Privacy Policy

Last updated: October 2026

1. Who We Are

The organisation responsible for your personal information is Frosty's Wonderland Isle of Man Ltd ("we", "us" or "our").

Email: info@frostyswonderland.im

We act as the data controller for personal information collected and used in connection with our website, ticket sales and ice rink operations.

We process personal information in accordance with applicable data protection legislation, including the legislation applicable in the Isle of Man.

2. What Information We Collect

Booking information

When you purchase tickets through our website, we may collect your name, email address, telephone number where requested, billing details where required, booking reference, ticket information, session date and time, ticket quantities and details of booking amendments, cancellations or refund requests.

Payment information

Payments will be processed through the payment provider offered at checkout. We may receive information such as payment status, transaction reference and payment method. Your payment provider may collect and process additional information under its own privacy policy.

We do not intend to store full payment card details on our website.

Website and technical information

When you visit our website, certain technical information may be collected automatically, including your IP address, browser type, device and operating system information, pages visited, website interactions, error logs and security-related information. Cookies and similar technologies may also collect information where applicable.

Enquiries and correspondence

If you contact us by email, telephone or through a website form, we may retain your contact details and the contents of your enquiry to respond to you and maintain appropriate business records.

Accessibility and safety information

If you voluntarily provide information about an accessibility requirement or another matter relevant to participating safely in an ice-skating session, we will use it only as reasonably necessary to respond to your request and arrange your visit. Please avoid providing unnecessary medical or other sensitive information.

3. How We Use Your Information

We may use your personal information for the following purposes:

• To process ticket purchases and manage bookings.
• To issue booking confirmations, tickets and QR codes.
• To send essential information about your booked session, including changes or cancellations.
• To process eligible booking amendments and refunds.
• To respond to customer questions, feedback and complaints.
• To manage accessibility requests where applicable.
• To maintain appropriate financial, accounting and business records.
• To protect our website, customers, staff and visitors.
• To investigate suspected fraud, misuse or security incidents.
• To understand website usage and improve our services using Google Analytics, subject to applicable cookie consent requirements.
• To comply with applicable legal and regulatory obligations.

4. Our Lawful Bases for Processing

We must have a lawful basis for processing personal information. Depending on the circumstances, we may rely on the following:

• Contract: To complete your ticket purchase, provide your tickets, administer your booking and deliver the service you have requested.
• Legal obligation: To comply with applicable accounting, tax, regulatory or other legal requirements.
• Legitimate interests: To maintain website security, prevent fraud, respond to enquiries and improve our services, where those interests are not overridden by your rights.
• Consent: Where required, such as for non-essential cookies, certain analytics technologies or promotional photography.
• Other applicable legal grounds: Where necessary and permitted by law, such as protecting someone's vital interests.

Where we rely on consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Booking Emails and Communications

We use your contact details to send communications necessary to manage your booking and visit. These may include booking confirmations, tickets, QR codes, payment-related notifications, session changes, cancellations and responses to your enquiries.

We do not currently plan to send email marketing or promotional newsletters. Your booking does not automatically subscribe you to marketing communications.

If our communication practices change in the future, we will comply with applicable data protection and electronic marketing requirements.

6. Who We Share Your Information With

We do not sell your personal information.

We may share personal information with service providers where necessary to operate our website, manage bookings and provide our services. These may include:

• Website hosting and technical providers: To host, maintain, secure and support our website.
• WordPress and WooCommerce: To support ticket purchases, order management and related website functions.
• Booking and ticketing services: Where additional booking or ticketing extensions are used, to generate, deliver and validate bookings and tickets.
• Payment providers: To process transactions, verify payments, manage refunds and help prevent fraud. The provider will be identified in the checkout process once selected.
• Google Analytics: To help us understand how visitors use our website and improve its performance. Depending on our configuration, analytics data may include pages visited, interactions, device and browser information and online identifiers.
• Professional advisers: Such as accountants, legal advisers and insurers, where necessary.
• Authorities and law enforcement: Where disclosure is required by law or is otherwise lawful and necessary.

Our providers may process information on our behalf or act as separate controllers for particular services. Their processing is subject to their respective roles, contractual arrangements and privacy policies.

We aim to share only the information reasonably necessary for the relevant purpose.

7. International Transfers

Some of our website, payment, analytics, email or other service providers may process personal information outside the Isle of Man.

Where personal information is transferred internationally, we will take steps to ensure that the transfer complies with applicable data protection legislation and that appropriate safeguards are in place where required.

Further information about relevant safeguards can be requested by contacting us.

8. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, taking account of legal, accounting, operational and security requirements.

• Booking and transaction records: Retained for the period necessary to administer bookings, handle disputes and meet accounting and legal requirements.
• Customer correspondence: Retained for as long as necessary to respond to enquiries, manage complaints and maintain appropriate records.
• Technical and security logs: Retained for a period appropriate to the relevant security, troubleshooting or operational purpose.
• Analytics information: Retained in accordance with our analytics configuration and the retention settings available in Google Analytics.
• Accessibility or incident information: Retained only as necessary for the relevant arrangements, incident management, legal claims or applicable obligations.

When information is no longer required, we will take reasonable steps to delete it or anonymise it securely, unless we are legally required or otherwise lawfully permitted to retain it.

9. Cookies, Google Analytics and Similar Technologies

Our website may use essential cookies and other technologies to support website functionality and understand how visitors use our services.

Essential cookies

These may be necessary for features such as the shopping basket, checkout, booking functions and website security.

Google Analytics

We intend to use Google Analytics to understand how visitors interact with our website, including which pages are visited and how the website is used. This information helps us assess website performance and improve the visitor experience.

Depending on our configuration, Google Analytics may collect information such as online identifiers, IP-related information, browser and device information, pages viewed and interactions with the website.

Where consent is required, Google Analytics and associated non-essential analytics cookies will not be activated until you have given the necessary consent. We will configure the service appropriately and apply the safeguards required by applicable law.

Managing cookies

Our website should provide a way to manage non-essential cookies where required. You may also be able to control cookies through your browser settings. Blocking essential cookies may affect the operation of the booking system.

Cookies and tracking technologies used on the website may change as we add or update website features and services. We will update this policy when material changes require it.

10. Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, security updates, restricted administrative access, appropriate backups and security monitoring.

However, no website or electronic transmission can be guaranteed to be completely secure. Please avoid sending payment card details or unnecessary sensitive information through ordinary email or website contact forms.

If you believe that your personal information has been compromised, please contact us promptly.

11. Your Data Protection Rights

Subject to applicable law and any relevant exemptions, you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete information.
• Erasure: Request deletion of your personal information in certain circumstances.
• Restriction: Ask us to restrict processing in certain circumstances.
• Objection: Object to certain processing where the law provides this right.
• Data portability: Request certain information in a portable format where this right applies.
• Withdraw consent: Withdraw consent where we rely on it as our lawful basis.

These rights are not absolute and may depend on the circumstances and the legal basis for processing.

To exercise your rights, contact us at info@frostyswonderland.im. We may need to verify your identity before responding.

We will respond within the period required by applicable law.

12. Children's Information

Our ice rink welcomes families, and parents or guardians may make bookings on behalf of children.

When making a booking, please provide only the information necessary to arrange the visit. Parents and guardians should ensure that information provided about children is accurate and that they are authorised to provide it.

We do not knowingly collect children's personal information for unrelated purposes. If you believe that a child has provided personal information inappropriately, please contact us so that we can investigate.

13. Photography and Promotional Material

Photography or filming may take place at our event.

Where we intend to use identifiable photographs or videos of visitors for promotional purposes, we will provide appropriate information and obtain consent where required by law.

If you do not wish to be included in promotional photography, please speak to a member of staff. We will explain the arrangements available to you.

This section does not prevent photography or recording where another lawful basis applies, such as recording a safety incident, provided the processing complies with applicable law.

14. Third-Party Websites

Our website may contain links to third-party websites or services, including payment providers and mapping services.

When you follow a third-party link or use an embedded service, that provider may collect information directly from you or your device under its own privacy policy.

We are not responsible for the privacy practices of websites or services that we do not operate. We encourage you to read their privacy information before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our business, website, booking system, payment provider, Google Analytics configuration, service providers or legal obligations.

The latest version will be published on our website, together with the date it was last updated.

Where a material change requires additional notice under applicable law, we will take appropriate steps to inform affected individuals.

16. Contact Us