In order to give you the best customer experience we use cookies. Learn about our policies here.

Accept

Buy tickets

Scary Frankenstein eye


Privacy policy

“Solitude was my only consolation - deep, dark, deathlike solitude.”

We know that you care about your personal data and how it is used, and we want you to trust that Mary Shelley’s House of Frankenstein is committed handling your personal data with the utmost care. This Privacy Policy will help you understand what personal data we collect, why we collect it and what we do with it.

As you read our Policy, please keep in mind that it applies to Bath Attractions Ltd trading as Mary Shelley’s House of Frankenstein (referred to as “The company” “House of Frankenstein” “We” “Us” “Our” through this document).

Please take a moment to familiarise yourself with our privacy practices and let us know if you have any questions by sending us an e-mail at: info@houseoffrankenstein.com

You have the right to object to certain uses of your personal data including the use of your personal data for direct marketing. See what your rights are and how you can exercise them here.

For the purposes of GDPR, our ICO registration number is ZA799503 filed under Bath Attractions Ltd.

What Does This Privacy Policy Cover

This document has been written to be clear about what we do with your personal information.

In line with the European General Data Protection Regulation (GDPR) guidelines which came into effect on 25th May 2018, this Privacy Policy describes the personal data collected, generated and processed when you make contact with us. It also explains how your personal data is used, shared and protected and what choices you have relating to your personal data. For the purposes of GDPR, our ICO registration number is ZA799503 filed under Bath Attractions Ltd.

This Privacy Notice also applies to House of Frankenstein marketing content, including offers and advertisements for House of Frankenstein events, products and services, which we (or a service provider acting on our behalf) send to you on third-party websites, platforms and applications based on your site usage information. These third-party websites generally have their own Privacy Notice and Terms and Conditions. We encourage you to read them before using those websites.

What Is Personal Data

Personal data means any information that can be used to identify directly or indirectly a specific individual. This definition includes personal data collected offline through direct marketing campaigns and online through our websites, applications and branded pages on third-party platforms.

You are not required to provide House of Frankenstein the personal data that we request, but if you choose not to do so, we may not be able to provide you with our products or services, or with a high quality of service or respond to any queries you may have.

We may collect personal data from a variety of sources. This includes:

  • Personal data you give us directly,
  • Personal data we collect automatically, and
  • Personal data we collect from other sources.

How We Collect Your Data

We may collect personal data from you in the following ways:

  • You visit our premises.
  • You use our services, including all bookings and ticketing services.
  • You consent to your child(ren) (or child(ren) in your care) being photographed or videoed.
  • You take part in a competition or survey.
  • You visit our website www.houseoffrankenstein.com
  • You interact with us on social media.
  • You contact us.
  • You apply to join as a member of staff.

The means in which we collect your personal information are accomplished in two ways:

  • Directly e.g. when you apply to use or receive our services, you complete a survey, or submit a job application.
  • From publicly available sources e.g. social media and internet services.

What We Collect As Personal Data

We may collect the following types of information from you:

  • Your name, gender, address, email address(es), telephone number(s), and other contact details that you provide.
  • The names and dates of birth of other individuals as required.
  • Your school/group’s name, school/group’s address, school/group’s telephone number(s) and contact name(s) as relevant.
  • Your payment information.
  • Images, photos and videos and the consent given if those persons in these are under the age of 18.
  • Your future communication preferences.
  • Your IP address.
  • Your marketing and cookie preferences.
  • Relevant medical details if our first aiders are treating you after an incident.
  • Your right to work in the UK and your age.
  • Other personal information that you voluntarily provide through your CV.

How We Use Your Personal Data

We collect, process and disclose your personal data only for specific and limited purposes. For example, to process your payments, to assess and handle any complaints, to develop and improve our products, services, communication methods and the functionality of our websites, to provide personalised events, products, communications and targeted advertising as well as specific recommendations to you.

We also create profiles by analysing the information about your online browsing, searches and purchase behaviour and your interactions with any of our promotional communications by building segments (creating groups that have certain common characteristics) and by placing your personal data in one or more segments.

Additionally, House of Frankenstein processes your personal data using automated means. An automated decision is a decision which is made solely by automatic means, where no humans are involved in the decision-making process related to your personal data.

We collect, process and disclose your personal data for the following purposes:

  • Answer any enquiries that you make with us.
  • Provide you with the services that you require from us.
  • Create and manage your booking, birthday party booking or group or school booking.
  • Process payments and generate invoices for any of our services.
  • Verify your identity for security purposes.
  • Help make our website(s) as useful to you as possible.
  • Allow you to interact with us using social media.
  • Deliver advertisements of services, events and promotions that might be of interest you, but only where you have provided express consent.
  • Assist you if you have a medical incident.
  • Meet our legal obligations.
  • Make recruitment decisions.

Information which does not identify any individual may be used in a general way by us or third parties on our behalf, for purposes such as quality control or the improvement of our services and website(s).

When we collect and use your personal data for purposes mentioned above or for other purposes, we will inform you before or at the time of collection.

Where appropriate, we will ask for your consent to process the personal data. Where you have given consent for processing activities, you have the right to withdraw your consent at any time.

How We Share Your Data

House of Frankenstein (Bath Attractions Ltd) takes the privacy and security of your data extremely seriously. The majority of data use, as noted above, is contained within the company however we may share certain facets of this data with selected third parties in the following circumstances:

  • Third party service providers processing personal data on our behalf, for example to process credit cards and payments, host, manage and service our data, distribute emails, research and analysis, manage brand and product promotions as well as administering certain services and features. When using third party service providers we enter into agreements that require them to implement appropriate technical and organizational measures to protect your personal data.

  • Other third parties to the extent necessary to:
    1. comply with a government request, a court order or applicable law;
    2. prevent illegal uses of our Site, violations of our Site’s Terms of Use and our policies;
    3. defend ourselves against third party claims; and
    4. assist in fraud prevention or investigation (e.g., counterfeiting).

We may also transfer personal data we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a reorganization, spin-off, dissolution or liquidation).

How Do We Protect Your Personal Data

We take every effort to protect your personal data from misuse, interference, loss, unauthorised access, modification or disclosure.

Our measures include implementing appropriate access controls, investing in the latest Information Security Capabilities to protect the IT environments we leverage, and ensuring we encrypt, pseudonymise and anonymise personal data wherever possible.

Access to your personal data is only permitted among our employees and agents on a need-to-know basis and subject to strict contractual confidentiality obligations when processed by third parties.

The personal data we collect (or process) will be stored in the UK and Europe.

Some of the data recipients with whom we share your personal data may be located in countries other than the country in which your personal data originally was collected. The laws in those countries may not provide the same level of data protection compared to the country in which you initially provided your data. Nevertheless, if we transfer your personal data to recipients in other countries, or in the UK, we will protect that personal data as described in this privacy policy and in compliance with applicable law.

How Long Do We Keep Your Personal Data

Your personal information will be retained for as long as is necessary to carry out the purposes set out in this privacy policy (unless a longer retention period is required by applicable law).

Your data may also be retained so that we can continue to improve your experience with us and to ensure that you receive any loyalty rewards which are due to you.

We retain the identifiable data we collect directly for targeting purposes for as little time as possible, after which we employ measures to permanently delete it.

We will actively review the personal data we hold and delete it securely, or in some cases anonymise it, when there is no longer a legal, business or consumer need for it to be retained.

For personal data related to product purchases, we retain this longer to comply with legal obligations (such as tax and sales laws and for warranty purposes).

Your Rights In Relation To How Your Personal Data Is Processed

GDPR and relevant regulations governed across the UK and EU provide you with the following rights, in addition to your right to be informed (which is met by this policy) and your right to direct marketing (as explained above).

You have the right to:

  • Request the data we hold about you.
  • Have your data corrected if it is inaccurate.
  • Request to have your data erased if we are no longer entitled to use it or are keeping it for too long.
  • Have your data restricted or blocked from processing.
  • Object to processing carried out on the basis of legitimate interest.
  • Port your data.

These rights are not absolute. Where we have obtained your consent for the processing of your personal data, you have the right to withdraw your consent at any time.

If you would like to request a copy of your personal data or exercise any of your other rights, please contact us by emailing info@houseoffrankenstein.com with the title GDPR. To safeguard your information, we may need to verify your identity before granting access, making corrections or deleting your information.

If you receive Mary Shelley’s House of Frankenstein marketing communications, you can opt-out at any time by clicking the unsubscribe button at the bottom of the email or by contacting the digital marketing team with a request to be removed from marketing communications.

Please note: if you hold a valid ticket or if you have an event booked with us, we will require your data to enable us to fulfil your requirements efficiently and effectively.

Additional Notes on Tracking Within Our Website and Platforms

When you first visit our website, you are given the option to accept cookies.

Cookies are small files of letters or numbers that will be downloaded onto your computer or device. We use cookies in order to improve your browsing experience and make our website work more efficiently for you. We also use cookies to obtain service information so that we can improve our site.

Please be aware that we do not have control over cookies used by our external third-party service providers.

Please be aware you can change your cookie preferences in your browser.

The following cookies are used to track user decisions, namely whether or not they have agreed to our use of cookies.

  • AgreeTracking
  • DoNotShowAgain

Google.com

The website uses Google Analytics to track user activity on the site. Google uses the following cookie to do that.

  • _ga
  • _gid
  • _gat

YouTube.com

The website uses YouTube to deliver video content, YouTube uses the following cookies to track user preferences.

  • GPS
  • PREF
  • VISITOR_INFO1_LIVE
  • YSC

Cloudflare

We use CloudFlare as a site caching and security service. CloudFlare uses the following cookie to track user security information.

  • __cfduid

Amazon Web Services

Our ticketing and events management platform is hosted using Amazon Web Services. All data stored is encrypted and separated from any other business or technical entities. This data is managed in accordance with the policies and terms noted above and is not aggregated with other third-party profiling or analysis agencies.

Google Analytics and Google Adwords

We use Google Analytics to monitor how you use our website, for example which pages are visited and how long you spend on each page, which documents are downloaded, whether there are problems when completing forms or with links. By doing this, we can develop our website content and functionality in order to provide you with a better user experience. Data may also be collected and put together to make inferences about things such as your age, geographical location and interests, and it may be used by Google Adwords to display our adverts to you.

Data is passed to us in an anonymised form so we are unable to personally identify you. We do not hold any personal data collected by Google Analytics, nor can we access the data. You are therefore subject to Google Analytics’ Date Privacy and Security.

You can opt out of Google Analytics’ tracking at any time by using Google Analytics’ Opt-Out Browser Add-on.

You can opt out of personalised adverts by Google Adwords at any time by using your Ads Settings.

Links to Other Websites

Our website may contain links to other websites of interest. However, you should note that we do not have any control over these other websites. Once you have used any of these links to leave our site, therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting these sites and such sites are not governed by this privacy statement.

Engaging with Social Media

Social media platforms such as Facebook, Twitter, Instagram and YouTube are a great way for us to engage and communicate with you.

Please be aware that all users of social media platforms are subject to the terms and conditions of the platform provider as well as the privacy policies and use of technology such as cookies. Information that you share with us through these platforms may therefore be used or sold for commercial purposes by the provider or us.

When engaging with us through social media, please exercise caution with regards to your personal details and privacy. Never share personal or sensitive information with us through these platforms, for example names, addresses, emails, date of birth. If your query includes personal information, please feel free to contact us through our website.

How to Make A Complaint or Mark Concerns About Personal Data Handling

If you are unhappy with the way we have handled your personal data, please contact us in the first instance as we would like to resolve the issue immediately. We may have made a genuine error or missed a flaw in one of our processes and there may be a legitimate reason we have handled your data in this way.

If we are unable to resolve the issue to your satisfaction and you believe we have handled your data unlawfully, you are able to report your concerns to the ICO.

Contact Us

You can contact us through postal mail:

Mary Shelley’s House of Frankenstein
37 Gay Street
Bath
BA1 2NT

Or by email: info@houseoffrankenstein.com

Keeping Up-to-Date

We will update this Privacy Notice when necessary to reflect customer feedback and changes in our products and services. When we post changes to this statement, we will revise the “last updated” date at the top and bottom of this Notice.

If the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of Privacy Notice changes).

We will not reduce your rights under this Privacy Notice without your consent.

This policy was last updated December 2020.