Privacy Policy

Who we are

Castle Christmas is run by Elf Town, the company behind Elf Town Galway. Elf Town is the data controller for the personal information described in this policy.

Castle Christmas, King John’s Castle, Limerick, Ireland
Email: info@castlechristmas.com

For anything to do with your personal information — questions, requests or complaints — email us and put “Data Protection” in the subject line.

We handle your information in line with the General Data Protection Regulation (EU) 2016/679 and the Data Protection Act 2018.

The information we collect

Booking information. Our tickets are sold through our booking partner, ClearBookings. When you book you provide a name, email address, phone number, billing details, the tickets you want and the date and time of your visit. Your payment is handled by our booking partner and their payment provider.

Information about children. Tickets are issued by age band, so a booking tells us how many children are coming and roughly how old they are. If you choose to share “Santa Secrets”, you may also give us a child’s first name, age and a few personal details for Santa to mention during the visit.

Accessibility and carer information. If you tell us about an access requirement, or send us a photograph of a carer card so that we can issue a discount code, that can include information about health or disability. We ask for it only because you have asked us for something, and we use it for nothing else.

Messages you send us. If you email us we keep your message, your email address and our reply so that we can deal with your query and anything that follows from it.

Photographs and video. Professional photographs are available to buy during your visit. CCTV operates at the venue for safety and security. We also sometimes photograph or film at the event for marketing — if you would prefer not to appear, tell a member of staff when you arrive and we will do our best to keep you and your family out of shot.

Website information. This website sets no cookies, does not track you and uses no analytics. Our hosting provider keeps short-term technical logs, including IP addresses, to deliver the site and protect it from attack.

Why we use it, and our legal basis

We use your information only for the reasons set out below. Data protection law requires us to have a legal basis for each one:

• To sell you a ticket, admit you to the event and deal with changes, cancellations and refunds — because we need it to perform our contract with you.
• To make your visit safe and accessible, including carer discounts and access arrangements — with your consent, which you can withdraw at any time.
• To include Santa Secrets in your child’s visit — with your consent, which you can withdraw at any time before your visit.
• To answer your emails and handle complaints — because we have a legitimate interest in running the event properly.
• To keep the venue safe and secure, including CCTV — because we have a legitimate interest in the safety of guests and staff.
• To keep accounting and tax records — because the law requires it.

We do not sell your personal information to anyone, and we do not use it to build profiles or to target advertising.

Children’s information

We collect information about children only from the parent or guardian making the booking, never from the child directly. There is nothing on this website for a child to sign up to or fill in.

We never use a child’s information for direct marketing, for profiling or to target them in any way. Irish data protection law makes that a criminal offence, and we would have no wish to do it in any case.

Santa Secrets are used for your visit and for nothing else. We share them only with the performers who need them on the day.

A parent or guardian can ask us at any time to show them, correct or delete the information we hold about their child, using the contact details above.

If you are a child reading this: grown-ups tell us your first name and how old you are so that we can give you the right ticket, and sometimes they tell Santa something special about you. We use it only for your visit and we do not show it to anyone else. If you want to know what we were told, ask the grown-up who booked the tickets and they can ask us.

Who we share it with

We share your information only with organisations that help us run the event, and only what they need:

• ClearBookings, our ticketing platform, and the payment provider that processes your payment.
• The venue operator at King John’s Castle, where this is needed for access, safety or an emergency.
• Our photography partner, if you buy professional photographs.
• Our email and website providers, who store our email and serve this site.
• Our accountants, insurers and professional advisers, and An Garda Síochána or another authority where the law requires it.

We require each of them to use your information only on our instructions and to keep it secure. Some store data outside the European Economic Area; where that happens it is covered by the European Commission’s standard contractual clauses or an equivalent safeguard.

How long we keep it

We keep your information only for as long as we need it for the reasons set out above, and for as long as tax and accounting law requires us to keep records of your booking. After that we delete it.

If you would like to know how long we hold something in particular, email us and we will tell you.

Your rights

You can ask us to:

• give you a copy of the information we hold about you, or about your child;
• correct anything that is wrong;
• delete information we no longer need;
• restrict what we do with it, or object to us using it;
• give you a copy in a portable format, or send it to someone else;
• stop using information you gave us with your consent — you can withdraw consent at any time, and that does not affect anything we did before you withdrew it.

Email info@castlechristmas.com and we will reply within one month. There is no charge.

If you are unhappy with how we have handled your information you can complain to the Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, or at dataprotection.ie. We would rather you told us first, so that we can put it right.

Cookies and this website

This website sets no cookies, uses no analytics and carries no advertising or tracking tags. That is why you are not being asked to accept anything.

The site loads its typefaces from Google Fonts, which means your browser contacts Google’s servers and Google receives your IP address. Nothing else is sent.

When you click through to book you leave this site for our booking partner’s pages. They set their own cookies and have their own privacy policy, which you should read there.

Keeping your information safe

We limit access to booking information to the people who need it to run the event, and this website and our booking pages are encrypted in transit. No system is perfect, but if a breach ever put your rights at risk we would tell you and the Data Protection Commission, as the law requires.

Changes to this policy

If we change this policy we will update the date shown at the end of this page.

Last updated: 23 September 2026