Privacy policy

This policy explains what personal information we collect when you book tickets for the Jingle Bell Bop or contact us, how we use it, and the rights you have over it. We are committed to handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

The Jingle Bell Bop is produced by Jingletots Limited of Forge House, High Street, Carlton, DN14 9LY, which is the data controller for the information described in this policy. If you have any questions, or want to exercise any of your rights, email christmas@jinglebellbop.co.uk or write to us at the address above.

What we collect

When you book tickets we collect:

• your name, email address, phone number and the town you are travelling from;
• the performance you have chosen and the tickets you have bought;
• the ages of the children you are bringing (so that Santa's gifts are age appropriate);
• your booking reference, and the date and amount of your payment.

If you order a letter from Santa we also collect, for each child: their first name, age, whether they are a boy or girl (optional), what is on their Christmas list, something good they have done, how Father Christmas gets into your home, and the area they will be in on Christmas Day. This information is used solely to write that letter.

If you contact us we keep your name, contact details and the content of your message.

Our web server also records standard technical information such as your IP address and browser type in its logs, which helps us keep the site secure and working properly.

What we do not collect

We never see or store your card or bank details. All payments are taken by PayPal on their own systems. We only receive confirmation that a payment succeeded, the amount, and a transaction reference.

Why we use it, and our lawful basis

Children's information

We only collect information about children from the parent or guardian making the booking, and only what is needed to run the show – ages for gifts, and the letter details you choose to give us. We do not use children's information for marketing, we never sell it, and letter details are destroyed after the event once the letters have been written.

Who we share it with

We do not sell or rent your information to anyone. We share it only with:

• PayPal (Europe) S.à r.l. et Cie, S.C.A. – to take your payment. PayPal is a data controller in its own right; see PayPal's privacy statement.
• Our web hosting and email providers – who store the site and send your e-ticket on our instructions, as our processors.
• Our show team on the day – door staff see the booking name, party size and check-in status when they scan your ticket.
• Anyone we are legally required to share it with, for example HMRC or the police.

Your information is stored on servers in the United Kingdom. Where a provider transfers data outside the UK, they do so under an approved safeguard such as the UK International Data Transfer Agreement or an adequacy decision.

How long we keep it

• Santa letter details: deleted within one month of the show.
• Booking and contact details: kept for 18 months after the event, then deleted or anonymised.
• Marketing list: until you unsubscribe, or after 18 months of no contact from you.
• Payment and accounting records: kept for six full financial years, as required by UK tax law.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you (a "subject access request");
• have inaccurate information corrected;
• ask us to delete your information where we no longer need it;
• ask us to restrict how we use it, or object to our use of it;
• ask us to transfer it to another organisation (data portability);
• withdraw your consent to marketing at any time.

To exercise any of these rights, email christmas@jinglebellbop.co.uk. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We'd appreciate the chance to put things right first.

Marketing emails

We only email you about future events if you have asked us to. Every marketing email has an unsubscribe link, and you can also unsubscribe here or by replying to any email. Unsubscribing does not stop us emailing you about a booking you have already made.

Cookies

This site uses a single essential cookie (JBBSESS) which remembers your basket and keeps your booking secure while you are using the site. It is deleted when you close your browser. We do not use advertising or tracking cookies, and we do not run third-party analytics, so no consent banner is required. If you visit a PayPal payment page, PayPal will set its own cookies under its own policy.

Keeping your information safe

Our site is served only over an encrypted HTTPS connection, access to the booking system is password protected and limited to the people running the event, and passwords are stored using modern one-way hashing. E-tickets use a long random link that cannot be guessed.

Changes to this policy

If we change this policy we will update the date at the top of this page. Significant changes affecting how we use your information will be notified to you by email where we hold your address for that purpose.