Privacy
Policy

1. Who We Are

Norfolk Dinosaur Park Limited (company number 03150726, registered in England and Wales; “NDP”, “we”, “us”, “our”), trading as ROARR! and PrimEvil, is the data controller responsible for this website and our services. This policy explains how we collect, use, store and protect personal information under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

Norfolk Dinosaur Park Limited
Registered office: The Grove, Banham, Norwich, Norfolk, NR16 2HE

2. What Information We Collect

We may collect and process the following types of personal data:

• Identity Data: first name, last name, title, date of birth and gender.
• Contact Data: billing address, email address and telephone numbers.
• Financial Data: bank or payment details, handled by our ticketing and payment partners.
• Transaction Data: details of payments to and from you and services you have purchased.
• Technical Data: IP address, browser type and version, time zone setting, operating system and platform.
• Profile and Usage Data: purchases, interests, preferences, feedback, survey responses and how you use our website and services.
• Marketing and Communications Data: your preferences in receiving marketing from us.
• CCTV Footage: our premises are subject to CCTV coverage, captured for the purposes set out in this policy.
• Request a portable copy of information you provided to us where the right to data portability applies.

We may also collect Aggregated Data, such as statistical or demographic data, which is not personal data as it does not reveal your identity.

Where you enable location services in the ROARR! Official Mobile App, we collect precise location and geofence entry/exit data on an opt-in basis to power in-park navigation and features. This is processed on the basis of your consent and can be withdrawn at any time by disabling location permissions in your device settings or within the App. The App also automatically collects device and technical information (operating system, device name, app version, IP address and similar) to keep the App secure and functioning correctly, and usage/analytics data via in-app analytics tools to help us improve it.

3. How We Use Your Information

We use your personal data to:

• Process transactions, manage bookings made with our ticketing partner and respond to your enquiries (contractual necessity).
• Send you service-related communications and important updates about your interactions with us.
• Send marketing communications about our offers, events and promotions where you have given consent, which you can withdraw at any time.
• Personalise content and communications where you have chosen to receive them.
• Administer competitions, promotions and surveys you choose to enter.
• Conduct market research and analyse use of our website to improve performance and user experience.

Where we rely on legitimate interests, we balance these against your rights and freedoms, and you can object to certain processing, including direct marketing, at any time. We may also process personal data where necessary to protect the vital interests of individuals, including children, or to comply with our legal and safeguarding obligations.

4. Cookies and Analytics

The ROARR! service uses a strictly necessary first-party cookie to remember your cookie choices across roarr.co.uk and book.roarr.co.uk for up to 180 days. It records only the categories you chose, the consent version and the time of your choice. Cloudflare Turnstile is also used where needed to protect forms from automated abuse. Optional analytics and marketing technologies are off by default and load only after you make the relevant affirmative choice in the cookie banner. See our Cookie Policy for the current technology list.

If you allow analytics, Google Analytics 4 helps us understand use of the marketing site and the booking journey so we can improve them. A first-party analytics identifier can be recognised across ROARR! subdomains, including through a short-lived linker parameter when you follow a booking link. We do not send names, email addresses, telephone numbers, postal addresses or payment details to Google Analytics. If you allow marketing, Veritonic, on behalf of Bauer Media, measures visits linked to our radio advertising on the marketing site. Google advertising storage, advertising user data and advertising personalisation remain disabled.

5. Data Sharing, Storage and Security

We may share personal data with trusted service providers acting on our behalf, including ticketing and payment partners, website hosting and security providers, and email or form-delivery services. We only share what is needed for the service and require providers acting for us to protect it. Booking pages at book.roarr.co.uk form part of the ROARR! service. Our ticketing technology provider supports that checkout, and Dojo processes payment information; each receives only the data needed for its role and is required to protect it. Where we link to a separately operated ticketing or third-party service, its own privacy information also applies.

We keep personal data only for as long as needed for the purpose described in this policy and to meet legal, tax, accounting, safety or dispute-resolution obligations. Where data is transferred outside the UK, we use an adequacy regulation or another safeguard recognised by UK data-protection law. You can ask for more information about those safeguards by emailing gdpr@roarr.co.uk. We use controlled access, secure payment providers and appropriate technical and organisational measures, with procedures to respond to data breaches.

Our premises use CCTV for crime detection and prevention, guest and crew safety, and monitoring of unmanned areas. Footage is stored securely and accessed only when necessary.

7. Marketing Preferences

If you choose to receive marketing emails from ROARR!, we store your details securely and use them only for that purpose. You can opt out at any time by clicking the unsubscribe link in any email, or by contacting marketing@roarr.co.uk. We will never sell or share your personal information with third parties for their own marketing purposes.

8. Third-Party Websites

Our service includes booking pages at book.roarr.co.uk. We may also link to websites operated by other organisations. We are not responsible for the privacy practices or content of those external websites and encourage you to read their privacy policies before providing any personal data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new “last updated” date. If you have any questions about this Privacy Policy or how we handle your information, please contact us: