commissioner's Office (ICO).

9. Security

We use appropriate technical and organisational measures to protect your personal information against unauthorised access, loss or misuse, including secure payment processing and access controls. No method of transmission over the internet is completely secure, but we work to protect your data and review our measures regularly.

10. Children

Our services are intended for adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows when it was most recently revised. Please review it periodically.

12. Contact us

To exercise your rights or ask any question about this Privacy Policy or how we handle your data, please contact us via our contact page.