Wingham Wildlife Park Privacy Policy

1 Your Information
Please ensure that when making an order the information you provide is correct and complete. If you wish to make any changes to the information you have provided then please inform Wingham Wildlife Park of these immediately. However Wingham Wildlife Park reserves the right not to act on any requested changes unless it would be unreasonable not to act.

1.1 Direct Marketing
We will only contact you by email if you actively consent to this. By consenting to Wingham Wildlife Park emails or opting in to email communications, you grant us permission to use your email address to send you email marketing communication. At any stage you may choose to opt out of such communications.

If you have provided us with your postal address or telephone number we may contact you by post or telephone about our work, unless you have told us that you don’t want to receive this. Before making such calls we will always screen against the Telephone Preference Service (TPS) or, where sending letters, we will always screen against the Mail Preference Service. 

Where you are registered with the TPS we will only make calls to you if you have specifically consented to receiving calls from Wingham Wildlife Park or if we need to contact you in reference to a purchase, for example if there has been a problem in processing a payment. Likewise we will only write to you if you are registered with the Mail Preference Service if you have specifically consented to receiving letters from Wingham Wildlife Park.

1.2 Third parties

Wingham Wildlife Park will not sell your data. We will not share your data for marketing purposes unless you have actively consented to this. However, in some circumstances we may need to share your details with a third party for processing. This could be if we run an event in partnership with another organisation and they need your details in order to fulfil your tickets or experience. For example, if you are taking part in a running event with us, we may need to share your details to be able to send your race pack to you. We may also use a third party to process your personal details if we need to send your data to a mailing house in order to fulfil a postal mailing to you, this could include sending you a letter about your membership. 

1.3 Enhancing your supporter experience

We may use profiling and screening techniques to ensure that the communications we send you are relevant to you. This allows us to provide an improved experience for our supporters.

When building a profile of our supporters we may analyse geographic and demographic information, as well as your online behaviour and purchase history, to better understand your interests so we can contact you with relevant messages. An example of this would be looking at your location so we can share information about relevant events in your area. 

You can opt out of your data being used in this way by emailing info@winghamwildlifepark.co.uk. 

1.4 Your choice

You always have a choice as to whether and how you want to receive communications about our work, products and services and ways you can get involved. If you do not want us to use your contact details to contact you in the future you can opt out of this when we collect your details or at a later time. 

If you ever want to change your contact preferences, or opt out of communications, you can do this at any time by clicking the unsubscribe link at the bottom of any email from us

1.5 Legal basis for processing your personal data

In some circumstances we will collect and process your personal information using the legitimate interest legal processing basis. 

Sometimes, we will need to process your data as it is part of a contract which you have entered into. For instance, if you have booked an event or animal experience with us, then we will need to contact you and take payment to enable us to provide the relevant services under the agreement with you.

However in most circumstances, we will rely on your consent when using your personal data. An example of this would be when we request your consent to receive marketing emails from Wingham Wildlife Park.

1.6 Retention

We hold your information for only as long as necessary for the purpose needed.  For example if you have a season ticket with us, we will keep your details for a minimum of 12 months after your membership expires to allow us to process a renewal discount the following year, unless you decide prior to this not to renew your membership and wish for your details to be removed.

1.7 Under 18s

On some occasions we may collect and manage data of under 18’s. We will always aim to manage this data in a way which is appropriate to the age of the child and will only keep this data for the purpose in which it was collected. Children’s data is usually only collected if you hold a Wingham Wildlife Park membership.

We will always try to seek consent from the parent or guardian of the child before collecting and processing this information. 

1.8 Keeping your data secure

We always ensure that we have the necessary controls in place to protect the personal data you provide us with. 

We carry out regular audits of who has access to data so that we can ensure that your information is only accessed by trained staff. 

Wingham Wildlife Park makes every effort to maintain customer confidentiality when securing an online payment.  This includes ensuring the security of your credit card details and other personal information. We don’t store your card details on any Wingham Wildlife Park system.  All of your personal information is encrypted as it travels over the internet. When you make a booking, you enter a secure internet site (indicated by the letters https:// in the address bar and or a padlock displayed in your web browser). When you make a payment you enter your card details directly into our payment provider’s secure web page. To protect you against credit card fraud (where someone has discovered your credit card details but do not have your card), you will be asked to enter the unique security code printed on the back of your payment card.

Sometimes we use external companies to collect or process your personal data on behalf of Wingham Wildlife Park. We carry out thorough checks on any companies we work with and have a contract in place with each of these companies to ensure that they process your information in line with our expectations. 

Some of our suppliers may run their operations outside the European Economic Area (EEA). Although they may not be subject to same data protection laws as companies based in the UK, we will take steps to make sure they provide an adequate level of protection in accordance with UK data protection law. By submitting your personal information to us you agree to this transfer, storing or processing at a location outside the EEA.

If requested we may need to supply your information to the police, regulatory bodies or legal advisors. 

We will not share your data with any other third parties unless you have given your explicit consent for us to do so. 

1.9 Your right to your personal information

Under the General Data Protection Regulation you have the right to request a copy of the personal information we hold about you. You also have the right to request that we erase any personal information we hold, where WIngham Wildlife Park has no compelling reason to continue processing this data. 

If you wish to request this information please contact info@winghamwildlifepark.co.uk. 

2. Cookies

We use ‘cookies’ to enhance your experience on our website. Cookies mean that the Wingham Wildlife Park website will remember you for a particular purpose and for a particular length of time.

When you’re accessing our website, your device may provide us with information about the device you’re using, this could include the type of device, what operating system you’re using and may report any details of a website or app crash. Your device manufacturer or operating system provider will be able to provide you with more details about the information your device makes available to us.

3. Google Analytics

We use Google Analytics to help us understand how visitors are using and engaging with our website and apps. This allows us to make improvements to our web services and your online experience.

The Google Analytics tracking tool uses a number of cookies to collect information and report website usage statistics and does so without personally identifying individual visitors to Google or Wingham Wildlife Park.

The information generated by the cookie about your use of Wingham Wildlife Park’s website will be transmitted and stored by Google on servers in the United States.

For more information about Google’s privacy policy in regards to Google Analytics, please see www.google.com/analytics/learn/privacy.html

In addition to reporting website usage statistics, we use Google Analytics in conjunction with additional advertising cookies. We use these cookies to select advertising based on what’s relevant to you, to measure interactions with the ads we display and to improve reporting on campaign performance.

The additional advertising cookies we use include:

• Remarketing with Google Analytics

• Google Display Network Impression Reporting

• Google Analytics Demographics and Interest Reporting

• Google Optimize

• Other integrated services 

Wingham Wildlife Park will not merge personally-identifiable information with anonymous information gathered from these analytics systems unless there is prior notice and affirmative consent via opt-in from the user. When using any of these tracking tools Wingham Wildlife Park does not identify users or facilitate the merging of personally identifiable information with non-personally identifiable information collected.

If you wish to opt-out of Google Analytics tracking please visit and install the Google Analytics Opt-out Browser Add-on here: https://tools.google.com/dlpage/gaoptout/

Information we get from other organisations when you give them permission to share your details, or your information is available publically.

4. GoCardless

GoCardless have their own set of privacy policies, which apply only to customers purchasing a season ticket through our direct debit option.

Who is GoCardless?

GoCardless provides services that help merchants process payments for their goods or services. The controller for the personal data involved when you use GoCardless, visit GoCardless’s website or communicate with GoCardless, or transact with a merchant using GoCardless’s payment services, is:

GoCardless Ltd.

Sutton Yard, 65 Goswell Road

London, EC1V 7EN

United Kingdom

Contact GoCardless’s Data Protection Officer or exercise your data protection rights (including your right to  object) Merchants who use GoCardless’s payment services are also data controllers.

What personal data do GoCardless collect?

GoCardless collect personal data when you set up and make or have a payment collected using GoCardless’s services.

- Identification and contact information, such as your name, home address, and email address. Where required by law or financial institutions, GoCardless also collect a government identifier.

- Financial information, such as your bank account number, sort code, account holder name, and other information you provide to GoCardless or give us consent to access directly from your bank. Using tools on GoCardless’s website, like Truelayer, you can choose whether to let GoCardless access personal data directly from your bank account so that GoCardless can verify that you are the owner of the account. This includes your balance and personal details registered to your bank account.

- Transaction information, such as the names of the transacting parties, a description of the transactions, the payment amounts, billing and shipping information, and the devices and payment methods used to complete the transactions.

- Device and connection information, such as the type of device you use to access GoCardless’s services, operating system and version, device identifiers, network information, IP address and location derived from it.

- Payer verification information. If GoCardless’s banking partner or GoCardless’s own fraud alerts flag a potentially fraudulent payment or account, GoCardless will use identity verification and screening agencies like Onfido or Lexis Nexis and other publicly available data to confirm the payer’s identity and clear the alert or stop the payment or chargeback.

Using personal data to provide GoCardless’s services

GoCardless use personal data where it is necessary to provide the services you request.

- To provide payment services, GoCardless use the identification, contact and financial information of merchants and payers. GoCardless use transaction information to deliver key features of the services, such as displaying transaction history.

- GoCardless use personal data to communicate with you, like sending payment notifications, alerting you to changes in the service, or providing customer support.

- GoCardless use personal data to prevent fraudulent or unauthorised use of GoCardless’s services. GoCardless verify the identity of merchants and in some cases payers, evaluate the authenticity of payments, and may block transactions GoCardless believe to be fraudulent or violate GoCardless’s terms. To do this, GoCardless rely on software that makes automatic decisions:

Technology helps GoCardless make automatic decisions based on the information GoCardless collect about you or a transaction. GoCardless routinely test GoCardless’s software to improve the accuracy of these decisions and to prevent unintended bias. These decisions can have significant effects for you, such as:

- Preventing access to GoCardless’s services, if GoCardless determine there is a high likelihood that it would violate GoCardless’s regulatory requirements, for example, if the identification you provide does not match public records, identity verification or credit reference information.

- Cancelling transactions, if GoCardless determine there is a high likelihood that there are insufficient funds to cover it or that it is fraudulent, for example, because the payment is made from a location that does not match GoCardless’s records.

- Cancelling the service, if GoCardless determine that it is being used in violation of GoCardless’s terms, for example, if any of the activities you conduct appear on GoCardless’s list of restricted activities.

Using personal data for GoCardless’s legitimate interests

GoCardless use personal data for GoCardless’s legitimate business interests. When GoCardless do, GoCardless make sure GoCardless understand and work to minimise its privacy impact. For example, GoCardless limit the data to what is necessary, control access to the data, and where GoCardless can, aggregate or de-identify the data.

- GoCardless use personal data to develop and improve GoCardless’s products and services. For example, GoCardless might use data to:

-- create or refine models for detecting unauthorised transactions and improving the speed at which transactions are processed

-- analyse how people engage with GoCardless’s website and services so that GoCardless can develop new products or features.

- Where GoCardless determine that a payment is likely to clear, by using personal data to analyse the likelihood that payers have sufficient funds, GoCardless may advance payments to merchants and partners to process transactions more quickly.

- GoCardless use personal data to promote GoCardless’s services, communicate news and industry updates, and host or participate in events.

- Where GoCardless believe it is necessary to protect GoCardless’s legal rights and interests and the interests of others, GoCardless use personal data in connection with legal claims, compliance, regulatory and audit functions, and in connection with the acquisition, merger or sale of a business.

Using personal data where required by law and payment schemes

GoCardless use personal data to comply with the requirements of law and the payment schemes GoCardless operate under, and as required in other exceptional circumstances.

- GoCardless must conduct due diligence on GoCardless’s merchants and where necessary, payers, and prevent money laundering or other illegal activities. GoCardless verify the identities of prospective and current merchants and their employees and beneficial owners, and screen them for sanctions, politically exposed persons, criminal activity and adverse media. GoCardless conduct background checks where required by law.

To collect sensitive data like criminal activity, GoCardless rely on the "substantial public interest conditions" in data protection law (for example, Schedule 1 of the UK Data Protection Act 2018).

- Under exceptional circumstances, GoCardless may be required by law to provide personal data to law enforcement agencies, courts or others in connection with claims and other litigation.

How is personal data shared?

- GoCardless share personal data with financial institutions and the merchants and payers in a transaction to provide GoCardless’s payment services.

- GoCardless works with partners who integrate GoCardless’s payment services into their applications. When you make a payment through a partner integration, or when you set up a GoCardless account with one of GoCardless’s partners, your personal data will be shared with the partner to provide the integrated services.

- GoCardless share data with GoCardless companies in countries where GoCardless offer the GoCardless payment services, who use it to provide and market GoCardless’s services in those countries, governed by this privacy notice.

- If ownership or control of all or part of GoCardless’s business or assets changes, GoCardless may transfer personal data to the new owner. If the owner will use the data for purposes other than those disclosed here, they will take the steps required by law to ensure such purposes remain lawful.

- GoCardless work with service providers who have access to personal data when they provide GoCardless with services, like technical infrastructure, web and app development, and marketing, analytics and survey tools. GoCardless impose strict restrictions on how service providers store, use and share data on GoCardless’s behalf. GoCardless also work with companies who provide identity verification, background screening, due diligence, consulting and other regulatory services for GoCardless.

- In exceptional circumstances, GoCardless share personal data with government agencies and other third parties if GoCardless believe it is reasonably necessary to comply with law, regulation, legal process or governmental request; to enforce GoCardless’s agreements, policies and terms; to protect the security of GoCardless’s services; to protect GoCardless and GoCardless’s merchants, payers or the public from harm or illegal activities; or to respond to an emergency.

International transfers

GoCardless’ services are offered from GoCardless’s United Kingdom headquarters. Personal data may also be stored and accessed by service providers located in other countries in the European Union. Some of GoCardless’s service providers are located in the United States or other countries that do not provide the same standard of data protection as the EU.

When GoCardless work with a service provider, GoCardless look for a legal mechanism that requires them to protect data to EU standards. For example, the service provider has signed on to the EU-US Privacy Shield, operates under EU-approved binding corporate rules, or is in a country the EU recognises as having adequate data protection laws. Where no other legal mechanism exists, GoCardless enact the EU-approved standard contractual data protection clauses in GoCardless’s contracts.

Our services are available in a number of countries around the world. If you use our services to pay a merchant in another country, personal data will be transferred as necessary to complete this transaction.

Your rights and choices

Most of the data GoCardless collect and the purposes GoCardless use it for are necessary for GoCardless to operate and improve our services or comply with our obligations as a payment provider. GoCardless tell you in the service where you can make a choice or grant consent. When you grant consent, you may withdraw it at any time to stop any further processing. You can also ask GoCardless at any time not to send or to carry out profiling for direct marketing, or to stop using certain kinds of cookies.

You may have certain rights under data protection law. These include the right to ask GoCardless for a copy of your personal data, to correct, delete or restrict processing of it, and to obtain personal data in a format you can share with a new provider. You may have the right to object to processing. These rights may be limited in some situations – for example, where GoCardless can demonstrate that GoCardless have a legal requirement to process your data.

Exercise your data protection rights

If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live or work, or where you believe a breach may have occurred.

How long do GoCardless keep personal data?

GoCardless keeps personal data for as long as necessary to provide our services and process payments for our merchants. GoCardless also keep personal data for other legitimate business purposes, such as complying with our legal obligations, resolving disputes, preventing fraud, and enforcing our agreements. Because these needs can vary for different data types used for different purposes, retention times will also vary. Here are some of the factors GoCardless have considered to set retention times:

- How long do GoCardless need the personal data to develop, maintain and improve our services, keep our systems secure, execute chargebacks, prevent fraudulent transactions, and store appropriate business and financial records.

- Have you asked GoCardless to stop using your data or withdrawn your consent? GoCardless will process the data for only a short period after this to implement your request. If needed, GoCardless will also keep a record of your request so that GoCardless can make sure it is respected in the future.

- Are GoCardless subject to a legal, regulatory or contractual obligation to keep the data? For example, GoCardless’re required to keep transaction data and other information that helps GoCardless carry out required checks, for periods of time that vary according to the underlying payments scheme. GoCardless may also need to comply with government orders to preserve data relevant to an investigation or retain data for the purposes of litigation

5. N-Gage

The following section applies for users combining our Digitickets platform with the N-Gage based Wingham Wildlife Park app.

Fame Media Tech Limited understands that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this site, www.n-gage.io (“Our Site”) or who uses Our Apps and will only collect and use personal data in ways that are described here, and in a manner that is consistent with our obligations and your rights under the law. Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of our Privacy Policy is deemed to occur upon your first use of Our Site or Our Apps. If you do not accept and agree with this Privacy Policy, you must stop using Our Site and Our Apps immediately.

5.1 Definitions and Interpretation

In this Policy, the following terms shall have the following meanings:

“Account” means an account required to access and/or use certain areas and features of Our Site or Our Apps;

“personal data” means any and all data that relates to an identifiable person who can be directly or indirectly identified from that data. In this case, it means personal data that you give to us via Our Site. This definition shall, where applicable, incorporate the definitions provided in the EU Regulation 2016/679 – the General Data Protection Regulation (“GDPR”); and

“We/Us/Our” means Fame Media Tech Limited , a limited company registered in England under company number 11579910, whose registered address is 15 Parsons Court, Welbury Way, Aycliffe Business Park, County Durham DL5 6ZE.

“Operator” means a customer of Fame Media Tech Limited who has been granted a commercial license to operate the n-gage.io attraction management software and app.

“Our Apps” means any mobile application that is licensed and deployed on behalf of an Operator by Fame Media Tech Limited as part of the n-gage.io attraction management software solution.

5.2 Information About Us

5.2 .1 Our Site and Our Apps are owned and operated by Fame Media Tech Limited, a limited company registered in England under company number 11579910, whose registered address is 15 Parsons Court, Welbury Way, Aycliffe Business Park, County Durham DL5 6ZE.

5.2.2 Our Data Protection Officer is Bryan Hoare, and can be contacted by email at bryan@famemediatch.com

5.3 What Does This Policy Cover?

This Privacy Policy applies only to your use of Our Site or Our Apps. Our Site or Our Apps may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them.

5.4 Your Rights

5.4.1 As a data subject, you have the following rights under the GDPR, which this Policy and Our use of personal data have been designed to uphold:

5.4.1.1 The right to be informed about Our collection and use of personal data;

5.4.1.2 The right of access to the personal data We hold about you (see section 12);

5.4.1.3 The right to rectification if any personal data we hold about you is inaccurate or incomplete (please contact us using the details in section 14);

5.4.1.4 The right to be forgotten – i.e. the right to ask us to delete any personal data we hold about you (we only old your personal data for a limited time, as explained in section 6 but if you would like us to delete it sooner, please contact us using the details in section 14);

5.4.1.5 The right to restrict (i.e. prevent) the processing of your personal data;

5.4.1.6 The right to data portability (obtaining a copy of your personal data to re-use with another service or organisation);

5.4.1.7 The right to object to us using your personal data for particular purposes; and

5.4.1.8 Rights with respect to automated decision making and profiling.

5.4.2 If you have any cause for complaint about our use of your personal data, please contact us using the details provided in section 14 and we will do our best to solve the problem for you. If we are unable to help, you also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office.

5.4.3 For further information about your rights, please contact the Information Commissioner’s Office or your local Citizens Advice Bureau.

5.5 What Data Do We Collect?

Depending upon your use of our Site or Our Apps, we may collect some or all of the following personal and non-personal data:

5.5.1 Unique Device Identification – Sometimes, our products may store some unique identifiers of your device, only for analytics purposes or for storing your preferences. These will include:

- device name
- device year class
- device model
- operating system
- web browser type and version

5.5.2 A list of URLs that you may get directed to from your activity on Our Site or Our Apps

5.5.3 When you use Our Apps, your location, name, email address, photos, videos, app interaction data, user generated content, crash logs, diagnostics, app performance and app ID may be processed for app functionality, marketing, push notifications and ongoing maintenance as outlined below:

- Location

Used for way finding and enhancing the visitor experience. The user can opt out of this data being captured. This is not shared with third-parties.

- Name
Used for personalisation, communication and account management. This is only shared with email and push notification delivery partners.
- Email Address
Used for account management and communication. This is only shared with email delivery partners, and our app monitoring partner to understand which users have experienced problems.
- Photos
Used ephemerally as part of app functionality. This is not sent to our servers and is not shared with third-parties, unless the user chooses to do so via the sharing functionality.
- Videos
Used ephemerally as part of app functionality. This is not sent to our servers and is not shared with third-parties, unless the user chooses to do so via the sharing functionality.
- App Interaction Data
Used to support app functionality and for analytics. This is not shared with third parties.
- User Generated Content (e.g. feedback text)
Used by operators to support their management. This is not shared with third-parties.
- Other Action Data (e.g. feedback score)
Used by operators to support their management. This is not shared with third-parties.
- Crash Logs
Used for app analytics and problem diagnosis. This is shared with our app monitoring partner.
- Diagnostics
Used for app analytics and problem diagnosis. This is shared with our app monitoring partner.
- App Performance Data
Used for app analytics and problem diagnosis. This is shared with our app monitoring partner, including device ID, device name, device model, device operating system and web browser/version.
- Device ID
Used for app analytics and problem diagnosis. This is shared with our app monitoring partner.

5.5.4 We may also collect and process the following data about you:

Information that you provide by filling in forms on any part of Our Site or Our Apps. This includes information provided at the time of registering to use our site or Our Apps, registering to become a member of our site, subscribing to any of our services, posting material on our site or requesting further services. We may also ask you for information when you report a problem with our site.

If you contact us, we may keep a record of that correspondence.

We may also ask you to complete surveys that we use for research purposes, although you do not have to respond to them.

Details of actions you carry out through our site and of the fulfilment of those actions.

Details of your visits to our site including, but not limited to, traffic data location data, content viewed and other communication data, whether this is required for our own purposes or otherwise, and the resources that you access.

5.6 How Do We Use Your Data?

5.6.1 All personal data is processed and stored securely for no longer than is necessary in light of the reason(s) for which it was first collected. We will comply with our obligations and safeguard your rights under GDPR at all times. For more details on security see section 7, below.

5.6.2 Our use of your personal data will always have a lawful basis, either because it is necessary for our performance of a contract with you, because you have consented to our use of your personal data (e.g. by subscribing to emails), or because it is in our legitimate interests. Specifically, we may use your data for the following purposes:

5.6.2.1 Providing and managing your access to Our Site or Our Apps;

5.6.2.3 Personalising and tailoring your experience on Our Site or Our Apps;

5.6.2.4 Personalising and tailoring Our products and services for you;

5.6.2.5 Market research;

5.6.3 With your permission and/or where permitted by law, We may also use your data for marketing purposes which may include contacting you by mail and telephone or text message or post with information, news and offers on Our products and services. We will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that We fully protect your rights and comply with Our obligations under GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003.

5.6.4 Third parties whose content appears on Our Site or Our Apps may use third party Cookies. Please note that We do not control the activities of such third parties, nor the data they collect and use and advise you to check the privacy policies of any such third parties.

5.6.5 You have the right to withdraw your consent to Us using your personal data at any time, and to request that We delete it.

5.6.6 We do not keep your personal data for any longer than is necessary in light of the reason(s) for which it was first collected.

Data will therefore be retained for the following periods (or its retention will be determined on the following bases):

5.6.6.1 All personal data referred to in section 5 above will be retained upon first registration for the period of time required to perform our services to you;

5.6.6.2 Personal data will be retained thereafter to keep you informed of other relevant annual events and activities until such times as you tell us to be removed from our database.

5.7 Our Apps

5.7.1 As outlined in section 5, when you use Our Apps, your location, name, email address, photos, videos, app interaction data, user generated content, crash logs, diagnostics, app performance and app ID may be processed for app functionality, marketing, push notifications and ongoing maintenance.

5.7.2 The user generated content of Our Apps are not controlled by Us and may contain objectionable material which may not be suitable for any child over 4 years old. If you are allowing a child under the age of 13 to use the app on your device, please give the necessary consents prior to passing the device to a child.

5.7.3 Any data you submit will be stored securely in a UK database for a period of 2 years from the time you last used the app after which time it will be securely deleted. If you opt in for marketing via the app we will continue to process your data for this purpose until you opt out.

5.8 How and Where Do We Store You Data?

5.8.1 We only keep your personal data for as long as We need to in order to use it as described above in section 6, and/or for as long as We have your permission to keep it.

5.8.2 Some of your data may be stored outside of the UK or European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). You are deemed to accept and agree to this by using Our Site or Our Apps and submitting information to Us. If We do store data outside the EEA, We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR.

5.8.3 Data security is very important to Us, and to protect your data We have taken suitable measures to safeguard and secure data collected through Our site or Our Apps.

5.9 Do We Share Your Data?

5.9.1 We may share your data with other companies in Our group for marketing purposes to keep you informed of any other events or activities we feel may be relevant to you. This includes Our holding company and its subsidiaries.

5.9.2 We may sometimes contract with third parties to supply products and services to you on Our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising, and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.

5.9.3 We may compile statistics about the use of Our Site or Our Apps including data on traffic, usage patterns, user numbers, sales, and other information. All such data will be anonymised and will not include any personally identifying data, or any anonymised data that can be combined with other data and used to identify you. We may from time to time share such data with third parties such as prospective investors, affiliates, partners, and advertisers. Data will only be shared and used within the bounds of the law.

5.9.4 We may sometimes use third party data processors that are located outside of the UK or European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland, and Liechtenstein). Where We transfer any personal data outside the EEA, We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the UK and under the GDPR.

5.9.5 In certain circumstances, We may be legally required to share certain data held by Us, which may include your personal data, for example, where We are involved in legal proceedings, where We are complying with legal requirement , a court order, or a governmental authority.

5.10 What Happens If Our Business Changes Hands?

5.10.1 We may, from time to time, expand or reduce Our business and this may involve the sale and/or the transfer of content. Any personal data that you have provided will, where it is relevant to any part of Our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Privacy Policy, be permitted to use that data only for the same purposes for which it was originally collected by Us.

5.10.2 In the event that any of your data is to be transferred in such a manner, you will not be contacted in advance and informed of the changes. When contacted you will be given the choice to have your data deleted or withheld from the new owner or controller.

5.11 How Can You Control Your Data?

5.11.1 When you submit personal data via Our Site or Our Apps, you may be given options to restrict Our use of your data. In particular, We aim to give you strong controls on Our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from Us which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details.

11.2 You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receiving.

5.12 Your Right to Withhold Information

5.12.1 You may access certain areas of Our Site or Our Apps without providing any data at all. However, to use all features and functions available on Our Site you may be required to submit or allow for the collection of certain data.

5.13 How Can You Access Your Data?

You have the right to ask for a copy of any of your personal data held by Us (where such data is held). Under the GDPR, no fee is payable and We will provide any and all information in response to your request free of charge. Please contact Us for more details at enquiries@famemediatech.com, or using the contact details below in section 13.

5.14 Contacting Us

If you have any questions about Our Site, Our Apps or this Privacy Policy, please contact Us by email at enquiries@famemediatech.com. Please ensure that your query is clear, particularly if it is a request for information about the data We hold about you (as under section 12, above).

5.15 Changes to Our Privacy Policy

We may change this Privacy Policy from time to time (for example, if the law changes). Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site or Our Apps following the alterations. We recommend that you check this page regularly to keep up-to-date.

6. More Information

For more information contact us.

7. Updates to this policy

We may make changes to this policy. If we do make any significant changes to the way we collect and process your personal information we will make this clear on the Wingham Wildlife Park website, or by contacting you directly. 

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026