Didcot Railway Centre Privacy Policy

PRIVACY

Privacy and Cookie Policy

Introduction

To process your order and deal with any enquiries, we need to ask for, store and use some personal information. This Privacy Policy explains what information we need, why we need it, who we share it with and how long we keep it for. It also explains our use of Cookies.

Browsing, added items to basket, started but not completed checkout

We use a temporary cookie to remember who you are as you browse around the site and add items to the basket. We store your IP address in an encrypted form that we cannot decrypt. We store the items in your basket. If you start checkout we store the personal information you enter.

All this information is kept in a separate part of the system that we cannot readily access and is automatically deleted after 6 hours. The information is kept for this period to allow you to return to the website later to complete your order.

If you choose to block our cookies in your web browser, you will not be able to order online.

Completed orders

We store all the information you entered on our website during the checkout process, along with your IP address. We do not store your credit/debit card details as these are entered on Stripe’s payment processing system which is detailed in the third parties section below.

If you contact us about your order, we may also store brief notes with your order regarding the outcome of this communication, to allow us to allow us to action whatever is agreed.

If you do not create an account, all this information is stored for three years then deleted automatically. This allows ample time for any queries, returns or repeat orders etc. It is also long enough to allow us to monitor trends in sales etc.

If you create an account, all this information is stored indefinitely. This will allow you to log into your account and check all previous orders and other details whenever you want.

If you opt in to receiving our promotional emails or join our Loyalty Programme, we will use your email address and other details to send you promotional emails and/or Loyalty Programme statement emails. You may opt out of these by clicking the links contained in the emails, by replying to one of the emails with “unsubscribe” as the subject, or by logging into your account and changing the relevant options. If you have any difficulty unsubscribing, please contact us by email and we will take care of this for you.

Email correspondence

If you email us about your order, account or any other matter, we will retain this email correspondence for up to 6 months, then delete it. This is sufficient time for any issues to be resolved and for any follow-up discussions.

As noted above, we may also record brief notes about the outcome of the email correspondence with your order to allow us to action whatever we have agreed.

Information shared with third parties

If you pay online by credit or debit card we share your name, billing address, email address and total order value with our card processing gateway, Stripe. They use this along with the card details you enter on their system to authorise your card payment and for fraud prevention. Stripe’s privacy policy is available at https://stripe.com/gb/privacy

If your order is delivered by Royal Mail, we share your name, delivery address, email address, mobile phone number (if entered) and safe place request (if entered) with them. This is to allow them to deliver your parcel and provide tracking information and updates for you. Royal Mail’s privacy policy is available at https://www.royalmail.com/privacy-policy

We use Google Analytics to track website visitor numbers, page popularity and other similar data. Google will use your IP address and a cookie to track this. The information available to us from Google Analytics is aggregated and anonymised, which means we cannot identify you as an individual. If you wish to block access to Google’s cookies in your web browser this will not affect your ability to order from our website. The Google Analytics privacy policy is available at https://support.google.com/analytics/answer/6004245

Who else will have access to the information?

The information will be accessed by our own staff. The information will not be shared with other web sites to which links may be provided from our web site and we may share your information with third parties for marketing purposes subject to any preferences that you express. We may need to share your information with our service providers, associated companies and agents for the purposes set out in this Privacy Policy and we may need to disclose your information in order to comply with a legal or regulatory obligation.

Where we store your personal information

All the personal data we hold is stored in the United Kingdom. Our web servers are in a secure data centre in Hemel Hempstead. Backups are stored on backup systems in secure data centres in Rugby and London Docklands. Emails and paperwork are stored in our offices in Stibbington.

Cookies

We use cookies to remember who you are as you browse around the website, add items to your basket, progress through checkout and access your account. These just contain a unique random identification code and do not contain any personal information. They are automatically deleted after 6 hours. If you block our cookies in your web browser, you will not be able to order online or use many other website features. However, you can still order by phone.

We use Google Analytics as detailed above, and their system uses cookies. If you wish to block access to Google’s cookies in your web browser this will not affect your ability to order from our website.

Accessing, correcting, and deleting your personal information

If you have created an account, you can access most of the personal information we hold by logging into your account and checking the various sections. You can also correct and update your details there.

If you have not created an account or wish to obtain the full personal information we hold, please email us at info@didcotrailwaycentre.org.uk . We will gather the information and send it as PDF files by email within 30 days of your request. There will be no charge for this.

If having received this full information you require any corrections, please email us again at info@didcotrailwaycentre.org.uk . We will carry out the requested changes and send you the corrected parts only as PDF files by email within 30 days of your request. There will be no charge for this.

If you wish to have all your personal information deleted from our systems, please email us at info@didcotrailwaycentre.org.uk  We will carry out the requested deletions and confirm by email within 30 days of your request. There will be no charge for this.

If you wish to find out what personal information any of the third parties mentioned above hold about you, request corrections or deletion, please refer to their privacy policies and contact them as appropriate. We cannot act on your behalf as they will only accept your request directly from you.

Questions?

If you have any questions or require any clarification or further details regarding our privacy policy or our handling of your personal information, please email us at info@didcotrailwaycentre.org.uk  We will respond as soon as possible but please allow us up to 30 days.

 

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026