Privacy policy

Plain-English details on how we collect, use and protect personal information when you use Orlando Fun Co.

Authorised ticket supplyClear product terms
Clear pricingNo surprises at checkout
UK-based supportHelpful guidance
Secure checkoutProtected payments

Legal & privacy

This policy explains how The Orlando Fun Company collects, uses and protects personal information when you use our website, contact us, sign up for emails or buy Orlando tickets and experiences.

Plain-English summary: we collect the information needed to answer your questions, process bookings, deliver tickets, support your account and, if you opt in, send helpful Orlando updates. We do not sell your personal data.

Last updated June 2026

Applies to orlandofun.co and Orlando Fun Co email communications

Contact tickets@orlandofun.co

Section 1

Who we are

The Orlando Fun Company LTD is a UK-based Orlando ticket and planning business for families. We provide ticket information, booking support, day trip guidance and Orlando planning content.

For UK data protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, The Orlando Fun Company LTD is the data controller for personal information we collect and use.

The Orlando Fun Company LTD

Website: orlandofun.co

Email: tickets@orlandofun.co

Phone: 0330 053 1654 · International: +44 330 053 1654

Company number: 17204319 · Registered in England and Wales

Section 2

Personal data we collect

We only collect personal data that is needed for the purposes described in this policy. The exact data depends on how you use the site or contact us.

Identity and contact details

Name, email address, phone number, billing or postal address, and contact preferences.

Order and booking details

Ticket type, quantity, travel dates, passenger details where required for the booking, order reference, payment status and refund history.

Payment details

Payment status and limited card information such as last four digits. Full card details are processed by our payment provider and are not stored by us.

Messages and enquiries

The contents of emails, forms, customer service messages, attachments and any information you choose to include.

Account and marketing preferences

Account login details, order history, opt-in or opt-out status, unsubscribe records and communication preferences.

Technical and usage data

IP address, browser, device type, approximate location, pages visited, referring URL, cookie consent and analytics data.

Data about children

Our website and services are intended for adults. We do not knowingly collect personal data directly from children under 16. Where attraction operators require child passenger details for a family booking, we process those details only to fulfil the booking.

Special category data

We do not intentionally collect special category data such as health information, ethnicity, political opinions, religious beliefs or biometric data. If you choose to share sensitive information with us, we will handle it carefully and only where necessary for your enquiry or booking.

Section 3

How we use your personal data

To process and fulfil orders: confirming bookings, arranging ticket delivery, sending order updates and handling refunds or cancellations.
To take payment securely: processing payments through our payment provider and reducing fraud risk.
To provide customer support: answering questions before and after booking, resolving issues and keeping a record of what we discussed.
To manage accounts: letting customers log in, view orders, manage preferences and reset passwords.
To send essential emails: order confirmations, ticket delivery, account notices and important service updates.
To send marketing, where allowed: Orlando tips, ticket updates and offers if you have opted in or where the soft opt-in applies to existing customers.
To improve the website: understanding which pages help families most, fixing usability issues and improving performance.
To meet legal obligations: keeping accounting records, responding to lawful requests and protecting our legal rights.

We do not sell, rent or trade your personal data.

Section 4

Legal bases for processing

Contract performanceUsed when we need your data to provide a service you asked for, such as taking payment, confirming a booking or delivering tickets.

Legal obligationUsed when UK law requires us to keep or use information, such as tax and accounting records.

Legitimate interestsUsed for normal business purposes such as fraud prevention, security, customer service records, analytics and limited direct marketing to existing customers.

ConsentUsed where we ask for clear permission, such as new marketing sign-ups or non-essential cookies. You can withdraw consent at any time.

Section 5

Email communications

Transactional and service emails

If you place an order, create an account or ask for help, we send emails needed to provide that service. These may include order confirmations, ticket delivery, password resets, security notices and replies from our team.

Marketing emails

We may send Orlando planning tips, ticket updates and offers if you have opted in. Existing customers may also receive relevant updates under the Privacy and Electronic Communications Regulations soft opt-in, unless they opt out.

Unsubscribing

You can opt out of marketing at any time by using the unsubscribe link in a marketing email or contacting tickets@orlandofun.co. You may still receive essential service emails about active orders.

Inbound emails

When you email us, we use your address, message content, attachments and timestamp to respond and manage the enquiry or booking. Customer service email threads are normally kept for up to three years unless they form part of a transaction record.

Section 6

Cookies and tracking technologies

Cookies are small files placed on your device. They help the website work, remember choices and show us how visitors use the site.

Strictly necessary cookiesNeeded for core functions such as basket, checkout, login sessions, security and cookie consent preferences.

Functional cookiesRemember useful preferences. You can decline these, but some convenience features may not work as smoothly.

Analytics cookiesHelp us understand site performance and improve pages. These are used only where consent is required and has been given.

Marketing cookiesMay help measure advertising or show relevant content. These are optional and consent-based.

You can manage cookies through the site cookie banner where available and through your browser settings. Blocking all cookies may affect checkout, login or basket features.

Section 8

International data transfers

Some providers may process personal data outside the UK. Where this happens, we take steps required by UK GDPR, such as using UK adequacy regulations, International Data Transfer Agreements, UK addenda to Standard Contractual Clauses or other approved safeguards.

You can ask us for more information about relevant transfer safeguards by emailing tickets@orlandofun.co.

Section 9

How long we keep your data

Order and transaction recordsUsually kept for seven years to meet tax, accounting and company record requirements.

Customer accountsUsually kept for three years after the last login or transaction, unless legal reasons require longer retention.

Customer service emailsUsually kept for three years from the last message in a thread, unless connected to a transaction or dispute.

Marketing consent recordsKept while you are subscribed and for a reasonable period afterwards so we can demonstrate consent or honour opt-outs.

Unsubscribe recordsKept as a suppression list so we do not contact you again with marketing.

Analytics, cookies and security logsKept for limited periods based on the tool, consent record or security need.

Section 10

Your rights under UK GDPR

You have rights over your personal data. Some rights are subject to limits, but we will explain clearly if that applies.

Access

Ask for a copy of the personal data we hold about you.

Rectification

Ask us to correct inaccurate or incomplete information.

Erasure

Ask us to delete personal data where there is no good reason for us to keep it.

Restriction

Ask us to pause certain processing while a concern is reviewed.

Portability

Ask for certain data in a structured, commonly used format.

Object

Object to direct marketing or processing based on legitimate interests.

Withdraw consent

Withdraw consent where processing relies on consent.

Automated decisions

Object to decisions made solely by automated processing where they significantly affect you. We do not currently carry out this kind of decision-making.

To exercise your rights, email tickets@orlandofun.co with the subject line “Data rights request” or call 0330 053 1654. We may need to verify your identity before acting on a request.

Complaints

If you are unhappy with how we handle personal data, please contact us first so we can try to resolve it. You can also complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113.

Section 11

Security

Encryption: our website uses HTTPS for data sent between your browser and our servers.
Access controls: access to personal data is limited to people and processors who need it for their work.
Payment security: full card data is handled by our PCI-DSS compliant payment provider rather than stored by us.
Review and minimisation: we review what data we hold and aim to keep only what is needed.

No online service can guarantee perfect security. If you think your account or information may be at risk, contact us straight away.

Section 12

Links to third-party websites

Our website may link to third-party websites, including attraction, park, travel and payment services. This privacy policy applies to orlandofun.co and our own email communications. Other websites have their own privacy policies.

Section 13

Changes to this policy

We may update this policy to reflect changes in our services, legal requirements or data practices. When we make material changes, we will update the date on this page and, where appropriate, notify customers directly.

Section 14

Contact us about privacy

If you have a question or request about this policy or how we handle personal data, contact us using the details below. We aim to respond to privacy-related enquiries within five business days.