top of page

Privacy Policy

Privacy Policy

Vici Leisure Group Ltd

Last updated: July 2026

Vici Leisure Group Ltd respects your privacy and is committed to protecting your personal data.

This privacy policy explains how we collect, use, store and protect your personal data when you visit our venues, use our website, contact us, make a booking, place an order, use our app, interact with us online, or otherwise use our services.

It is important that you read this privacy policy so that you understand how and why we use your personal data.

1. Who we are

Vici Leisure Group Ltd is the data controller responsible for your personal data.

This means we are responsible for deciding how we collect and use your personal data and for ensuring that it is handled in accordance with applicable data protection laws.

Contact details

Company name: Vici Leisure Group Ltd
Website: www.viciclub.com
Email: stuart@viciclub.com

If you have any questions about this privacy policy, or if you wish to exercise any of your legal rights, please contact us using the details above.

You also have the right to make a complaint to the UK supervisory authority for data protection matters:

Information Commissioner’s Office
www.ico.org.uk

We would appreciate the opportunity to deal with your concerns before you contact the ICO, so please contact us first where possible.

2. Keeping your information up to date

It is important that the personal data we hold about you is accurate and current.

Please let us know if your personal details change during your relationship with us.

3. The personal data we collect

Personal data means any information that can identify you as an individual.

We may collect, use, store and transfer the following types of personal data:

Identity data

This may include your first name, last name, vehicle registration number, images captured on CCTV, images captured on body-worn cameras, and identification information where age verification or security checks are required.

Contact data

This may include your email address, telephone number, postal address, or other contact details you provide to us.

Financial data

This may include payment card details and payment-related information.

We do not store full payment card details ourselves. Payment information is processed securely by our chosen payment providers.

Transaction data

This includes details about payments, bookings, purchases, orders, refunds, receipts and other services you have received from us.

Technical data

This may include your IP address, browser type and version, device information, operating system, platform, location data, and other technology used to access our website or app.

Usage data

This includes information about how you use our website, app, booking systems, ordering systems and other services.

CCTV and security data

This may include CCTV footage, body-worn camera footage, incident reports, refusal records, barring information and information shared with responsible authorities where necessary for safety, security, licensing or crime prevention purposes.

4. Special category data

We do not usually collect special category personal data, such as information about your health, race, ethnicity, religious beliefs, political opinions, sexual orientation, or biometric data.

However, in limited circumstances, we may process information relating to health or safety incidents where necessary, for example accident reports, first-aid records or incident investigations.

Where we do this, we will only process the information where permitted by law.

5. How we collect your personal data

We may collect personal data in the following ways:

Directly from you

You may provide personal data when you:

  • visit one of our venues

  • make a booking or reservation

  • place an order

  • purchase food, drinks or services

  • use our website or app

  • contact us by email, phone, post, social media or in person

  • provide feedback

  • make a complaint

  • complete a survey

  • take part in a promotion or event

  • request information from us

Automatically

When you use our website or app, we may automatically collect technical and usage data through cookies, analytics tools and similar technologies.

From third parties

We may receive personal data from third parties such as:

  • payment providers

  • booking platforms

  • EPOS and ordering system providers

  • website and app service providers

  • analytics providers, such as Google

  • security providers

  • parking management providers

  • ID verification providers

  • law enforcement, licensing authorities, local authorities or other responsible authorities where appropriate

6. How we use your personal data

We will only use your personal data where the law allows us to.

Most commonly, we use your data where:

  • we need to perform a contract with you

  • it is necessary for our legitimate business interests

  • we need to comply with a legal or regulatory obligation

  • we need to protect the safety of our customers, staff, venues or business

  • you have given consent, where consent is required

We do not sell your personal data.

7. Purposes for using your personal data

We may use your personal data for the following purposes:

To provide our services

This includes processing bookings, taking orders, managing payments, providing receipts, fulfilling purchases and dealing with customer service enquiries.

Types of data used: identity, contact, financial, transaction and usage data.
Lawful basis: performance of a contract and legitimate interests.

To communicate with you

This includes responding to enquiries, feedback, complaints, subject access requests and other customer communications.

Types of data used: identity and contact data.
Lawful basis: performance of a contract, legal obligation and legitimate interests.

To process payments

This includes taking payments, issuing refunds, managing charges and collecting money owed to us.

Types of data used: identity, contact, financial and transaction data.
Lawful basis: performance of a contract and legitimate interests.

To operate and improve our website and app

This includes troubleshooting, analytics, testing, maintenance, reporting, improving user experience and keeping our digital services secure.

Types of data used: technical and usage data.
Lawful basis: legitimate interests.

To use location-based app services

Where you use our app, location data may be used to help identify your nearest venue, support ordering functionality, assist with venue selection, or enable relevant app features.

Types of data used: technical and location data.
Lawful basis: legitimate interests and, where required, consent.

You can control location permissions through your device settings.

To maintain order history and improve repeat ordering

Our app or ordering systems may use unique device or application identifiers to help provide order history, repeat ordering and a more personalised service.

Types of data used: technical, usage and transaction data.
Lawful basis: performance of a contract and legitimate interests.

To protect our venues, customers and staff

This includes CCTV, body-worn cameras, incident reporting, age verification, refusal records, barring decisions, crime prevention and cooperation with police, licensing authorities or other responsible authorities.

Types of data used: identity, CCTV, security and incident data.
Lawful basis: legal obligation and legitimate interests.

To verify identification

Where required, we may check or verify your identification for age verification, licensing compliance, crime prevention or venue safety.

Types of data used: identity data.
Lawful basis: legal obligation and legitimate interests.

To manage parking

Where applicable, we may collect and share vehicle registration details with parking management providers to operate and protect our car parks.

Types of data used: identity and vehicle data.
Lawful basis: legitimate interests.

To comply with legal and regulatory obligations

This includes complying with licensing laws, health and safety laws, tax obligations, accounting requirements, law enforcement requests and regulatory requirements.

Types of data used: identity, contact, transaction, security and incident data.
Lawful basis: legal obligation.

8. CCTV and body-worn cameras

CCTV may operate in and around our venues for the safety and security of customers, staff and property.

In some circumstances, body-worn cameras may also be used by staff or security personnel.

CCTV and body-worn camera footage may be used for:

  • preventing and detecting crime

  • public safety

  • staff and customer protection

  • investigating incidents

  • dealing with complaints

  • supporting licensing objectives

  • assisting police, local authorities or other responsible authorities

Footage will only be viewed by authorised persons and will only be shared where lawful and appropriate.

9. Sharing your personal data

We may share your personal data with trusted third parties where necessary.

These may include:

  • payment providers

  • booking and ordering system providers

  • IT, website and app service providers

  • EPOS providers

  • analytics providers

  • professional advisers, including accountants, insurers, auditors and legal advisers

  • ID verification providers

  • CCTV and security system providers

  • parking management providers

  • health and safety consultants

  • local authorities

  • licensing authorities

  • HMRC

  • the Health and Safety Executive

  • police and law enforcement agencies

  • Pubwatch, DISC or similar safety schemes where lawful and appropriate

  • prospective buyers, sellers or investors if we restructure, sell or transfer part of our business

We require third-party service providers to respect the security of your personal data and to process it only for specified purposes and in accordance with our instructions.

10. Payment security

Any payment transactions carried out by us or our chosen payment providers will be processed securely.

We do not store full card payment details on our own systems. Payment card information is processed by our payment providers in accordance with applicable payment security standards.

11. Cookies

Our website and app may use cookies and similar technologies to distinguish you from other users, improve functionality, understand how our services are used and improve your experience.

You can set your browser to refuse some or all cookies or to alert you when websites set or access cookies.

Please note that if you disable cookies, some parts of our website or app may not function properly.

12. Marketing

We may use your contact details to send you marketing communications where permitted by law.

You can opt out of marketing communications at any time by following the unsubscribe instructions in any marketing message or by contacting us directly.

We do not send third-party direct marketing communications on behalf of other businesses without your consent.

13. International transfers

Some of our service providers may process personal data outside the UK or European Economic Area.

Where personal data is transferred internationally, we will ensure appropriate safeguards are in place, such as adequacy regulations, approved contractual clauses or other legally recognised transfer mechanisms.

You can contact us if you would like more information about international transfers relating to your personal data.

14. Data security

We have appropriate security measures in place to protect your personal data from being accidentally lost, used, accessed, altered or disclosed without authorisation.

Access to personal data is limited to employees, contractors, agents and service providers who have a business need to know.

We also have procedures in place to deal with suspected personal data breaches. Where legally required, we will notify you and the relevant regulator of a breach.

15. Data retention

We will only keep your personal data for as long as necessary to fulfil the purposes for which it was collected.

This includes keeping data where required for legal, regulatory, tax, accounting, reporting, licensing, insurance, safety or security purposes.

In some circumstances, you can ask us to delete your personal data. Please see the “Your legal rights” section below.

16. If you fail to provide personal data

Where we need to collect personal data by law, or under the terms of a contract with you, and you fail to provide that data, we may not be able to provide the relevant product or service.

For example, we may be unable to complete a booking, process an order, verify your age, respond to an enquiry or allow access to certain services.

Where this happens, we will notify you where appropriate.

17. Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible purpose.

If we need to use your personal data for an unrelated purpose, we will notify you where required and explain the legal basis that allows us to do so.

We may process your personal data without your knowledge or consent where this is required or permitted by law.

18. Your legal rights

Under data protection law, you have rights in relation to your personal data.

These include the right to:

Request access

You can request a copy of the personal data we hold about you.

Request correction

You can ask us to correct incomplete or inaccurate personal data.

Request erasure

You can ask us to delete or remove your personal data where there is no good reason for us continuing to process it.

Object to processing

You can object to us processing your personal data where we rely on legitimate interests and you believe your rights and freedoms override those interests.

Request restriction

You can ask us to suspend the processing of your personal data in certain circumstances.

Request transfer

You can ask us to transfer certain personal data to you or to a third party in a structured, commonly used and machine-readable format.

Withdraw consent

Where we rely on consent to process your personal data, you can withdraw that consent at any time.

Withdrawing consent will not affect the lawfulness of processing carried out before consent was withdrawn.

19. How to exercise your rights

If you wish to exercise any of your legal rights, please contact:

stuart@viciclub.com

You will not usually have to pay a fee to exercise your rights.

However, we may charge a reasonable fee or refuse to comply with a request if it is clearly unfounded, repetitive or excessive.

We may need to request specific information from you to confirm your identity before responding to your request. This is a security measure to ensure that personal data is not disclosed to anyone who does not have the right to receive it.

We try to respond to all legitimate requests within one month. If your request is complex or you have made several requests, it may take longer. If so, we will let you know and keep you updated.

20. Glossary

Legitimate interests

Legitimate interests means the interest of our business in conducting and managing our operations, providing good service, keeping our venues safe, improving our services and protecting our business.

Before relying on legitimate interests, we consider and balance any potential impact on you and your rights.

Performance of a contract

Performance of a contract means processing your personal data where it is necessary to provide a product or service you have requested, or to take steps at your request before entering into a contract.

Legal obligation

Legal obligation means processing your personal data where it is necessary for us to comply with the law or regulatory requirements.

bottom of page