Last updated: 15/05/2025
This Privacy notice sets how Continuum Attractions collects and uses your personal information, and gives you details about your privacy rights and how to exercise these. We operate the following UK visitor attractions:
GreenWood Family Park
Oxford Castle & Prison
Spinnaker Tower
The Coronation Street Experience
The Emmerdale Village Tour
The Loch Ness Centre
The Real Mary King’s Close
York’s Chocolate Story
We keep this notice under review and may update it to make improvements or to reflect regulatory changes. We encourage you to check it from time to time. If we make any significant changes, we’ll endeavour to notify you. Please also remember when using our website if you click on a link to go to another organisation’s website this privacy notice will no longer apply.
About us
In this privacy notice when we refer to “Continuum Attractions”, “we”, “us” or “our” we are referring to Continuum Group Limited and any of its subsidiary companies, as listed below:
Continuum (Entertainment) Limited, Continuum (Loch Ness) Limited, Greenwood Forest Park Limited, Heritage Projects (Management) Limited, Heritage Projects (Portsmouth) Limited, Heritage Projects (Oxford Castle) Limited & Heritage Projects (York) Limited.
How to contact us
If you have any questions about this privacy notice or any other data protection related queries, please contact us using the following details:
Email us: datarequests@continuumattractions.com
Write to us: Data Protection Team, Continuum Attractions, St. Edmund’s House, Margaret Street, York, YO10 4UX
The personal information we collect
We collect personal information from people who make enquiries and book to visit our attractions. This information may be collected when you complete an online booking form or in person at one of our ticket offices. We also handle details about people who work for businesses we liaise with, and work with.
Visitors
When you book to visit an attraction, or make an enquiry, we collect certain personal details about you. Alongside this we ask if you’d like to receive marketing from us in future. We also collect further information if you complete a post-visit survey, or purchase products from one of our shops. The personal information we routinely collect includes:
First name and surname
Email address
Phone number
Postal address
Payment details
Photos & videos
At some of our attractions photographs or videos are taken which you can purchase after your visit.
Photographs and/or videos are used in our promotional materials, but only with your permission.
CCTV
CCTV is in operation at every site for security, and crime prevention and detection purposes. Please note Continuum Attractions is not responsible for the CCTV in operation at the Emmerdale Village Tour and the Coronation Street Experience. These are operated by ITV.
Proof of Age
On occasion, if you book to attend a special event at one of our attractions, we may ask to see proof you are over 18. We don’t usually keep a copy any documentation.
Special category data
We do not routinely collect what is known as ‘special category data’ under data protection law, for example information relating to your ethnicity, race or health. However, in specific and exceptional circumstances it may be necessary for us to handle medical information about you.
Business contacts
In a business context we collect personal information relating to potential business partners at trade events, from industry lists or from publicly available sources.
We also handle names and contact details for relevant people employed by organisations we work with, such as travel agents, tour operators, local authorities, and any service providers who support our business operations.
Our use of cookies and similar technologies
Our attraction websites use cookies and similar technologies, which collect both non-personal and personal information. Some of this technology is essential for our websites to operate. We use site performance cookies to better understand how users browse our website and to make sure we improve the user experience. We also use advertising cookies to help promote our services.
When you first visit any of our websites, we collect your consent to use any non-essential cookies and similar technologies. To find out more and to update your cookie preferences please click on ‘manage consent’ at the bottom of your screen.
How we use your personal information & our lawful bases
We will use your personal information for the following purposes, as relevant, depending on our relationship with you:
To fulfil and administer your booking
To communicate with you about your booking
To send post-visit surveys
To run and manage prize draws or competitions
To offer photographs (or videos) to purchase of your visit
To send email marketing communications to attraction visitors
To personalise and make our marketing communications more relevant, based on what we know about you (for example the area of the country you live in)
For personalised advertising purposes
For security and safety reasons (e.g. CCTV)
To promote our attractions (using photography/video with your permission)
For sales, reservations, administration and communications in business-to-business relationships
Our lawful bases for processing
Under UK data protection law, we need to make sure we have a lawful basis for our activities. We rely on the following lawful bases:
Contract – the performance of a contract, or to take necessary steps before entering into a contract. For example, we rely on this basis to fulfil any bookings made with us.
Consent – for example, we rely on consent to send visitors email marketing communications. We also collect consent to use photographs or videos for promotional purposes.
Legitimate Interests – where we rely on our legitimate business interests, we make sure we balance our interests with your interests, rights and freedoms. We rely on the lawful basis of legitimate interests for the following activities:
To send post-visit surveys
To personalise and make our marketing communications more relevant, based on what we know about you
To offer you the ability to purchase a photograph or video of your visit
For security and safety reasons (e.g. CCTV)
To send promotional communications to business contacts
Legal obligation – where required by law, we will collect, hold or share personal information. For example, we may be ordered by a court of law to disclose information, and we are obliged to respond to any complaints.
In exceptional and limited circumstance, we may need to collect and share personal information to support people in an emergency. We may rely on the lawful basis of vital interests in such situations. We may also in very specific circumstances rely on the lawful basis of public interests.
You do not have to provide us with your personal information, but if you do not provide the details we request, for example when making a booking for one of our attractions, we may not be able to complete your booking.
Our communications with you
Where you make a booking with us, we will send you necessary communications about your upcoming visit.
After your visit, and where you have given us your permission, we will send further email communications about upcoming events at our UK attractions, special offers, discounts, prize draws and competitions. You can always opt-out of these messages at any time by clicking the unsubscribe link on our emails, or by contacting us: datarequests@continuumattractions.com
Your privacy rights
Under UK data protection law, you have a number of privacy rights. These are listed below, along with our contact details, should you wish to make a request.
Right to be informed: You have the right to be informed about how we handle your personal information. This privacy notice is one of the ways we endeavour to fulfil this right.
Right of Access: You have the right to ask for a copy of the personal data we hold about you and the purposes we are using it for. Personal data is any information which can directly, or indirectly, identify you.
Right to Rectification: You have the right to ask us to change any details which are incorrect or need updating.
Right of Erasure: You have the right to ask us to delete your personal details. Please note this not an absolute right, and there may be circumstances in which we can justifiably decline a request.
Right to Object: You have the absolute right to object to receiving direct marketing from us and the right to object to us using information we know about you to personalise our communications. You also have the right to raise an objection about how we are handling your personal information in certain circumstances.
Right to withdraw consent: Where you have provided your consent for us to use your personal data for a specific purpose or purposes, you can withdraw this consent at any time. The lawfulness of our use of your information before consent was withdrawn is not affected.
Right of Restriction: This means you can ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy, or the reason we are using it for.
Right to Portability: You have the right to obtain and reuse your personal information across different services. This right allows you to request that we move, copy or transfer your personal information easily from our systems to another organisation’s systems, or directly to you.
UK data protection law also gives people rights in relation to automated decision making which may have a legal or similarly significant effect. We can confirm Continuum Attractions does not carry out this type of activity.
How to exercise your rights
Please use the following contact details, if you’d like more information or would like to exercise any of the above rights.
Email us: datarequests@continuumattractions.com
Write to us: Data Protection Team, Continuum Attractions, St. Edmund’s House, Margaret Street, York, YO10 4UX
To fulfil certain requests and depending on our relationship with you, we may need to ask you for proof of identity.
We’ll handle any requests as soon as possible, at least within one calendar month. In limited circumstances we may need to extend the timescale to respond to the right of access.
Our obligations to fulfil the above rights may also be subject to certain exemptions.
If you’re concerned about the way in which we have collected and used your personal information, please contact us and we’ll do our utmost to resolve this with you. If you remain unhappy with how we have handled your personal information, you have the right to raise a complaint with the UK Information Commissioner’s Office.
Who we share personal information with
Intra group
Your personal information may be shared between Continuum Group and its subsidiaries but only when this is necessary to provide the service you have requested. Our Support Office and all subsidiaries are located within the UK.
Service providers
We use service providers to support the efficient running of our business operations. Where necessary we pass personal information to our service providers or provide them with access to it. This will be limited to what is necessary to provide their services. Such service providers only handle this information on our behalf and under appropriate contractual terms. We use a UK-based service provider to manage all bookings and send email communications.
We do not routinely share personal data with any organisations based outside the UK.
Other organisations
Where necessary we will share personal information with other organisations for them to use for their own purposes. For example:
Spinnaker Tower Abseiling – we share details of people who’ve booked to abseil at the Spinnaker Tower with the company who operates the abseiling.
ITV – in limited circumstances we share lists of guest names with ITV for security reasons when people have booked on special VIP tours.
We may also share personal details where we have a legal obligation to do so or believe there is an overriding justification for doing so. For example, sharing personal information with the police to assist in crime prevention or detection.
We will also share personal information where this is necessary to do to protect or defend our legal rights or the rights of others. In the event of a sale or acquisition, our data assets would be shared with the third-party acquirer.
How long we keep your personal information for
Continuum Attractions will keep your personal details for as long as is necessary for the reasons we are using them for. How long, varies depending on our relationship with you, and any legal obligations which may dictate the length of time your personal information is kept.
We use the following criteria to establish retention periods, and then securely dispose of personal information when no longer required.
A legal or statutory obligation to keep information for a minimum period.
Industry specific guidelines and good practice.
An assessment of our business necessity to keep personal details, balanced with people’s reasonable expectations.
Whether retention is advisable in a legal context (for example for litigation purposes or regulatory investigations).
If you’d like to learn more about our retention periods, please email us: datarequests@continuumattractions.com