Sherfield-on-Loddon, Hampshire · Now booking 2026 sessions
info@alpasimulation.co.uk

1. Who we are

ALPA Simulation Ltd is the "data controller" responsible for your personal data. Our details are:

  • Legal entity: ALPA Simulation Ltd
  • Company number: 12660567
  • Registered address: 29 Rowner Crescent, Sherfield-on-Loddon, Hook, Hampshire, RG27 0SW
  • ICO registration reference: ZB661544
  • Contact for data protection queries: info@alpasimulation.co.uk

2. What personal data we collect

Depending on how you interact with us, we may collect and hold the following:

  • Your name;
  • Your email address;
  • Your telephone number;
  • Booking details, such as the package chosen, dates, times, and any accessibility or health information you share with us;
  • Payment data. Payments are processed by Stripe. We do not store your full card details;
  • Gift voucher codes and redemption details;
  • Correspondence, such as emails, enquiry-form messages, and other communications with us;
  • CCTV footage, including audio, recorded in the simulator cockpit during your session (see section 4).

3. Why we process your data and our lawful basis

We only process your personal data where we have a lawful basis to do so under UK GDPR. The bases we rely on are:

Taking and fulfilling bookings

To arrange, confirm, and deliver your simulator session and any related communications. Lawful basis: performance of a contract.

Payment processing and fraud prevention

To take payment for your booking or voucher and to help prevent and detect fraud. Lawful basis: performance of a contract, and compliance with a legal obligation.

Post-session feedback and marketing emails

To ask for feedback after your session and, where you have opted in, to send you marketing emails about our experiences and offers. Lawful basis: consent, which you can withdraw at any time.

CCTV recording in the simulator cockpit

To record video and audio during your session for safety and security purposes (see section 4). Lawful basis: legitimate interests.

Accounting and tax records

To keep accurate financial records and meet our accounting and tax obligations. Lawful basis: compliance with a legal obligation.

4. CCTV in the simulator

The simulator cockpit is fitted with a CCTV camera that records both video and audio for the duration of your session. We want to be completely transparent about this.

Purpose

We record in the cockpit to protect the safety of customers and instructors, to evidence any damage to equipment, and to resolve disputes or allegations arising during a session.

Lawful basis

Our lawful basis is legitimate interests, namely the safety of people on our premises, the protection of our property, and the establishment or defence of legal claims.

How the footage is used

Recordings are not used for marketing, are not published, and are not provided to customers as a souvenir or keepsake.

Retention

CCTV footage is kept for 14 days, after which it is deleted. Footage may be retained longer only where it is required as evidence for an active insurance claim, legal claim, or police investigation.

Who can access it

Access to CCTV footage is restricted to the two company directors only. Footage may be disclosed to our insurers, our legal advisers, or the police where lawfully required.

How we tell you

Signage is displayed at the premises, and customers are informed verbally before each session.

You have the right to request a copy of CCTV footage of yourself. To do so, please make a subject access request by emailing info@alpasimulation.co.uk (see section 9).

5. Photographs and social media

You are welcome to take your own photographs and videos during your visit. We only post photographs of customers on our social media channels where the customer has given explicit consent at the time. You can withdraw that consent at any time by emailing info@alpasimulation.co.uk, and we will remove the photographs from channels within our control.

6. Who we share your data with

We use a small number of trusted third parties to run our business. These act as our processors and only handle your data on our instructions:

  • Stripe — payment processing;
  • Acuity Scheduling / Squarespace — booking management;
  • Cloudflare — website hosting and security;
  • Brevo — email.

Advertising on Acuity-hosted pages. Our booking process runs on our own website. However, if you follow a link in Acuity's own confirmation or reschedule emails, you may land on a page hosted by Acuity Scheduling at acuityscheduling.com. Those pages carry Google Ads and Meta (Facebook) advertising tags and set advertising cookies on that separate domain. This does not affect the cookies used on our own website (see our Cookie Policy), and Acuity's own privacy and cookie notices govern that domain.

If you book through one of our resellers, WonderDays or Into The Blue, those companies share your booking data with us so that we can arrange and deliver your session. Their own handling of your data is governed by their respective privacy policies.

We do not sell your personal data.

7. International transfers

Some of our processors may transfer or store personal data outside the United Kingdom. Where this happens, we make sure appropriate safeguards are in place: we rely on UK adequacy regulations, or on International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses, so that your data continues to be protected to UK standards.

8. How long we keep your data

We keep personal data only for as long as we need it. Our standard retention periods are:

Type of recordRetention period
Booking and customer records6 years (accounting and tax requirements)
Marketing consentUntil you withdraw consent
CCTV footage (video and audio)14 days (see section 4 for exceptions)
Website enquiries12 months

9. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data rectified;
  • have your data erased in certain circumstances;
  • restrict how we process your data;
  • data portability;
  • object to processing based on our legitimate interests;
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, please email info@alpasimulation.co.uk. We will respond within one month.

10. Complaints

We hope we can resolve any concern you raise with us directly. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Children

Our sessions are open to under-18s when accompanied by an adult. Where the customer is under 18, the booking must be made by a parent or guardian, who provides the personal data and the consent required for the booking.

12. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

13. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "Last updated" date below.

Questions? Contact us · Last updated 25 July 2026