Privacy

Cedar Cove Resort is responsible for the personal information used to manage your booking. Parkstack provides the ticketing system and processes that information for the park. Stripe handles card payments. Parkstack never stores your full card number.

Why it is used, and the legal basis for each use: to provide your booking, send your tickets and manage cancellations and refunds, because it is needed for your contract with the park; to keep financial and tax records, because the law requires it; and to answer messages and enquiries, prevent fraud and keep the ticketing secure, because the park has a legitimate interest in running its bookings properly and safely. Your information is not sold or used for advertising.

Messages sent through the Contact page are emailed to the park and are not kept by Parkstack.

Who else handles it, on the park's behalf: Stripe takes card payments (Ireland and the United States); Parkstack runs the ticketing and website using Railway for hosting (the Netherlands), Neon for its database (London), Cloudflare to deliver the website and store files (a worldwide network) and Resend to send emails (Ireland). Information sent to the European Economic Area is covered by the UK's adequacy regulations. Where it goes to the United States, it is protected by the UK–US data bridge or the UK's approved international data transfer clauses.

Contact details for an incomplete checkout are removed after 30 days. For a paid order, direct contact details are removed 24 months after the purchase and any booked visit. The original order and payment references may be kept for up to seven years for financial records and disputes. After that, Parkstack keeps only de-identified ticket counts, dates and financial totals for historical reporting.

If you buy an annual pass, the name of each person on it, and a photo of them if one is added, are used to check the pass at the gate, because that is needed to provide it. Photos are seen only by the park's staff, are never shown publicly, and are deleted 30 days after the pass ends or is refunded.

You can ask to access, correct or delete information, to receive a copy in a portable format, or to object to or restrict its use, using the Contact page. Some information may need to be kept where the law requires it or while a payment dispute is open.

If you are unhappy with how your information has been used, please tell Cedar Cove Resort first, using the Contact page and saying it is a data protection complaint. The park will acknowledge it within 30 days and tell you the outcome without undue delay. If you are still unhappy, you can complain to the Information Commissioner’s Office.