Privacy Policy

1. WHO WE ARE

This website is operated by Maurice Mandry Limited, trading as Ottershaw Christmas Tree Farm ("we", "us" or "our").

Maurice Mandry Limited is registered in England and Wales under company number 00446714.

Registered office:

Maurice Mandry Limited
Kitchen Ride
Foxhills Road
Ottershaw
Chertsey
Surrey
KT16 0ES
United Kingdom

For the purposes of UK data protection law, Maurice Mandry Limited is the data controller for the personal information described in this Privacy Policy.

This Privacy Policy explains what information we collect when you visit this website or make a booking, why we collect it, how it is used and your rights in relation to your personal information.

2. INFORMATION WE COLLECT

When you use this website or make a booking to meet Father Christmas, we may collect personal information including:

  • your name;
  • email address;
  • telephone number;
  • booking date and time;
  • number of guests and other booking details;
  • information you choose to provide as part of your booking;
  • payment and transaction information; and
  • correspondence you have with us regarding your booking.

We may also collect technical and usage information about visits to this website, including:

  • device and browser type;
  • pages viewed;
  • interactions with the website;
  • approximate geographic information derived from your IP address;
  • referring website or marketing source;
  • campaign information contained in links, such as UTM parameters;
  • interactions with the booking process; and
  • booking and conversion activity.

Where required by law, analytics information is only collected after you have provided the necessary consent.

3. HOW WE USE YOUR INFORMATION

We may use personal information to:

  • process and administer your booking;
  • take or facilitate payment for your booking;
  • send booking confirmations and information relating to your visit;
  • contact you where necessary regarding your booking;
  • respond to enquiries or requests;
  • operate, maintain and secure the website;
  • diagnose technical problems;
  • understand how visitors use the website;
  • measure the effectiveness of the website and our marketing activity;
  • analyse booking and conversion performance;
  • improve our website and customer experience; and
  • comply with legal, accounting and regulatory obligations.

We only process personal information where we have an appropriate lawful basis for doing so.

Depending on the circumstances, this may include:

  • processing necessary to enter into or perform a contract with you;
  • compliance with a legal obligation;
  • our legitimate interests in operating and improving our business and services; or
  • your consent, where consent is required.

4. BOOKINGS

Bookings to meet Father Christmas are managed through an online booking system using Booknetic.

When you make a booking, you will be asked to provide the information necessary to reserve your chosen date and time and administer your visit.

The information requested may include your contact details, number of guests, booking selections and other information reasonably necessary to provide the booked experience.

Information submitted through the booking system may be stored within our website and associated systems where necessary to manage your booking.

Please avoid providing personal information that is not reasonably necessary for your booking.

5. PAYMENTS

Payments made through this website are processed securely by Stripe.

When you make a payment, information required to process the transaction, such as your payment card details, billing information and transaction information, is provided to Stripe.

Maurice Mandry Limited does not receive or store your full payment card details.

Stripe processes personal information in connection with its payment services in accordance with its own privacy policy and applicable data protection requirements.

Stripe may process personal information outside the United Kingdom. Where required, appropriate safeguards are used for international transfers of personal information.

You can find further information about how Stripe handles personal information in Stripe's Privacy Policy:

https://stripe.com/gb/privacy (opens in a new tab)

6. WEBSITE ANALYTICS AND CONVERSION TRACKING

We use Google Analytics 4 ("GA4") to help us understand how visitors find and use this website and how effectively the website leads to bookings.

Google Tag Manager ("GTM") is used to manage analytics, measurement and related website tags.

Subject to your cookie and consent choices, these technologies may allow us to measure information including:

  • pages and sections viewed;
  • how visitors arrived at the website;
  • website engagement;
  • interactions with buttons and booking links;
  • engagement with the booking process;
  • booking funnel activity; and
  • completed bookings and other conversion events.

This information helps us understand the performance of the website, evaluate marketing activity and improve the customer experience.

Google Analytics and other non-essential measurement technologies will only be activated where the required consent has been provided.

Information collected through Google services may be processed by Google in accordance with Google's own privacy terms and policies.

7. COOKIES AND SIMILAR TECHNOLOGIES

This website uses cookies and similar technologies.

Some cookies and technologies are necessary for the website and booking system to function correctly. These may be used without consent where permitted by law.

Other technologies, including analytics and measurement cookies, are optional.

When you first visit the website, you will be given the opportunity to accept or reject optional cookies.

Non-essential cookies will not be activated until the appropriate consent has been provided.

You can change or withdraw your cookie preferences at any time using the cookie settings available on this website.

For further information about the cookies and technologies used, please see our Cookie Policy.

8. WEBSITE AND TECHNICAL SERVICES

Fun in Elk City Limited ("FIEC") provides website development, hosting, technical support, analytics and reporting services for this website.

Where FIEC processes personal information on behalf of Maurice Mandry Limited in providing these services, FIEC acts as a data processor.

FIEC may have access to website, analytics and booking information where reasonably necessary for purposes including:

  • website administration;
  • hosting;
  • maintenance;
  • security;
  • technical support;
  • troubleshooting;
  • analytics implementation; and
  • website and conversion performance reporting.

Where acting as a processor, FIEC processes personal information on behalf of and in accordance with the instructions of Maurice Mandry Limited.

FIEC does not acquire ownership of customer personal information collected through this website.

9. WHO WE SHARE INFORMATION WITH

We may share personal information with trusted organisations and service providers where reasonably necessary to operate this website, administer bookings and provide the services you have requested.

These may include:

  • Fun in Elk City Limited, our website and technical services provider;
  • Booknetic and technologies used to provide our booking system;
  • Stripe, for payment processing;
  • website hosting and infrastructure providers;
  • Google, where analytics and measurement consent has been provided;
  • email and communications providers;
  • professional advisers such as accountants or legal advisers; and
  • regulators, authorities or other organisations where disclosure is required by law.

We do not sell your personal information.

Where third parties process personal information for their own purposes, their own privacy policies may also apply.

10. INTERNATIONAL DATA TRANSFERS

Some organisations that provide services to us, including technology, analytics and payment providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that applicable data protection requirements are met and appropriate safeguards are used where required.

11. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.

This may include retaining information for:

  • administering and supporting your booking;
  • responding to enquiries;
  • resolving disputes;
  • maintaining appropriate business and transaction records;
  • accounting and tax requirements;
  • fraud prevention and security; and
  • complying with legal or regulatory obligations.

Different categories of personal information may therefore be retained for different periods.

Analytics information is retained in accordance with the retention settings configured within the relevant analytics services.

When personal information is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.

12. HOW WE PROTECT YOUR INFORMATION

We take appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Access to administrative systems and customer information is restricted to people and service providers who require access for legitimate operational purposes.

Payments are handled through our specialist payment provider rather than full payment card details being stored directly by us.

However, no internet-based service or method of electronic storage can guarantee absolute security.

13. CHILDREN'S INFORMATION

The Father Christmas experience is intended for families and children, but bookings must be made by an appropriate adult.

We do not intend to collect personal information directly from children through this website unless that information is genuinely necessary to provide the booked experience.

Parents and guardians should avoid providing unnecessary personal information about children when completing a booking.

Where information about a child is reasonably required to provide the experience, it should be supplied by the child's parent, guardian or another appropriate responsible adult.

14. YOUR DATA PROTECTION RIGHTS

Depending on the circumstances, UK data protection law gives you rights regarding your personal information.

These may include the right to:

  • request access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • request deletion of your personal information in certain circumstances;
  • request restriction of processing in certain circumstances;
  • object to certain processing;
  • request transfer of your information in certain circumstances; and
  • withdraw your consent where processing is based on consent.

Where you withdraw consent, this does not affect the lawfulness of processing that took place before consent was withdrawn.

Not all rights apply in every circumstance.

If you wish to exercise any of these rights, please contact us using the details below.

15. COMPLAINTS

If you have concerns about how your personal information has been handled, please contact us in the first instance so that we can try to resolve the issue.

You also have the right to make a complaint to the Information Commissioner's Office ("ICO"), the UK's independent data protection regulator.

Information about your data protection rights and how to contact the ICO is available at:

https://ico.org.uk/ (opens in a new tab)

16. THIRD-PARTY WEBSITES

This website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices of third-party websites. If you follow a link to another website, you should review that organisation's privacy information.

17. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our website, booking experience, service providers, legal requirements or the way we process personal information.

The latest version will be published on this website and the "Last updated" date at the top of this policy will be revised where appropriate.

18. CONTACT US

If you have questions about this Privacy Policy, wish to exercise your data protection rights or have concerns about how your personal information is being used, please contact:

Maurice Mandry Limited
Trading as Ottershaw Christmas Tree Farm

Kitchen Ride
Foxhills Road
Ottershaw
Chertsey
Surrey
KT16 0ES
United Kingdom

Company number: 00446714

Email: sales@mauricemandry.com
Telephone: 01932 873218