Privacy Policy

Last updated: 1 October 2026

Lindum Leisure Limited (“Lindum Leisure”, “we”, “our” or “us”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit one of our venues, use our websites, make a booking, purchase our products or services, contact us, interact with us online, connect to guest Wi-Fi or otherwise engage with us.

This Privacy Policy applies to personal information collected both online and offline by Lindum Leisure Limited and, where applicable, the venues and businesses operated by us.

We process personal information in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and the Data (Use and Access) Act 2025, as applicable.

For the purposes of applicable data protection legislation, Lindum Leisure Limited is the Data Controller of the personal information described in this Privacy Policy, unless otherwise stated.

1. Who we are

Lindum Leisure Limited

Company number: 11983959

Registered office:

287 High Street
Lincoln
LN2 1AW
United Kingdom

Lindum Leisure operates hospitality, entertainment and leisure businesses and venues.

Depending on how you interact with us, you may provide your personal information directly to Lindum Leisure Limited, to one of our venues, or to a third-party service provider acting on our behalf.

If you have any questions about this Privacy Policy or how we use your personal information, please contact:

Email: bookings@carousellincoln.co.uk

2. What is personal information?

Personal information is information that relates to an identified or identifiable individual.

This can include information that identifies you directly, such as your name, email address or telephone number, as well as information that could identify you when combined with other information.

We may also collect information that does not identify you personally, such as aggregated statistics about how customers use our websites and venues.

Where information has been genuinely anonymised so that you can no longer be identified, it is no longer personal information for data protection purposes.

3. Information we collect

Depending on how you interact with Lindum Leisure and our venues, we may collect the following information.

Contact information

This may include:

  • Name
  • Email address
  • Telephone number
  • Postal address
  • Other contact details you choose to provide

Booking and transaction information

This may include:

  • Booking details
  • Event or activity information
  • Date and time of your visit
  • Products and services purchased
  • Transaction information
  • Purchase history
  • Booking history
  • Refunds or cancellations
  • Customer service correspondence relating to bookings or purchases

Age and identification information

Where necessary, we may collect:

  • Date of birth
  • Age
  • Information required to verify your age
  • Information contained within identification documents

This may be necessary for age-restricted products, events or activities, licensing requirements, venue policies, promotions, competitions, bookings or other legitimate purposes.

We will only request identification information where there is a reasonable need to do so.

Marketing and preferences

We may collect information about:

  • Whether you have opted in to receive marketing
  • Your communication preferences
  • Which venues, brands or types of communication you have selected
  • Offers or promotions you have interacted with
  • Your interactions with our marketing communications
  • Your preferences where you have chosen to provide them

Customer interactions

We may collect information you provide when you:

  • Contact us
  • Make an enquiry
  • Complete an online or physical form
  • Complete a survey
  • Leave feedback or a review
  • Enter a competition
  • Participate in a promotion
  • Contact us through social media
  • Communicate with members of our team

Photographs and video

Photography and video recording may take place at our venues.

This may include CCTV and photographs or video taken during events, performances or other activities.

Further information is provided in section 14.

Technical and online information

When you use one of our websites, we may collect information such as:

  • IP address
  • Device type
  • Browser type and version
  • Operating system
  • Approximate location derived from technical information
  • Pages visited
  • Links clicked
  • Website interactions
  • Referral information
  • Date and time of visits
  • Information about how you use our websites

Some of this information may be collected using cookies and similar technologies.

Guest Wi-Fi information

Where guest Wi-Fi is available at one of our venues, we may collect information when you register for or use the service.

Depending on how the service is configured, this may include:

  • Name
  • Email address
  • Telephone number
  • Device information
  • IP address
  • Connection information
  • Usage information
  • Marketing preferences

The precise information collected will depend on the Wi-Fi service and technology used at the relevant venue.

4. How we collect your information

We may collect personal information:

  • Directly from you when you provide it to us.
  • When you make a booking or purchase.
  • When you contact us.
  • When you register for guest Wi-Fi.
  • When you subscribe to marketing communications.
  • When you enter a competition or promotion.
  • When you complete a survey or provide feedback.
  • When you interact with one of our websites.
  • Through cookies and similar technologies.
  • Through social media platforms.
  • Through booking, ticketing, payment or other service providers.
  • Through marketing and customer relationship management platforms.
  • Through CCTV, photography or video recording at our premises.
  • From other organisations where they are lawfully entitled to provide us with your information.

Where we obtain personal information from another organisation, we will take reasonable steps to ensure that the information has been obtained and provided to us lawfully.

Where required, we will provide you with appropriate privacy information when we first obtain your information or within the applicable legal timeframe. The ICO requires privacy information to explain, among other things, the purposes of processing, retention periods and who personal information is shared with.

5. How we use your personal information

We may use your personal information for the following purposes.

Providing our services

To:

  • Process bookings and enquiries.
  • Process purchases and payments.
  • Provide products and services.
  • Manage events and activities.
  • Communicate with you about bookings and purchases.
  • Process refunds, cancellations or amendments.
  • Provide customer support.

Operating and improving our business

To:

  • Improve our products and services.
  • Understand how customers use our venues and services.
  • Analyse customer behaviour and preferences.
  • Improve our websites and digital services.
  • Monitor and improve customer experience.
  • Develop new products, services and events.
  • Conduct customer research and surveys.

Marketing

To:

  • Send marketing communications where we are legally permitted to do so.
  • Tell you about events, offers, promotions, products and services.
  • Understand the effectiveness of our marketing.
  • Improve the relevance of our marketing communications.
  • Manage marketing preferences and unsubscribe requests.

Security and fraud prevention

To:

  • Protect customers, employees and visitors.
  • Operate CCTV and other security systems.
  • Prevent and detect fraud.
  • Prevent and investigate crime.
  • Protect our property and premises.
  • Enforce venue policies and terms.
  • Investigate incidents or complaints.

Legal and regulatory purposes

To:

  • Comply with our legal and regulatory obligations.
  • Comply with licensing requirements.
  • Respond to lawful requests from authorities.
  • Establish, exercise or defend legal claims.
  • Maintain appropriate business records.

6. Our lawful bases for using your information

We will only process your personal information where we have a lawful basis to do so.

Depending on the circumstances, we may rely on one or more of the following lawful bases.

Contract

We may process your personal information where it is necessary to enter into or perform a contract with you.

For example, this may apply when you make a booking or purchase a product or service.

Legal obligation

We may process your personal information where necessary to comply with a legal or regulatory obligation.

Legitimate interests

We may process personal information where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

  • Operating and managing our business.
  • Improving our products and services.
  • Understanding customer behaviour.
  • Protecting customers, staff and premises.
  • Preventing fraud and crime.
  • Managing customer relationships.
  • Measuring and improving marketing.
  • Sending certain direct marketing communications where legally permitted.

Where we rely on legitimate interests, we will consider the impact of the processing on your rights and ensure that our interests are not overridden by your interests or fundamental rights and freedoms.

Consent

We may rely on your consent where required by law.

For example, this may apply to certain marketing communications or the use of certain non-essential cookies and similar technologies.

Where we rely on consent, you can withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew your consent.

Vital interests

In limited circumstances, we may process personal information where necessary to protect someone’s vital interests.

7. Marketing communications

We may send you marketing communications about Lindum Leisure and our venues, including information about:

  • Events
  • Offers
  • Promotions
  • Food and drink
  • Activities
  • Products and services
  • Competitions
  • News relating to our venues and brands

Where required by law, we will obtain your consent before sending marketing communications by email, SMS or other electronic means.

In certain circumstances, we may send marketing communications to existing customers without obtaining separate consent where the requirements of the applicable “soft opt-in” rules are satisfied.

We will provide an appropriate opportunity to opt out when collecting your details and in subsequent marketing communications where required.

You can unsubscribe from marketing communications at any time.

Marketing emails will include an unsubscribe mechanism, and you can also contact us directly to change your marketing preferences.

Please note that opting out of marketing does not prevent us from sending necessary service communications. For example, we may still contact you about an existing booking, purchase, payment or other service you have requested.

8. Marketing across our venues and brands

Lindum Leisure operates and may operate a number of different venues and leisure brands.

Where legally permitted, we may use customer information to communicate information about other venues or brands operated by Lindum Leisure.

We will only do this where we have an appropriate lawful basis to do so and where the relevant marketing and data protection requirements have been met.

Where marketing consent is required, we will seek the appropriate consent and provide you with a clear opportunity to manage your preferences.

Your marketing preferences may therefore include the ability to choose which types of communications, venues or brands you wish to hear from.

You can change your preferences or unsubscribe from marketing communications at any time.

9. Profiling and personalised marketing

We may use information about your interactions with Lindum Leisure and our venues to understand customer preferences and improve the relevance of our communications and advertising.

This may include analysing information such as:

  • Previous bookings or purchases.
  • Events attended.
  • Offers used.
  • Marketing interactions.
  • Website interactions.
  • General customer preferences.

Where we use profiling or similar processing for direct marketing, we will do so in accordance with applicable data protection law.

You have the right to object to the processing of your personal information for direct marketing purposes, including profiling related to direct marketing.

10. Who we share your information with

We may share your personal information with trusted third parties where necessary to operate our business and provide our services.

These may include:

Booking providers

Where you make a booking or purchase through a third-party platform, your information may be shared with that provider so that the booking or transaction can be processed.

Payment providers

Payment and transaction information may be processed by third-party payment providers.

We do not generally have access to your full payment card details where these are processed directly by a payment provider.

Marketing and customer relationship management providers

We may use third-party platforms to manage customer information and send marketing communications.

These providers may process information such as your name, contact details, marketing preferences and interactions with our communications.

Guest Wi-Fi providers

Where you use guest Wi-Fi at one of our venues, your information may be processed by the provider operating the Wi-Fi service on our behalf.

Website and technology providers

We may use third-party providers for:

  • Website hosting.
  • Website development.
  • Analytics.
  • IT support.
  • Data storage.
  • Cybersecurity.
  • Digital marketing.
  • Advertising.

Authorities and law enforcement

We may disclose personal information where we are required or permitted to do so by law, including to:

  • Police.
  • Licensing authorities.
  • Regulators.
  • Courts.
  • Government agencies.
  • Other authorised bodies.

We do not sell your personal information to third parties.

Where third parties process personal information on our behalf, we will take appropriate steps to ensure that suitable contractual and security arrangements are in place.

11. Sharing information within the Lindum Leisure group

Where applicable, personal information may be shared between companies or businesses within the wider Lindum Leisure group.

This may be necessary for purposes such as:

  • IT and systems administration.
  • Business administration.
  • Financial administration.
  • Customer service.
  • Security.
  • Fraud prevention.
  • Business reporting and analysis.
  • Marketing, where legally permitted.

Where a separate company within the group acts as a Data Controller for a particular processing activity, the relevant company will be responsible for that processing.

Where information is shared for direct marketing purposes, we will ensure that the appropriate legal requirements are met.

12. International transfers

Some of our third-party service providers may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK to a country that does not provide an adequate level of protection under UK data protection law, we will ensure that an appropriate legal safeguard is in place.

Depending on the circumstances, this may include:

  • A UK adequacy decision.
  • The UK International Data Transfer Agreement (IDTA).
  • The UK Addendum to the EU Standard Contractual Clauses.
  • Another lawful transfer mechanism permitted under applicable law.

We will take appropriate steps to ensure that your personal information remains protected when transferred internationally.

13. Cookies and similar technologies

Our websites may use cookies and similar technologies.

Cookies are small files stored on your device which allow a website to recognise your device and remember certain information.

We may use different categories of cookies and similar technologies, including:

Strictly necessary cookies

These are required for our websites or services to function properly.

Functional cookies

These may remember choices or preferences and improve your experience.

Analytics cookies

These help us understand how visitors use our websites, such as which pages are visited and how users interact with them.

Marketing and advertising technologies

These may be used to:

  • Measure advertising effectiveness.
  • Understand interactions with advertising.
  • Measure conversions.
  • Build advertising audiences.
  • Personalise advertising where permitted.

We will only use cookies and similar technologies in accordance with applicable law.

Following changes introduced by the Data (Use and Access) Act 2025, certain limited types of cookies may fall within additional exemptions from the consent requirement. However, this does not mean that all analytics or marketing cookies can be used without consent.

Where consent is required, we will provide an appropriate mechanism for you to accept or reject non-essential cookies.

You can also manage cookies through your browser settings, although disabling certain cookies may affect website functionality.

14. CCTV, photography and video

CCTV may operate at our venues for purposes including:

  • Safety and security.
  • Crime prevention and detection.
  • Incident investigation.
  • Protection of customers, employees and property.

CCTV footage may be accessed by authorised personnel and, where necessary, disclosed to law enforcement agencies, insurers, professional advisers or other authorised parties.

Photography and video recording may also take place at our venues, including during events and activities.

Photography or video may be used for purposes including:

  • Venue promotion.
  • Social media.
  • Advertising.
  • Website content.
  • Marketing materials.
  • Event documentation.

Where photography or filming is being undertaken for a particular promotional purpose, we will take reasonable steps to make people aware where appropriate.

CCTV and other recordings will be retained only for as long as reasonably necessary for the purpose for which they were collected, subject to legal, regulatory or evidential requirements.

15. Guest Wi-Fi

Where guest Wi-Fi is available at one of our venues, you may be asked to provide certain personal information before accessing the service.

We may use information collected through the Wi-Fi service to:

  • Provide access to the Wi-Fi service.
  • Maintain network security.
  • Monitor and troubleshoot the service.
  • Understand usage of the service.
  • Improve customer experience.
  • Send marketing communications where you have provided the appropriate consent or where another lawful basis applies.

The information collected and processing undertaken may depend on the Wi-Fi provider and configuration used at the relevant venue.

Where a third-party provider processes your information on our behalf, appropriate contractual and data protection arrangements will be put in place.

16. Children and age-restricted services

Some of our venues, products, events and services are subject to age restrictions.

We may collect age or date-of-birth information where necessary to comply with legal requirements, licensing conditions, venue policies or age restrictions.

We do not knowingly use children’s personal information for marketing purposes where doing so would be unlawful.

Where our online services are likely to be accessed by children, we will take appropriate account of their needs when designing our services and processing their personal information.

If you believe that a child has provided us with personal information in circumstances where this was not appropriate, please contact us.

17. How long we retain personal information

We will not retain personal information for longer than is reasonably necessary for the purposes for which it was collected.

Different types of information may therefore be retained for different periods.

Retention periods may depend on:

  • Why the information was collected.
  • Whether we have an ongoing relationship with you.
  • Legal and regulatory requirements.
  • Accounting and financial requirements.
  • Licensing requirements.
  • Whether the information is required to establish, exercise or defend legal claims.
  • Fraud prevention requirements.
  • Our legitimate business needs.

When personal information is no longer required, we will securely delete, destroy or anonymise it where appropriate.

Where you unsubscribe from marketing, we may retain limited information necessary to record your preference and ensure that we do not send you unwanted marketing communications in the future.

18. Security

We take the security of your personal information seriously.

We use appropriate technical and organisational measures designed to protect personal information against:

  • Unauthorised access.
  • Accidental loss.
  • Destruction.
  • Misuse.
  • Alteration.
  • Unauthorised disclosure.

Access to personal information is limited to people who need it for legitimate business purposes.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

If we become aware of a personal data breach, we will assess it and take appropriate action in accordance with applicable data protection law.

19. Your data protection rights

Depending on the circumstances, you may have a number of rights in relation to the personal information we hold about you.

These may include:

Right to be informed

You have the right to clear information about how and why your personal information is being used.

This Privacy Policy provides information about our principal processing activities.

Right of access

You can ask us to confirm whether we process your personal information and request a copy of the information we hold about you.

Right to rectification

You can ask us to correct inaccurate personal information or complete information that is incomplete.

Right to erasure

In certain circumstances, you can ask us to delete your personal information.

This is sometimes known as the “right to be forgotten”.

This right is not absolute and does not apply where we have a lawful reason to retain or continue processing your information.

Right to restrict processing

In certain circumstances, you can ask us to restrict how we use your personal information.

Right to object

You may have the right to object to certain processing, including processing based on legitimate interests.

You have an absolute right to object to the processing of your personal information for direct marketing purposes, including profiling related to direct marketing.

Right to data portability

In certain circumstances, you may have the right to receive personal information you have provided to us in a structured, commonly used and machine-readable format, or ask us to transfer it to another organisation.

Rights relating to automated decision-making

Depending on the circumstances, you may have rights in relation to decisions made solely by automated processing, including profiling, where those decisions have legal or similarly significant effects.

Right to withdraw consent

Where we rely on your consent, you can withdraw your consent at any time.

Withdrawing consent will not affect the lawfulness of processing carried out before you withdrew your consent.

To exercise your rights, please contact:

bookings@carousellincoln.co.uk

We may need to ask you for additional information to verify your identity before dealing with your request.

We will respond to valid requests within the applicable legal timeframe.

20. Complaints

If you have a concern about how we use your personal information, please contact us in the first instance:

Email: bookings@carousellincoln.co.uk

We will take reasonable steps to help you make a complaint and will acknowledge data protection complaints within the timeframe required by applicable law.

The Data (Use and Access) Act 2025 introduced additional requirements concerning the handling of data protection complaints, including acknowledging complaints within 30 days and responding without undue delay.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have handled your personal information.

The ICO is the UK’s independent regulator for data protection and information rights.

21. Third-party websites and services

Our websites, emails, social media channels and other communications may contain links to third-party websites or services.

These websites and services are not controlled by Lindum Leisure and are not covered by this Privacy Policy.

We recommend that you read the privacy policy of any third-party website or service you use.

We are not responsible for the privacy practices, content or security of third-party websites.

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business.
  • Changes to our venues or brands.
  • Changes to our services.
  • Changes to technology.
  • Changes to how we process personal information.
  • Changes to applicable legislation or regulatory guidance.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

Where appropriate, we will take additional steps to notify you of significant changes.

We recommend checking this page periodically to ensure that you are familiar with the latest version.

23. Contact us

If you have any questions about this Privacy Policy, want to exercise your data protection rights, or have a concern about how we use your personal information, please contact:

Lindum Leisure Limited

287 High Street
Lincoln
LN2 1AW
United Kingdom

Email: bookings@carousellincoln.co.uk

You also have the right to contact the:

Information Commissioner’s Office (ICO)

The ICO is the UK’s independent regulator for data protection and information rights.

Further information about your rights and how to make a complaint is available from the ICO.