Privacy Policy

Who We Are

This Privacy Policy explains how Santa's Dinner Club collects, uses and protects your personal data when you interact with our website and services.

We are the data controller responsible for your personal data. We are registered with the UK Information Commissioner's Office (ICO) in accordance with UK GDPR and the Data Protection Act 2018.

What Personal Data We Collect

Waiting list and ticket interest sign-ups

When you sign up to our waiting list or ticket notification list, we collect:

• Your email address

We do not collect your name, phone number or any other personal data at this stage.

Ticket bookings

When you purchase tickets for Santa's Dinner Club, we may collect:

• Your full name
• Email address
• Billing address
• Payment information (processed securely by our payment provider — we do not store card details)
• Dietary requirements and accessibility needs (where provided voluntarily)
• The names and ages of children in your party (where required for seating and catering purposes)

Website usage data

We may collect anonymised data about how visitors use our website. This data is aggregated and cannot be used to identify you personally.

How We Use Your Personal Data

We use your personal data only for the purposes for which it was collected:

• To send you a notification when tickets go on sale (waiting list sign-ups)
• To process your ticket booking and confirm your reservation
• To contact you about your booking, including any changes to dates, times or arrangements
• To accommodate dietary requirements and accessibility needs
• To send you relevant information about the event you have booked
• To comply with our legal obligations

Our Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Consent — for waiting list sign-ups and marketing communications. You can withdraw your consent at any time by clicking the unsubscribe link in any email we send you.
• Contract — for processing ticket bookings, as this is necessary to fulfil our agreement with you.
• Legitimate interests — for basic website analytics to help us improve our service.
• Legal obligation — where we are required to process your data by law.

Who We Share Your Data With

We do not sell your personal data. We share it only with trusted third-party service providers who help us deliver our services:

• Mailchimp (The Rocket Science Group LLC) — our email marketing platform, used to manage waiting list sign-ups and send ticket notifications. Mailchimp is certified under the EU-US Data Privacy Framework and processes data in accordance with UK GDPR. mailchimp.com/legal/privacy
• Netlify — our website hosting provider. Netlify processes limited technical data to serve our website. netlify.com/privacy
• Payment processor — when tickets go on sale, payments will be processed by a third-party payment provider. This will be detailed in our full Terms and Conditions at the time of ticket launch.

All third-party providers are contractually required to keep your data secure and to use it only for the purposes we specify.

How Long We Keep Your Data

• Waiting list email addresses are kept until: (a) you unsubscribe; or (b) tickets for the December 2026 season have gone on sale and a notification has been sent, after which we will delete or anonymise your data within 30 days unless you have made a booking.
• Booking data is retained for 7 years after your event date in accordance with our legal and financial obligations.
• Website analytics data is anonymised and retained for up to 12 months.

Your Rights

Under UK GDPR, you have the following rights:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct any inaccurate data we hold.
• Right to erasure — you can ask us to delete your personal data, subject to certain legal exceptions.
• Right to restrict processing — you can ask us to limit how we use your data.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to us processing your data for marketing purposes at any time.
• Right to withdraw consent — where we rely on consent, you can withdraw it at any time.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113.

Cookies

Our holding page currently does not use cookies or tracking technologies. When our full website launches, we will update this policy to describe any cookies in use and obtain your consent where required.

Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect it from unauthorised access, loss or misuse. All data is transmitted over secure HTTPS connections. Our third-party processors are required to maintain equivalent security standards.

In the unlikely event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where appropriate, notify you directly.

Children's Data

Santa's Dinner Club is a family event. Where you provide us with information about children in your party (such as ages or dietary requirements), this is provided by you as their parent or guardian. We process this data solely for the purpose of accommodating your family's needs at the event. We do not knowingly collect personal data directly from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with an updated date at the top of this document. For significant changes, we will notify waiting list subscribers by email.

Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: