1. INTRODUCTION
This Privacy Policy sets out how Jack in the Box Club Limited collects, uses, stores and protects your personal data. We are committed to protecting your privacy and handling your personal data in an open and transparent way.
Jack in the Box Club Limited is the data controller for the personal data we collect about you. We are registered in England, Company No. 03783983.
If you have any questions about this policy or how we handle your personal data, please contact us at:
Jack in the Box Club Limited
Email: admin@jackintheboxclub.co.uk
Website: www.jackintheboxclub.co.uk
2. WHAT PERSONAL DATA WE COLLECT
We may collect and process the following personal data about you:
Information you provide directly:
- Name, address, email address and telephone number
- Date of birth (where required for age-restricted activities)
- Payment information – note we do not store card details; payments are processed securely via our payment provider
- Booking details and transaction history
- Information provided when completing waivers or registration forms
- Communications you send us including emails, enquiries and feedback
- Survey responses (where you choose to participate)
Information we collect automatically:
- Details of your visits to our website including pages viewed and resources accessed
- Technical information including IP address, browser type and operating system
- Cookie data – see our Cookie Policy in Section 9
- CCTV footage. We operate CCTV cameras within and around the Jack in the Box Club premises for the purposes of security, safety and the prevention and detection of crime. CCTV images may capture your image during your visit.
3. HOW WE USE YOUR PERSONAL DATA
We use your personal data for the following purposes:
- To process and manage your bookings and payments
- To send you booking confirmations and related communications
- To administer your account on our booking platform
- To comply with our legal and regulatory obligations including health and safety requirements
- To maintain safety records in accordance with our legal obligations
- To monitor the security and safety of our premises and customers through CCTV surveillance
- To send you marketing communications where you have given us permission to do so
- To improve our services and website through analysis of usage data
- To respond to your enquiries and complaints
- To conduct research and surveys (participation is always optional)
4. LEGAL BASIS FOR PROCESSING
We process your personal data on the following legal bases under UK GDPR:
- Contract: processing is necessary to fulfil your booking and deliver the services you have requested
- Legal obligation: processing is necessary to comply with our legal and regulatory obligations including health and safety law
- Legitimate interests: processing is necessary for our legitimate business interests, including improving our services and preventing fraud, where these interests are not overridden by your rights
- Consent: where you have given us clear consent to process your data for a specific purpose such as receiving marketing communications
5. WHO WE SHARE YOUR DATA WITH
We will never sell your personal data to third parties. We only share your personal data in the following limited circumstances:
- Booking platform provider: who stores booking and customer data securely on our behalf
- Payment processors: to process card payments securely. We do not store card details
- Legal and regulatory authorities: where we are required to do so by law
- Law enforcement agencies: CCTV footage may be shared with the police or other law enforcement agencies where required for the prevention or detection of crime or in connection with legal proceedings
- Professional advisors: including solicitors, accountants and insurers where necessary
All third parties with whom we share data are required to handle it securely and in accordance with UK data protection law.
6. HOW LONG WE KEEP YOUR DATA
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected including:
- Booking and transaction records: 7 years (in accordance with HMRC requirements)
- Safety and incident records: minimum 3 years (or longer where required by law)
- CCTV footage: retained for a maximum of 21 days unless required for an ongoing investigation or legal proceedings, in which case it will be retained for as long as necessary
- Customer account data: we retain your account data for as long as you remain a customer. If you would like your account data removed, please contact us and we will action this promptly, subject to any legal obligations to retain certain records
- Marketing consent records: until you withdraw consent
If you wish to have your personal data removed from our systems before these periods expire, please contact us and we will action this promptly, except where we are required by law to retain it.
7. YOUR RIGHTS
Under UK GDPR you have the following rights in relation to your personal data:
- Right of access: you have the right to request a copy of the personal data we hold about you
- Right to rectification: you have the right to request that we correct any inaccurate personal data we hold about you
- Right to erasure: you have the right to request that we delete your personal data in certain circumstances
- Right to restrict processing: you have the right to request that we restrict how we use your personal data in certain circumstances
- Right to data portability: you have the right to receive your personal data in a structured, commonly used format
- Right to object: you have the right to object to our processing of your personal data in certain circumstances, including for direct marketing
- Right to withdraw consent: where we process your data on the basis of consent, you have the right to withdraw that consent at any time
To exercise any of these rights, please contact us at admin@jackintheboxclub.co.uk. We will respond to your request within one month. There is no charge for making a request.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.
8. DATA SECURITY
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. These include:
- Secure encrypted servers for storing all customer data
- Secure encrypted payment processing – we do not store card details
- Password protection for all customer accounts
- Regular review of our data security practices
Where you have been provided with a password, user ID or PIN to access parts of our website, you are responsible for keeping these confidential. Please do not share them with anyone.
9. COOKIE POLICY
Our website uses cookies to help personalise your online experience and to improve our services. A cookie is a small text file placed on your device by our website server.
We use the following types of cookies:
- Essential cookies: necessary for the website to function correctly, including enabling you to make bookings
- Analytics cookies: help us understand how visitors use our website so we can improve it
- Marketing cookies: used by Google Ad Services to monitor the success of advertising campaigns and improve your browsing experience
You can accept or decline non-essential cookies through our cookie consent banner when you first visit our website. Please note that declining certain cookies may affect your ability to use some features of our website. For more information about how Google uses cookies, please visit www.google.com/policies/privacy.
10. CHILDREN’S PRIVACY
We are committed to protecting the privacy of children. We do not knowingly collect personal data directly from children. Where we collect personal data about children (such as for booking purposes), this is provided by and collected from the parent or guardian making the booking, who is responsible for ensuring the information is accurate.
11. MARKETING COMMUNICATIONS
We will only send you marketing communications where you have given us your consent to do so. You can withdraw your consent and unsubscribe from marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email
- Contacting us at admin@jackintheboxclub.co.uk
Withdrawing your consent to receive marketing communications will not affect the lawfulness of any processing carried out before you withdrew consent.
12. THIRD PARTY WEBSITES
Our website may contain links to third party websites. This Privacy Policy applies only to our website and services. We are not responsible for the privacy practices of third party websites and encourage you to read their privacy policies before providing any personal data.
13. CHANGES TO THIS POLICY
We reserve the right to amend this Privacy Policy at any time to better protect your personal data and to comply with prevailing legal regulations. The current version will always be available on our website. We will notify you of any significant changes by email where we hold your contact details.
14. CONTACT US
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Jack in the Box Club Limited
Email: admin@jackintheboxclub.co.uk
Website: www.jackintheboxclub.co.uk
Registered in England . Company No. 03783983
