Privacy Policy

Website Privacy Notice

Gambado is committed to protecting and respecting your privacy. We appreciate your trust in us to do that carefully and sensibly. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. It governs your use of services, content, features, technologies or functions offered by gambado.com and all related sites, applications, and services. Please read the following carefully to understand how we will use your data. When you visit the website, purchase tickets, sign up for a membership or monthly/summer pass, or use the services on our website you accept and consent to this Privacy Policy. By accepting and consenting to this Privacy Policy, you expressly consent to our use of your personal information in the way we describe in this Privacy Policy.

Introduction

This privacy notice provides you with details of how we collect and process your personal data through your use of our site gambado.com, including any information you may provide through our site when you use live chat, purchase a product or use a service, send us communications via feedback or contact forms, sign up to our newsletter or take part in a prize draw or competition.

By providing us with your data, you warrant to us that you are over 13 years of age.

Gambado Ltd is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).

We have appointed a Data Protection Officer who is in charge of privacy-related matters for us. If you have any questions about this privacy notice, please contact the Data Protection Officer using the details set out below.

Contact Details

Full name of legal entity: Gambado Ltd
Name or title of Data Protection Officer: Samsam Farah
Email address: cs@gambado.com
Postal address: Gambado Ltd, 7 Station Court, Townmead Road, Chelsea, London, SW6 2PY

If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.

It is very important that the information we hold about you is accurate and up to date. Please let us know if at any time your personal information changes by emailing us at cs@gambado.com

What Data We Collect About You

Personal data means any information capable of identifying an individual. It does not include anonymised data.

We may process certain types of personal data about you as follows:

  • Identity Data: first name, last name, username, title, date of birth, month of birth, gender, photo of any current named member and associated adults, and CCTV footage if you visit our centres.
  • Contact Data: billing address, delivery address, email address, telephone numbers.
  • Financial Data: bank account and payment card details.
  • Transaction Data: details about payments and purchases made by you.
  • Technical Data: login data, IP addresses, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform, and other technology used.
  • Profile Data: username, password, purchases or orders, live chat conversations, interests, preferences, feedback, survey responses.
  • Usage Data: information about how you use our website, products, and services.
  • Marketing and Communications Data: preferences in receiving marketing from us and third parties, and communication preferences.

We may also process Aggregated Data that does not reveal your identity. If we combine this with personal data so that you can be identified, it will be treated as personal data.

Sensitive Data

We do not collect any Sensitive Data about you, including race, religion, sex life, health data, or criminal records.

Where we are required to collect personal data by law, or under the terms of the contract between us and you do not provide that data, we may not be able to perform the contract. We will notify you if this applies.

How We Collect Your Personal Data

We collect data through:

  • Direct interactions: forms, live chat, social media, email, phone, post.
  • Automated technologies: cookies, server logs, analytics tools.
  • Third parties or publicly available sources:

    Technical Data from:
    • Go High Level
    • Meta (Facebook/Instagram)
    • TikTok
    • Google Analytics
    • Fuse Metrix
    • Zapier
    • Make (Integromat)
  • This list may change from time to time as our tools and service providers evolve.

How We Use Your Personal Data

We use your personal data only where legally permitted, including:

  • To perform a contract with you
  • For our legitimate interests, where your rights do not override those interests
  • To comply with legal or regulatory obligations

We do not rely on consent except for marketing communications.

Purpose

Data Type

Legal Basis

Register you as a new member

Identity, Contact

Performance of a contract

Process orders, manage payments

Identity, Contact, Financial, Transaction, Marketing & Comms

Performance of a contract; Legitimate interest

Manage our relationship with you

Identity, Contact, Profile, Marketing & Comms

Contract; Legal obligation; Legitimate interest

Prize draws, surveys, feedback

Identity, Contact, Profile, Usage, Marketing & Comms

Contract; Legitimate interest

Site administration & protection

Identity, Contact, Technical

Legitimate interest; Legal obligation

Advertising and targeting

Identity, Contact, Profile, Usage, Marketing & Comms, Technical

Legitimate interest

Analytics & website improvements

Technical, Usage

Legitimate interest

Product recommendations

Identity, Contact, Technical, Usage, Profile

Legitimate interest

Marketing Communications

You will receive marketing communications if:

  • You requested information or bought from us
  • You provided details via competitions or promotions
  • You have not opted out

We will obtain explicit opt-in consent before sharing data with third parties for marketing.

You can opt out any time via email (cs@gambado.com) or unsubscribe links.

Opting out does not affect transactional or service communications.

Change of Purpose

We will only use your data for the purposes we collected it unless we reasonably determine that we need it for a compatible purpose. If not, we will notify you and explain the legal basis.

Disclosures of Your Personal Data

We may share your data with:

  • Service providers for IT and admin
  • Legal, financial, and professional advisers
  • HMRC and other authorities
  • Third parties involved in business transfers

All third parties must handle your data in compliance with data protection law and our instructions.

International Transfers

Countries outside the United Kingdom may not provide the same level of protection. We ensure safeguards such as:

  • Transfers only to countries with adequate protection (per UK Government)
  • Use of UK International Data Transfer Agreements (IDTAs) or the UK Addendum to the EU SCCs
  • If no safeguard is available, we will request your explicit consent

Please contact us at cs@gambado.com for details.

Data Security

We have appropriate security to prevent loss, misuse, alteration, or unauthorised access of your data. Access is limited to those with a business need and subject to confidentiality.

We have procedures to handle any data breaches and will notify you and relevant authorities if required.

Data Retention

We retain data only as long as necessary for legal and operational purposes.

Basic data (Contact, Identity, Financial, Transaction) is kept for six years after the end of the customer relationship for tax and legal reasons.

In some cases, we may anonymise your data for statistical use, in which case we may retain it indefinitely.

Your Legal Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request erasure
  • Object to processing
  • Request restriction
  • Request data portability
  • Withdraw consent

You can find full rights at: ICO Individual Rights

Contact us at cs@gambado.com to exercise your rights. We may request ID and will respond within one month.

Cookies

You can refuse cookies in your browser settings. Some site features may not function properly if cookies are disabled.

We are in the process of developing a full cookie policy. In the meantime, cookies used on this website are limited to essential and functional purposes, including analytics and session tracking.

General Policy

Please check your order carefully. Completing checkout is a commitment to pay for your order. Please contact us immediately if you have made a mistake.

We use DOJO to collect and process transaction information. We do not store credit card details nor do we share customer details with any 3rd parties.