Privacy Policy
Last updated: [ 29/10/2025 ]
Version: 4.1

​

1. Introduction

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our website, book activities with us, subscribe to communications, or otherwise interact with us. It also explains your rights in relation to your personal data and how to exercise them.

​

2. Who we are

“Quex Adventure Farm Park” is the data controller for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.
Our contact details:

• Address: Quex Park, Eastry, Sandwich, Kent CT13 0BH, United Kingdom.

• Email: info@quexactivitycentre.com 

• Telephone: 01843 866023
  If you have any questions about this policy or how we handle your personal data, you can contact us at the above.

• ​

3. What personal data we collect

We may collect and process the following types of personal data when you visit our website or interact with us:

3.1 Personal identification and contact information

• Name, title, postal address, email address, telephone number.

• For bookings: children’s names and ages (where required to provide activities).

• Payment information (via a payment processor; we do not store full credit‐card details unless explicitly stated).

3.2 Website / online information

• IP address, device type, browser type, operating system, referring URL.

• Cookies and similar technologies (see our Cookie Policy for details).

• Information about how you use our website (pages visited, length of visit, links clicked).

3.3 Communications & preferences

• Your communication preferences (for example opting in to newsletters or marketing communications).

• Any correspondence you send us (via email, web form or telephone) including your enquiry, feedback or complaint.

3.4 Other data

• Where applicable, we may collect special category data (for example allergies or accessibility requirements) if you provide it to us in the context of a booking or event.

• CCTV / video footage on site (for safety / security) — where applicable and under lawful basis.

• ​

4. Why we collect your personal data and our lawful bases

We collect and process personal data for a number of purposes and under particular lawful bases, including:

• To perform our contract with you (for example to process and manage your booking, to provide the Park’s services).

• To comply with legal obligations (for example health & safety, CCTV obligations, record-keeping).

• For our legitimate interests (for example maintaining and improving our website, analysing usage, marketing our services) except where those interests are overridden by your rights.

• Where you have given your consent (for example to receive our marketing emails) — you may withdraw your consent at any time.

 

5. How we use your personal data

Some of the ways we use your data include:

• To process your booking and payment.

• To send you confirmations, reminders, updates or follow-up communications about your booking.

• To respond to your enquiries, feedback or complaints.

• To send you marketing communications (only if you have consented to receive them or we have another lawful basis).

• To operate and improve our website, monitor visitor behaviour, detect fraud or misuse.

• To provide, maintain and secure our facilities (including CCTV for safety).

• To comply with legal or regulatory obligations (for example emergency services, accident reporting, inspections).

 

6. Who we share your personal data with

We may share your personal data with:

• Service providers and processors (for example payment processors, IT/hosting providers, email marketing platforms).

• Third-party contractors working on our behalf (for example event organisers, photography services) where necessary to fulfil a booking or service.

• Authorities and regulators, if required by law (for example law enforcement or regulatory bodies).

• In the event of a reorganisation, merger, sale or acquisition of the Park/business, your personal data may be transferred as part of that process (we will take appropriate safeguards).

We will always ensure any third party we share data with provides adequate protection and acts only on our instructions.

 

7. International transfers

If we transfer your personal data outside the UK (for example to a service provider based outside the UK), we will ensure it is subject to appropriate safeguards (for example standard contractual clauses) and that your data rights remain protected.

 

8. Data retention – how long we keep your data

We will retain your personal data for as long as is necessary for the purposes for which it was collected (including to fulfil bookings, maintain customer records, comply with legal obligations). Once no longer needed, your data will be securely deleted or anonymised.

In particular:

• Booking and payment records: retained for [insert number] years to meet financial and audit obligations.

• Marketing preferences: until you withdraw consent or request deletion.

• Website analytics and logs: retained for a period of up to [insert number] months/years as part of our website management policy.

 

9. Your rights under data protection law

Under the UK GDPR you have the following rights in relation to your personal data:

• Right to be informed—about how we use your data (this policy).

• Right of access—to obtain a copy of your personal data we hold.

• Right to rectification—to correct inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”)—in certain circumstances you can request deletion of your data.

• Right to restrict processing—to ask us to restrict how we use your data.

• Right to data portability—to receive your data in a structured, commonly used format (where applicable).

• Right to object—to object to our processing of your data on grounds relating to your particular situation.

• Rights in relation to automated decision-making and profiling—if applicable, you may challenge decisions based solely on automated processing.

If you wish to exercise any of these rights, please contact us using the details in Section 2. We may require verification of your identity before responding. We will respond within the time limits required by law (typically one month).

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (“ICO”) if you believe we have not complied with your rights or data protection law. ICO+2lawbite.co.uk+2

 

10. Cookies and similar technologies

Our website uses cookies and similar tracking technologies. Some are strictly necessary for the website to function. Others help us improve our website or deliver marketing. You will be informed of non-essential cookies and asked for consent where required. For full details see our separate Cookie Policy. ICO+1

 

11. Security of your personal data

We maintain appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, alteration or disclosure. For example: password protection, access controls, encryption (where applicable), secure servers, regular reviews and audits.

While we strive to protect your data, no system is completely secure—if you have reason to believe your interaction with us is no longer secure, please contact us immediately.

 

12. Children

Our services are family-friendly and may be used by children (for example bookings for children’s activities). Where we process personal data of children, we take extra care and ensure we have appropriate lawful basis and parental/guardian consent where required. If you are a parent or guardian and believe we have collected personal data of a child without consent, please contact us so we can correct or delete the data.

 

13. Changes to this policy

We may update this Privacy Policy from time to time (for example when legal or business changes require it). We will post any updated version on this website and amend the “Last updated” date. We encourage you to check back regularly. Any significant changes will be brought to your attention where appropriate.

 

14. Contact us

If you have any questions, comments or requests regarding this Privacy Policy or how we process your personal data, please contact us at:

• Email: info@quexactivitycentre.com 

• Telephone: 01843 866023

• Address: Quex Park, Eastry, Sandwich, Kent CT13 0BH, United Kingdom