Privacy Policy

For the purposes of applicable UK data protection law, the organisation responsible for the personal information described in this Privacy Policy is:

Zunzo Bounce Factory t/a Zunzo Party Hire
43 Rosthwaite Close
Hartlepool
Durham
TS24 8RD
United Kingdom

Email: info@zunzobouncefactory.co.uk

Website: https://zunzobouncefactory.co.uk

Customers can contact us using the email above with privacy questions or requests concerning their personal information.

Depending on how you interact with Bounce Factory, we may collect and process information including:

• name;
• email address;
• telephone number;
• account information;
• booking information;
• booking references;
• event and session information;
• ticket information;
• information about participating children;
• child names;
• ages or dates of birth;
• optional child profile photographs;
• digital waiver records;
• digital signatures;
• check-in and attendance records;
• prepaid extras and redemption records;
• food and drink orders;
• table numbers where applicable;
• referral and reward information;
• ticket gifting/transfer information;
• delegated waiver information;
• marketing preferences and consent records;
• communications with Zunzo;
• technical information relating to use of our website;
• cookie and similar technology information where applicable; and
• photographs or video captured in connection with events where applicable.

We only seek to collect information reasonably necessary for the purposes for which it is used.

Customers may create a Bounce Factory account.

Account information may be used to provide features including:

• My Account;
• My Tickets;
• booking history;
• booking amendments;
• cancellations;
• Saved Children;
• digital waivers;
• ticket gifting;
• referrals and rewards;
• eligible food ordering; and
• management of upcoming bookings.

Customers are responsible for keeping their login details secure.

Access to private account information must require appropriate authentication.

Because Bounce Factory events are designed for families, we may need to process information relating to children attending our events.

This may include:

• child's name;
• age or date of birth;
• optional profile photograph;
• event/session participation;
• ticket association;
• waiver status;
• check-in information; and
• relevant prepaid extras.

This information is used only where reasonably necessary to manage participation, bookings, safety, waivers, event administration and related services.

Children's information requires particular protection.

Do not use children's profile information for direct marketing to children by default.

A Saved Child profile is a reusable customer-account feature.

Historical event participation and waiver records should remain separate from later edits to the Saved Child profile where required for accurate record keeping.

We may process personal information where necessary to:

• provide and manage bookings;
• take and administer payments;
• issue tickets;
• manage customer accounts;
• identify event participants;
• administer digital waivers;
• manage ticket transfers and gifting;
• check customers into events;
• provide prepaid extras;
• manage face-painting redemptions;
• provide food and drink ordering;
• operate referral and reward programmes;
• provide customer support;
• send essential booking/event communications;
• manage cancellations and refunds;
• maintain security and prevent fraud or misuse;
• maintain appropriate business and transaction records;
• comply with legal obligations;
• improve our services where lawful; and
• send marketing where permitted.

We process personal information only where we have an appropriate lawful basis under applicable data protection law.

Depending on the particular purpose, this may include:

Do not claim that consent is the lawful basis for every type of processing.

Bounce Factory uses Stripe to process online payments.

This may include payments for:

• admission tickets;
• prepaid extras;
• eligible food and drink purchases;
• VIP experiences where offered; and
• other eligible purchases.

Stripe processes payment information required to complete transactions and may process information in accordance with its own legal and regulatory responsibilities and privacy practices.

Zunzo does not need to store customers' complete payment card details in order to administer bookings.

Our systems may retain information about the transaction such as:

• payment status;
• amount;
• date/time;
• refund status; and
• relevant Stripe/payment references.

Where a waiver is required, we may retain information including:

• participant association;
• booking;
• event/session;
• waiver version;
• signer name;
• signer relationship where applicable;
• acknowledgement;
• digital signature;
• date and time signed; and
• relevant audit information.

Signed waiver records may need to be retained as evidence of the agreement that applied at the time.

Editing a Saved Child profile must not silently alter historical signed waiver records.

Where a customer sends a waiver to another parent or guardian, we may process information necessary to send and administer that invitation.

This may include recipient contact details, invitation status and information about the person who ultimately signs.

Invitation recipients must not receive access to unrelated booking, payment, account or participant information.

Contact details supplied solely for administering a waiver must not automatically be added to marketing lists.

Each booking has a Booking Reference which may be represented by a QR code.

The Booking Reference is an identifier and is not authentication.

Possession of a Booking Reference must not provide public access to private customer information.

Authorised staff may use the Booking Reference/QR to access only the information appropriate to their role.

Check-in records may include:

• booking/participant;
• event;
• session;
• check-in status; and
• date and time of arrival.

Where customers gift or transfer eligible tickets, we may process information about the sender, recipient, affected ticket and transfer status.

Recipients must only receive information reasonably necessary to accept and use their transferred ticket.

They must not receive access to unrelated tickets, payment information, other children, referrals or private information belonging to the original customer.

Contact information provided solely to facilitate a ticket transfer must not automatically be used for marketing.

Where customers purchase extras, we may record:

• extra purchased;
• quantity;
• booking/event/session;
• quantity redeemed;
• quantity remaining;
• redemption date/time; and
• authorised staff member recording redemption.

Face-painting staff should only have access to the minimum information required to verify and redeem the applicable entitlement.

They should not receive unnecessary access to customer addresses, payment information, referral data or unrelated booking information.

Where digital food ordering is available, we may process:

• customer/account;
• eligible booking/session;
• order details;
• table number;
• payment status;
• applicable reward/discount; and
• order timing/status.

This information is used to process, prepare, deliver and administer the order and associated payment.

Where customers use Refer & Earn or other reward features, we may process information needed to:

• identify referral relationships;
• determine eligibility;
• prevent self-referral or misuse;
• track pending and qualifying referrals;
• calculate reward levels; and
• apply eligible discounts.

We should only use information reasonably necessary to administer and protect the programme.

A person being referred must not automatically be opted into marketing simply because somebody shared a referral link with them.

Essential service communications and marketing communications are different.

We may send operational communications necessary to administer a booking even where the customer has not opted into marketing.

These may include:

• booking confirmations;
• tickets;
• cancellation/refund information;
• waiver reminders;
• important event information; and
• operational changes.

Marketing emails, texts or similar electronic communications will only be sent where permitted under applicable data protection and electronic communications rules.

Where consent is required, it must be:

• a genuine choice;
• clearly explained;
• actively given;
• appropriately recorded; and
• capable of being withdrawn.

Customers must be able to unsubscribe from marketing easily.

Withdrawing marketing consent must not cancel essential booking communications.

Photographs and video may sometimes be captured at Bounce Factory events.

Where identifiable images of children are intended for promotional or marketing use, Zunzo will handle this carefully and use an appropriate lawful basis and consent process where required.

A child's optional Saved Child profile photograph is for account/event administration and must not automatically be treated as permission to use that photograph publicly or for marketing.

Do not implement facial recognition or biometric identification.

Where customers have questions about event photography, they can contact:

info@zunzobouncefactory.co.uk

The website may use cookies and similar technologies.

Strictly necessary technologies may be used where required for functions such as:

• security;
• authentication;
• maintaining sessions;
• remembering a shopping basket; and
• delivering requested website functionality.

Where consent is legally required for non-essential cookies or similar technologies, they must not be activated until the appropriate choice has been made.

Users should be provided with clear information about relevant cookie categories and purposes.

If the website already has a cookie-consent system, preserve it.

Do not invent analytics or advertising providers that are not actually used by the website.

We do not sell customers' personal information.

Information may be shared where reasonably necessary with service providers involved in operating Bounce Factory, such as:

• payment providers including Stripe;
• website/hosting/technology providers;
• email or communications providers;
• authorised event staff;
• relevant contractors or suppliers where necessary to provide a purchased service; and
• professional, regulatory or legal authorities where required.

Only information reasonably necessary for the relevant purpose should be shared.

Where third-party providers process personal information, appropriate data protection arrangements should be used where required.

Some technology or service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps required by applicable UK data protection law to ensure that relevant safeguards are in place.

Do not name specific international transfer mechanisms or countries unless they are actually applicable to the services currently used.

We do not keep personal information for longer than reasonably necessary for the purpose for which it was collected, subject to applicable legal, accounting, insurance, dispute-resolution and record-keeping requirements.

Different categories of information may require different retention periods.

For example:

• active account information may be retained while the account remains active;
• transaction and financial records may need to be retained for legal or accounting purposes;
• signed waivers may need to be retained as evidence;
• booking and attendance records may be retained where reasonably necessary for administration, safety, insurance or dispute purposes;
• marketing information may be retained while the relevant permission remains valid or where necessary to record an opt-out.

Information should be securely deleted, anonymised or otherwise appropriately disposed of when it is no longer required.

Do not invent fixed retention periods such as “7 years” unless an actual retention schedule has been confirmed.

We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

Access to customer information should be restricted according to role and operational need.

Examples include separating customer, event staff, face-painter, manager and administrator permissions where applicable.

No online system can be guaranteed completely secure, but appropriate measures should be maintained and reviewed.

Depending on the circumstances and applicable law, individuals may have rights including:

• the right to be informed about how their information is used;
• the right to request access to their personal information;
• the right to request correction of inaccurate information;
• the right to request erasure in applicable circumstances;
• the right to request restriction of processing in applicable circumstances;
• the right to object to certain processing;
• the right to data portability where applicable;
• rights relating to certain automated decision-making where applicable; and
• the right to withdraw consent where processing relies on consent.

These rights are not absolute in every circumstance.

For example, we may sometimes need to retain certain records despite an erasure request where we have an applicable legal or other lawful reason to do so.

Privacy requests can be sent to:

info@zunzobouncefactory.co.uk

We may need to verify the identity or authority of the person making a request before disclosing or changing personal information.

Children have data protection rights in relation to their personal information.

Where appropriate, a parent or person with parental responsibility may exercise rights on behalf of a child, taking account of the child's circumstances and applicable law.

Requests relating to a child's information should be handled carefully to ensure information is not disclosed to somebody who is not authorised to receive it.

If you have a concern about how we use personal information, please contact us first so that we can investigate:

info@zunzobouncefactory.co.uk

Individuals also have the right to raise a data protection concern with the UK's data protection regulator, the Information Commissioner's Office (ICO).

We may update this Privacy Policy where our services, technology or legal obligations change.

The current version will be published on our website together with its last-updated date.

Where appropriate, we may notify customers of significant changes.

For questions about this Privacy Policy, use of personal information or a data protection rights request, contact:

Zunzo Bounce Factory t/a Zunzo Party Hire
43 Rosthwaite Close
Hartlepool
Durham
TS24 8RD
United Kingdom

Email: info@zunzobouncefactory.co.uk

Website: https://zunzobouncefactory.co.uk

Last updated: 16 September 2026