Privacy Policy

Last updated: March 2026

Operation LaserTag ("we", "us", "our") is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our website or make a booking with us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Operation LaserTag is an outdoor laser tag activity business operating at Fort Amherst, Barrack Row, Chatham, Kent, ME4 4UB. You can contact us at info@operation-lasertag.co.uk.

2. What Data We Collect

We collect the following personal data when you make a booking or contact us:

• Your name
• Email address
• Phone number
• Payment information (processed securely via Stripe — we do not store card details)
• Booking details (session date, number of players, special requests)
• Any information you provide in your message via the contact form

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and manage your booking
• To send you booking confirmation and session reminder emails
• To respond to enquiries submitted via our contact form
• To send a post-session follow-up email
• To comply with our legal obligations

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing

• Contract: Processing is necessary to fulfil your booking.
• Legitimate interests: Sending follow-up emails and responding to enquiries.
• Legal obligation: Where we are required to retain records by law.

5. Data Sharing

We do not sell your personal data. We may share your data with the following third parties solely to operate our service:

• Stripe — payment processing (see Stripe's Privacy Policy)
• Brevo (Sendinblue) — email delivery (see Brevo's Privacy Policy)
• Hostinger — website and database hosting

All third parties are required to process your data securely and in accordance with applicable data protection law.

6. Data Retention

• Booking records are retained for 7 years in line with UK financial record-keeping requirements.
• Contact form enquiries are retained for 12 months.
• You may request deletion of your data at any time (see Your Rights below).

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where no legal obligation requires us to retain it)
• Object to or restrict processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at info@operation-lasertag.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses only essential functional cookies required for the booking system to operate. We do not use tracking, advertising, or analytics cookies.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is handled entirely by Stripe and is never stored on our servers.

10. Changes to This Policy

We may update this privacy policy from time to time. The latest version will always be available on this page with the date of last update shown at the top.

11. Contact

For any questions regarding this privacy policy or how we handle your data, please contact us at info@operation-lasertag.co.uk.