Privacy Policy

This policy explains how BETHEGUESTS LIMITED, a company registered in England and Wales (company number 17326236) uses your data on LEGOLAND Water Park Dubai Tickets at legoland-waterpark.com. We are an independent ticket seller and the controller of your personal data under applicable data protection law, including the UK GDPR and EU GDPR.

• Contact details: your name and email when you book or claim an offer. If you contact us directly, you may also choose to give us a phone number. You do not need a customer account to buy tickets.
• Offer claims: your name, email, campaign, claim expiry and any reminder-email choice. For new claims, we also record the separate Google measurement checkbox choice, its disclosure, wording version and server-recorded time. A private cookie remembers your claim for up to seven days, ending sooner if the campaign ends. A claim does not create a price lock or an added discount.
• Offer reminders: choosing “Claim offer” requests the offer and up to three emails from BeTheGuests about that LEGOLAND Water Park ticket offer. We store your consent time and wording version. Unsubscribe anytime using the link in each reminder. You can book tickets without claiming an offer. Existing claims without reminder consent remain without reminders.
• Booking data: your park pass, visit date, guest numbers, age categories and details needed by the ticket supplier.
• Payment data — processed securely by our payment processor; we receive confirmation and limited details (such as the last four digits), not your full card number.
• Optional analytics: with your permission, Google Analytics measures page visits and ticket-purchase events. Our analytics events do not include your name, email, phone number or ticket barcode. You can refuse measurement and still book without claiming an offer.
• Service records: booking status, payment references and technical records needed to run the site, help you and prevent fraud.
• Communications — messages you send us and your marketing preferences.

• To process bookings and deliver tickets, vouchers and confirmations.
• To provide customer support and manage cancellations and refunds.
• To operate, secure and improve the platform and prevent fraud.
• To send booking messages and offer-reminder emails when you explicitly request them through the disclosed claim action.
• To comply with legal and accounting obligations.

We rely on: performance of a contract (to fulfil your bookings); legitimate interests (to run, secure and improve the platform); consent (for certain marketing and non-essential cookies, which you can withdraw at any time); and legal obligation (for tax and compliance).

We share personal data only as needed to run the service:

• Ticket suppliers and park operators: the details needed to issue and honour your tickets.
• Payment processors (e.g. Stripe) — to take payment securely.
• Hosting, database and email providers: to store booking records, deliver tickets and provide support.
• Google Analytics: optional website and purchase measurement when you allow analytics. This storefront does not use Microsoft Clarity session recordings.
• Authorities or advisers — where required by law.

We do not sell your personal data.

Some providers may process data outside your country. Where that happens, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We keep personal data only as long as necessary for the purposes above, including to meet legal, accounting and dispute-resolution requirements, after which it is deleted or anonymised.

Subject to applicable law, you have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent. You can also complain to your local data protection authority.

To exercise your rights, email admin@betheguests.com.

See our Cookie Policy for storage details. Use Analytics preferences at the bottom of this page to change your choice. This does not cancel your booking, saved offer claim or reminder-email choice. Use the unsubscribe link in a reminder to stop those emails.

We use technical and organisational measures to protect your data, including encryption in transit and access controls. No method of transmission is completely secure, but we work to protect your information and review our practices regularly.

The platform is intended for adults. We do not knowingly collect data from children without appropriate consent; bookings involving minors should be made by a responsible adult.

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

For privacy questions or to exercise your rights, contact admin@betheguests.com. The data controller is BETHEGUESTS LIMITED, registered in England and Wales under company number 17326236.