Privacy Policy

Effective date: 19 August 2026

Who we are

Ice Leisure Group Ltd (company number 08488117), registered at Office 7, 35–37 Ludgate Hill, London EC4M 7JN, is the data controller for the personal data described in this notice. We have not appointed a Data Protection Officer. You can contact us about privacy, or make a request about your data, in writing at that address or through our helpdesk.

The information we collect

Booking and ticketing

When you book, we collect your name and email address, the details of your order — sessions, ticket types, quantities and price — and, where relevant, any access requirements you tell us about. If you buy at the venue, we hold the corresponding till record.

Payments

Card payments are processed by our payment providers. Your card details are entered directly into their systems and we do not store your full card number. We receive the outcome of the transaction and limited identifiers needed to match a payment to an order and to handle refunds.

CCTV

We operate 24-hour CCTV across the event area and ice rink for the safety of visitors and staff, to protect property, and to investigate incidents, queries and complaints.

Website use

We collect information about how the website is used, which may include your IP address, browser type and version, the pages you visit, the time and date of your visit, device identifiers and diagnostic data. We use cookies and similar technologies for this; you can control non-essential cookies through your browser or our cookie settings.

Account and marketing preferences

If you create an account we hold your login details and order history. If you opt in to marketing we record that preference and your contact details.

Why we use it, and our lawful basis

  • To fulfil your booking, issue tickets and provide customer support — performance of our contract with you.
  • To take payment, issue refunds and prevent fraud — performance of our contract, and our legitimate interests in preventing fraudulent transactions.
  • For safety and security at the venue, including CCTV, and to investigate incidents, accidents, complaints and insurance claims — our legitimate interests in protecting visitors, staff and property, and in defending or resolving claims.
  • To send marketing emails, where you have asked us to — your consent, which you can withdraw at any time.
  • To measure and improve how the website performs — your consent, given through cookie settings.
  • To keep accounting, tax and insurance records — compliance with our legal obligations, and our legitimate interests in maintaining those records.

How long we keep it

  • CCTV: routine footage is retained for up to 31 days and then overwritten or deleted.
  • CCTV relating to an incident, accident, complaint, investigation, claim or legal proceedings: preserved and held for longer, for as long as it is needed for that matter. Because a claim for personal injury can normally be brought within three years — and, for a child, until their twenty-first birthday — footage relevant to an injury may be retained for that period.
  • Booking, order and payment records: six years after the end of the financial year they relate to, to meet accounting and tax requirements.
  • Account data: for as long as your account is open, and for six years afterwards where it forms part of an order record.
  • Marketing preferences: until you withdraw your consent, after which we keep a minimal record that you have opted out so we do not contact you again.

Who we share it with

We do not sell your personal data. We use service providers who process it on our behalf, under contract and only on our instructions:

  • Website hosting and content delivery (Vercel), and file storage (Amazon Web Services and Vercel Blob).
  • Our ticketing platform and database hosting (Neon), which hold booking and account records.
  • Error monitoring and performance diagnostics (Sentry).
  • Website analytics and tag management, maps, and wallet passes (Google and Apple).
  • Payment processing (Cashflows and DNA Payments).
  • Email delivery for booking confirmations, tickets and service messages.

We may also share information where we are required to by law, or where it is necessary to establish, exercise or defend a legal claim — for example providing CCTV footage or booking records to our insurers, legal advisers, the police or a court.

Transfers outside the UK

Our database and file storage are hosted in the United Kingdom and the European Economic Area. Some of our providers — notably error monitoring and analytics — process data in the United States. Where personal data is transferred outside the UK we rely on UK adequacy regulations or on the International Data Transfer Addendum to the European Commission’s standard contractual clauses, together with additional safeguards where appropriate. You can ask us for details of the safeguards that apply.

Your rights

You have the right to:

  • ask for a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • ask us to delete data, where there is no continuing reason for us to hold it;
  • ask us to restrict how we use your data while a question about it is resolved;
  • receive data you gave us in a portable format, or have it sent to another provider;
  • object to processing we carry out on the basis of legitimate interests, and to object to direct marketing at any time; and
  • withdraw consent at any time, where we rely on consent.

These rights apply to CCTV footage as well as to the rest of your data. If you ask for footage of yourself we may need to obscure other people who appear in it, and we may not be able to release footage that would prejudice an investigation or a legal claim. To help us find the right recording, tell us the date, time and location, and how we can identify you.

To exercise any of these rights, contact us at the address above. If you are not satisfied with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.

Children

Our CCTV records the rink and event area and will include children. Children have the same rights over their personal data as adults, and a parent or guardian can exercise those rights on behalf of a child who is not old enough to do so themselves. We do not use children’s images for marketing without permission.

Keeping your data secure

We take appropriate technical and organisational measures to protect personal data, and we require our providers to do the same. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we will tell you and the Information Commissioner’s Office about a breach where we are required to.

Changes to this notice

We review this notice periodically and when our practices change. The effective date at the top shows when it was last updated.