Privacy Policy

Personal Information:

• Name, email address, and phone number when booking tickets
• Payment information (processed securely through third-party providers)
• Age verification data for age-restricted screenings
• Account preferences and booking history

Automatically Collected Data:

• IP address, browser type, and device information
• Website usage patterns and analytics data
• Location data (if permission granted)
• CCTV footage for security purposes

We use your personal information for the following purposes:

• Processing ticket bookings and payments
• Sending booking confirmations and important updates
• Providing customer support and responding to inquiries
• Improving our services and website functionality
• Marketing communications (only with your consent)
• Ensuring security and preventing fraud
• Complying with legal obligations

We do not sell your personal information. We may share your data only in the following circumstances:

• With payment processors to complete transactions
• With service providers who assist in operating our business
• When required by law or to protect our legal rights
• In case of business transfer or merger (with prior notice)
• With your explicit consent for specific purposes

Third-Party Services:

• Payment processing: Stripe, PayPal (secure encrypted transactions)
• Email services: Mailgun for booking confirmations
• Analytics: Google Analytics (anonymized data)

We implement appropriate technical and organizational measures to protect your personal information:

• SSL encryption for all data transmission
• Secure servers with regular security updates
• Access controls limiting who can view your data
• Regular security audits and vulnerability assessments
• Staff training on data protection practices

As a data subject, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a structured format
• Right to Object: Opt out of processing for marketing purposes
• Right to Restrict: Limit how we process your data

To exercise these rights, contact us at privacy@limelightcinema.co.uk. We will respond within 30 days.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Booking data: 7 years for accounting and tax purposes
• Marketing preferences: Until you withdraw consent
• Website analytics: 26 months (anonymized)
• CCTV footage: 30 days unless incident reported
• Account data: Until account deletion requested

Essential Cookies: Required for website functionality (session management, security)

Analytics Cookies: Help us understand website usage (Google Analytics)

Marketing Cookies: Used for targeted advertising (only with consent)

You can manage cookie preferences through your browser settings or our cookie banner when you first visit our site.

We do not knowingly collect personal information from children under 13 without parental consent.

• Children under 13 require parent/guardian to complete bookings
• Age verification may be required for certain screenings
• Parents can request deletion of their child's data
• Special protections apply to children's data under GDPR

Your data is primarily processed within the UK and EU. When we transfer data outside the EU:

• We ensure adequate protection through approved mechanisms
• Standard Contractual Clauses are used with third parties
• We verify the recipient country has adequate protection laws

We may update this Privacy Policy to reflect changes in our practices or legal requirements.

• Material changes will be notified via email
• Updated policy will be posted on our website
• Date of last update is shown at the top of this page
• Continued use constitutes acceptance of changes

For privacy-related questions or to exercise your data rights:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.