Castle Adventure Open Farm Privacy Policy

Privacy policy

We're committed to making sure your privacy is protected.

Here’s how we do just that.

This website is owned and run by Castle Adventure Open Farm. When we ask you to provide personal information when using our website, you can be assured it will only be in accordance with this privacy policy under the obligations of the Data Protection Act 1988 and the General Data Protection Regulation which comes into force in 2018. This privacy policy explains what information Castle Adventure Open Farm collects about you and how it will be used. When you access and use our website you agree to be legally bound by all our terms and conditions as well this privacy policy.

We may need to change this policy from time to time. You should check this page from time to time to make sure you’re happy with any changes.

What information do we collect about you, and why?

We will only ever use your data when there is a legal basis for doing so. The most common uses of your personal data by us are:

• In order to perform a contract between you and us such as e-mailing you your e-tickets and/or details of a purchase you have made such as an annual pass or animal adoption
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override these interests
• Where we need to comply with a legal or regulatory obligation such as in our recruitment process
• When you have given us consent to process your personal data in order to send marketing info to you

This may include the following information;

• Name and job title
• Contact information including postal and/or email address, telephone number, etc.
• Credit card or other payment card details
• In relation to our online job application form we will also collect the following;
  • PPS number
  • Previous employment history
  • Educational and professional qualifications
  • Details of convictions/offences

Third party information

We may also collect third party information such as the name of a gift recipient for whom you have purchased a gift. We will assume that you have the necessary permission to provide these details. In relation to our adoption gift packs the name of the third party will be displayed on public boards at the relevant animal enclosures and again we will assume you have the necessary permission to provide the recipient’s name for this purpose.

Storing of personal data

We promise to store the information we hold on you in secure third party systems or in accordance with the suitable physical, electronic and managerial procedures we have put in place to safeguard and secure the information we collect through our website and through other contact with our organisation. In many instances we will delete this information once it has been processed but we will not keep it for longer than five years unless you continue to remain subscribed to our databases.

Financial security

We’re committed to ensuring your financial security when buying tickets and/or products on our website.

We use a third party online ticketing supplier called Digitickets who is PCI compliant. The customer data of ours they hold is hosted on servers on the EU and subject to the General Data Protection Regulations.

Any personal and financial information you enter when purchasing our online tickets and/or products takes place on Digitickets’ secure and tamper-proof SSL.

We use the following PCI compliant online payment gateways to accept payments on our website;

PayPal
STRIPE

Marketing

We provide the opportunity for visitors to our website to sign up to receive marketing communication from us through our email newsletters. We use a double opt-in integration form from our third party newsletter provider, MailChimp, just to make sure you really did mean to sign up. We will never require you to opt-out of receiving information from us. You can easily unsubscribe from our email newsletter by clicking the link at the bottom of our newsletters or by contacting us at info@openfarm.ie. Your information is either captured by and stored in Mailchimp or uploaded to Mailchimp by us with our permission. We’re able to easily update or delete your information within Mailchimp. Feel free to view Mailchimp’s privacy policy and terms.

We occasionally run competitions on our website to win tickets, products or experiences and as part of this we will ask permission to hold your data until a winner has been selected. We will also ask permission to publish your name on our website as the winner as social proof.

We may contact you to request a review of an experience/product you’ve purchased. We will provide a link to a review form on our website where you can tick to say whether you give permission for your name, location and a picture you’ve uploaded to be captured, stored and included on our website.

Any information collected on forms on our website is transferred securely through our tamper-proof SSL via email communication to a direct individual who is responsible for the safe processing and deleting of that data once it has been processed.

Some of our enclosures feature webcams which are streamed live on our website. We have ensured these cameras are focused on the animals and that visitors are not identifiable. However, there are some cameras, such as the one at penguin coast which captures those taking part in the feeding experience. You will be asked at the time of booking if you consent to the fact you may appear on these webcam streams while taking part in your experience.

Cookies

This website uses cookies in order to improve your experience. The information these cookies store will be kept private and not sold to any third parties.

You can choose not to accept cookies by changing the settings in your internet browser.

Google Analytics

We use Google Analytics to collect data about traffic to the castle adventure open farm website via Google advertising cookies. Non personally identifiable information is stored indefinitely for historical reasons to improve the overall user experience. As well as data collected through a standard Google Analytics implementation we also use Google Display Network Impression Reporting and DoubleClick Platform integrations.

If you wish to opt-out of Google Analytics tracking please visit and install the Google Analytics Opt-out Browser Add-on.

Google Adwords

We use Google Adwords to offer our products and services to potential customers that search for relevant terms on Google. For more information about the collection, use and sharing of data when using a Google product click here.

Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we don’t have any control over that website. Therefore, we cannot be responsible for the protection and privacy of any information that you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website you are on.

Your rights

Under GDPR you have the right to request details of the personal information we hold about you at any time. Such requests will be provided to you in an accessible format, typically within 1 month of the request being received and will be free of charge. However, if your request is particularly complex we may require longer to process your request and a charge may be incurred, but we will always notify and keep you updated on this. We may also need to request specific information from you such as forms of identification. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

The following are all the other rights that you have under GDPR:

• Request correction of your personal data
• Request erasure of your personal data
• Object to processing or request restriction of processing of your personal data
• Request transfer of your personal data
• Right to withdraw consent.

To exercise any of these rights or for further information with regards to data protection, please contact our Responsible Person:

Contacting us

Castle Adventure Open Farm  has its own data controller who may be contacted at any time;

Edel Carty

Castle Adventure Open Farm

Wardtown Castle

Ballyshannon

Co Donegal

Tel: 071 98 52688
Email: info@openfarm.ie

DigiTickets Privacy Policy

Policy Owner

This policy is owned and distributed by IT and Compliance manager of Digital Ticketing Systems Limited

Who we are

In this Privacy Policy, references to "we", "us", and "our"" are to Digital Ticketing Systems Limited (Company number 07044584). References to "our Website" or "the Website" are to *.digitickets.co.uk.

Digital Ticketing Systems Limited is the data controller responsible for the personal information collected through this Website.

Information We Collect

We may collect and process the following categories of personal information:

Information You Provide Directly

When you contact us, make a purchase, register for services, or complete forms on our Website, we may collect information such as:

• Name
• Postal address
• Email address
• Telephone number
• Purchase and booking information
• Any other information voluntarily provided by you

Payment Information

Payments made through our Website are processed by authorised payment service providers. We do not store your full credit or debit card details on our systems.

Our payment providers may process payment information and carry out fraud prevention and verification checks. Where international transfers are required, appropriate safeguards will be applied in accordance with applicable data protection laws.

Digital Ticketing Systems is PCI DSS v4.0.1 compliant and are annually assessed/certified.

Website Usage Information

When you visit our Website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Screen resolution
• Operating system
• Referral source
• Pages visited and actions taken on the Website
• Date and time of access

Marketing Preferences

If you choose to receive marketing communications, we will record your preferences and any interactions with our emails, including whether emails are opened or links are clicked.

Cookies and Similar Technologies

We use cookies and similar technologies to operate our Website, remember your preferences, analyse usage, and improve user experience. Further information is provided in our Cookie Policy below.

How We Use Your Information

We process personal information for the following purposes:

• To provide products and services you request
• To process transactions and fulfil orders
• To provide customer support and after-sales services
• To manage bookings and accounts
• To improve our Website, products, and services
• To ensure Website security and prevent fraud
• To comply with legal and regulatory obligations
• To send marketing communications where we have your consent or another lawful basis to do so

Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

• Performance of a contract: to provide goods or services you have requested.
• Legal obligation: where processing is necessary to comply with legal requirements.
• Legitimate interests: to manage and improve our business, Website security, and customer experience.
• Consent: where required, including for certain cookies and marketing communications.

Where we rely on consent, you may withdraw it at any time.

Sharing Your Information

We may share your personal information with:

• Payment processors
• Hosting and IT service providers
• Delivery and fulfilment partners
• Marketing and communications providers
• Analytics and Website performance providers
• Professional advisers and auditors
• Regulatory authorities, law enforcement agencies, or courts where required by law

All third-party service providers are required to process personal information only on our instructions and in accordance with applicable data protection laws.

We do not sell personal information to third parties.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place, such as:

• Transfers to countries deemed to provide an adequate level of protection; or
• Approved contractual safeguards, such as the UK International Data Transfer Agreement (IDTA) or equivalent mechanisms.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, regulatory, and reporting requirements.

Retention periods vary depending on the type of information and the purpose for which it is processed.

Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help websites function properly, remember preferences, improve performance, and provide analytics information.

How We Use Cookies

We use the following categories of cookies:

Strictly Necessary Cookies

These cookies are essential for the operation of the Website and cannot be disabled through our cookie management tools.

Cookie	Purpose	Duration
PHPSESSID	Maintains user session and shopping basket functionality	Session / 24 minutes
dtAnalyticsConsent	Records cookie consent preferences	1 year

Analytics Cookies

These cookies help us understand how visitors interact with the Website so that we can improve performance and usability.

These cookies are only placed with your consent.

Google Analytics

Examples include:

• _ga
• _ga<container-id>
• _gid
• _gat_<tracker-name>

Used to collect aggregated statistical information about Website usage.

Google Privacy Information:

https://support.google.com/analytics/answer/6004245

Microsoft Clarity

Examples include:

• _clck
• _clsk
• CLID
• ANONCHK
• MR
• MUID
• SM

Used to analyse user interactions and improve Website usability.

Microsoft Clarity Information:

• https://clarity.microsoft.com/blog/cookies-in-clarity/
• https://learn.microsoft.com/en-us/clarity/

Performance Monitoring Cookies

Performance monitoring tools help us identify technical issues and improve Website reliability.

Examples may include cookies used by services such as New Relic.

Managing Cookies

When you first visit our Website, you will be presented with a cookie banner allowing you to:

• Accept all cookies
• Reject non-essential cookies
• Choose your cookie preferences

You may change your preferences at any time through our cookie settings tool.

You can also manage cookies through your browser settings. Disabling certain cookies may affect Website functionality.

Your Data Protection Rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Restrict processing
• Object to processing
• Request portability of your data
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Information Commissioner's Office (ICO)

For more information about your rights, visit:

https://ico.org.uk/

Automated Decision-Making

We do not generally make decisions producing legal or similarly significant effects using solely automated processing.

Where automated tools are used for fraud prevention, security monitoring, or service administration, appropriate safeguards will be applied in accordance with applicable data protection legislation.

Childrens Data

Our Website is not intended to knowingly collect personal information from children unless necessary to provide services requested by a parent, guardian, school, attraction, venue, or authorised organisation.

Where we process children's personal information, we take additional care to ensure appropriate protections are in place.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact:

Digital Ticketing Systems (t/a DigiTickets)

Sentio House, Pynes Hill, Exeter, Devon, EX2 5AZ

www.digitickets.co.uk/compliance-request

If you have concerns about how we use your personal information, you may submit a privacy complaint to us using the contact details above.

We will acknowledge your complaint and investigate it in accordance with applicable data protection legislation. We aim to respond without undue delay and within the timescales required by law.

If you remain dissatisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).

Other Websites

This Privacy Policy applies only to this Website. Links to third-party websites are provided for convenience only. We are not responsible for the privacy practices of those websites, and we encourage you to review their privacy policies before providing any personal information.

Last Updated: 5 August 2026