• The Secret Forest - Privacy policy

    Last updated 17.02.2026

    We respect your privacy. This page explains what information we collect when you use The Secret Forest website and book tickets, and how we keep it safe.

    We only collect information we genuinely need to run the attraction and communicate with visitors.

    1. Who we are

    The Secret Forest Limited is an attraction operated by:

    Hazlewood Castle

    Paradise Lane

    Hazlewood,

    Tadcaster

    Leeds

    LS24 9NJ

    Email: thesecretforest@hazlewood-castle.co.uk

    Phone: 01937 53 53 53

    For data protection purposes, we are the data controller of your personal information.

    2. Information we collect

    If you send an enquiry via our contact form or email, we collect:

    • Name
    • Email address
    • Phone number
    • Your message

    Newsletter sign up

    If you subscribe, we collect

    • Name
    • Email address

    You can unsubscribe at any time using the link in every email.

    Automatically collected website data

    When you browse the website we may collect:

    • IP address
    • Browser type
    • Device type
    • Pages visited
    • Cookies

    This data helps us improve the website and detect problems.

    3. Children’s data

    Our attraction is designed for families, but bookings must be made by an adult.

    We do not knowingly collect personal data directly from children.

    4. How we use your information

    We only use your data when we have a lawful basis.

  • Purpose

    Send tickets & confirmations

    Reply to enquiries

    Manage bookings on the day

    Send newsletters

    Improve website performance

    Prevent fraud or misuse

    Legal basis

    Contract

    Legitimate interest

    Legitimate interest

    Consent

    Legitimate interest

    Legitimate interest

  • 5. Marketing emails

    We only send marketing emails if you have signed up.

    You can unsubscribe anytime by clicking the link in the email or contacting us.

    We never sell or rent your data.

    6. Sharing your data

    We share data only where necessary with trusted providers:

    • Ticket booking provider
    • Payment processor
    • Website hosting provider
    • Email marketing provider

    These providers are GDPR-compliant and only process data on our instructions.

    We may also share data if required by law.

    7. How long we keep your data

  • Data type

    Booking records

    Enquiries

    Newsletter subscription

    Website analytics

    Retention period

    Up to 7 years (accounting rules)

    Up to 12 months

    Until you unsubscribe

    Up to 26 months

  • 8. Cookies

    Our website uses cookies.
    You can read more and control them in our Cookie Policy.

    9. Your rights

    Under UK GDPR you have the right to:

    • access your personal data
    • correct inaccurate data
    • request deletion
    • restrict processing
    • object to marketing
    • lodge a complaint

    To exercise your rights, email;

    thesecretforest@hazlewood-castle.co.uk

    You can complain to the Information Commissioner's Office

    Https://ico.org.uk

    10. Data security

    We use secure systems, encrypted connections and limited staff access to protect your information.

  • 11. Changes to this policy

    We may update this policy from time to time.
    The latest version will always appear on this page.

Cookie Use
We use cookies to ensure a smooth browsing experience. By continuing we assume you accept the use of cookies.
Learn More