Sherfield-on-Loddon, Hampshire · Now booking 2026 sessions
info@alpasimulation.co.uk

1. Who we are

ALPA Simulation Ltd is the "data controller" responsible for your personal data. Our details are:

  • Legal entity: ALPA Simulation Ltd
  • Company number: 12660567
  • Registered address: 29 Rowner Crescent, Sherfield-on-Loddon, Hook, Hampshire, RG27 0SW
  • ICO registration reference: ZB661544
  • Contact for data protection queries: info@alpasimulation.co.uk

2. What personal data we collect

Depending on how you interact with us, we may collect and hold the following:

  • Your name;
  • Your email address;
  • Your telephone number;
  • Booking details, such as the package chosen, dates, times, and any accessibility or health information you share with us;
  • Payment data. Payments are processed by Stripe. We do not store your full card details;
  • Gift voucher codes and redemption details;
  • Correspondence, such as emails, enquiry-form messages, and other communications with us;
  • CCTV footage, including audio, recorded in the simulator cockpit during your session (see section 4).

3. Why we process your data and our lawful basis

We only process your personal data where we have a lawful basis to do so under UK GDPR. The bases we rely on are:

Taking and fulfilling bookings

To arrange, confirm, and deliver your simulator session and any related communications. Lawful basis: performance of a contract.

Payment processing and fraud prevention

To take payment for your booking or voucher and to help prevent and detect fraud. Lawful basis: performance of a contract, and compliance with a legal obligation.

Post-session feedback and marketing emails

To ask for feedback after your session and, where you have opted in, to send you marketing emails about our experiences and offers. Lawful basis: consent, which you can withdraw at any time.

Advertising measurement cookies

If you accept them, Google Ads cookies on this website tell us which of our adverts led to a booking. These are never set unless you press Accept on our cookie banner. Until then — and permanently, if you reject — Google's tag runs in a cookieless "consent mode" that stores nothing on your device and sends only aggregated measurement signals. Lawful basis for the cookies: consent, which you can withdraw at any time using the Cookie preferences link in the footer of any page. See our Cookie Policy for the full detail.

CCTV recording in the simulator cockpit

To record video and audio during your session for safety and security purposes (see section 4). Lawful basis: legitimate interests.

Accounting and tax records

To keep accurate financial records and meet our accounting and tax obligations. Lawful basis: compliance with a legal obligation.

4. CCTV in the simulator

The simulator cockpit is fitted with a CCTV camera that records both video and audio for the duration of your session. We want to be completely transparent about this.

Purpose

We record in the cockpit to protect the safety of customers and instructors, to evidence any damage to equipment, and to resolve disputes or allegations arising during a session.

Lawful basis

Our lawful basis is legitimate interests, namely the safety of people on our premises, the protection of our property, and the establishment or defence of legal claims.

How the footage is used

Recordings are not used for marketing, are not published, and are not provided to customers as a souvenir or keepsake.

Retention

CCTV footage is kept for 14 days, after which it is deleted. Footage may be retained longer only where it is required as evidence for an active insurance claim, legal claim, or police investigation.

Who can access it

Access to CCTV footage is restricted to the two company directors only. Footage may be disclosed to our insurers, our legal advisers, or the police where lawfully required.

How we tell you

Signage is displayed at the premises, and customers are informed verbally before each session.

You have the right to request a copy of CCTV footage of yourself. To do so, please make a subject access request by emailing info@alpasimulation.co.uk (see section 9).

5. Photographs and social media

You are welcome to take your own photographs and videos during your visit. We only post photographs of customers on our social media channels where the customer has given explicit consent at the time. You can withdraw that consent at any time by emailing info@alpasimulation.co.uk, and we will remove the photographs from channels within our control.

6. Who we share your data with

We use a small number of trusted third parties to run our business. These act as our processors and only handle your data on our instructions:

  • Stripe — payment processing;
  • Acuity Scheduling (a Squarespace company) — booking management;
  • Cloudflare — website hosting and security;
  • Brevo — email.

One further third party is not our processor but an independent controller of the data it receives:

  • Google Ireland Ltd — advertising measurement, and only where you have consented to optional cookies (see below).

Advertising measurement on this website. We advertise through Google Ads. Google's tag loads on every page of this website, but it starts in Google's consent mode with all advertising storage switched off: before you choose, and permanently if you reject, it sets no cookies, reads nothing back from your device, and sends Google only an aggregated, cookieless signal that a page was viewed or a booking was made — carrying no cookie, no advertising identifier, and nothing that identifies you. If you press Accept, the same tag is then permitted to set cookies such as _gcl_au, which tell us that a booking followed a click on one of our adverts. Its purpose is measurement — knowing which adverts are worth paying for — not profiling: we do not build advertising profiles of you, run retargeting from it, or sell or share your browsing data with advertising networks. The provider is Google Ireland Limited, which acts as an independent controller for that data. You can withdraw consent at any time, as easily as you gave it, using the Cookie preferences link in the footer of any page; that switches storage back off immediately and clears those cookies. See our Cookie Policy for the full list.

Advertising on Acuity-hosted pages. Our booking process runs on our own website. However, if you follow a link in Acuity's own confirmation or reschedule emails, you may land on a page hosted by Acuity Scheduling at acuityscheduling.com. Those pages carry Google Ads and Meta (Facebook) advertising tags and set advertising cookies on that separate domain. Your cookie choice on our website does not control that separate domain, and Acuity's own privacy and cookie notices govern it.

If you book through one of our resellers, WonderDays or Into The Blue, those companies share your booking data with us so that we can arrange and deliver your session. Their own handling of your data is governed by their respective privacy policies.

We do not sell your personal data.

7. International transfers

Some of our processors may transfer or store personal data outside the United Kingdom. Where this happens, we make sure appropriate safeguards are in place: we rely on UK adequacy regulations, or on International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses, so that your data continues to be protected to UK standards.

8. How long we keep your data

We keep personal data only for as long as we need it. Our standard retention periods are:

Type of recordRetention period
Booking and customer records6 years (accounting and tax requirements)
Marketing consentUntil you withdraw consent
CCTV footage (video and audio)14 days (see section 4 for exceptions)
Website enquiries12 months

9. Your rights

Under UK data protection law, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data rectified;
  • have your data erased in certain circumstances;
  • restrict how we process your data;
  • data portability;
  • object to processing based on our legitimate interests;
  • withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, please email info@alpasimulation.co.uk. We will respond within one month.

10. Complaints

We hope we can resolve any concern you raise with us directly. You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

  • Website: ico.org.uk
  • Telephone: 0303 123 1113
  • Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

11. Children

Our sessions are open to under-18s when accompanied by an adult. Where the customer is under 18, the booking must be made by a parent or guardian, who provides the personal data and the consent required for the booking.

12. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

13. Changes to this policy

We may update this policy from time to time. Any changes will be posted on this page with a revised "Last updated" date below.

Questions? Contact us · Last updated 27 July 2026