REBEL ROSIE'SBookings
Privacy notice
Last updated 4 November 2026. This covers our booking pages at rebelrosies.co.uk/booking: booking a game or package, your booking link, our loyalty scheme, questions and private hire enquiries.
Who we are
Rebel Rosie's is run by FUSED WLV LTD, Castle Street, Wolverhampton, WV1 3AD. We decide how your details are used (we are the "data controller"). For anything about your data, email bookings@rebelrosies.co.uk.
What we collect
- Your booking: name, email, mobile number, what you booked, date and time, number of people, whether anyone is under 18, your occasion and any notes you give us.
- Payment: card payments are taken by Square. Your card details go straight to Square and never reach us. We keep the payment reference, the amount and any refund.
- Questions and private hire enquiries: the details you type into the form.
- Loyalty scheme (only if you join): your visits and rewards.
- Technical details: your internet address (IP) and browser type, used to stop fraud and abuse, and kept for 30 days. This is security information and is kept separate from advertising.
- How you found us (only with your permission): the advert, link or search that brought you to us, such as the campaign tags in the link (utm values), the website you came from and the page you landed on. We keep these with your booking, and in your browser for up to 90 days, only if you allow Analytics or Marketing in the cookie banner. Advertising click identifiers (such as gclid and fbclid) need Marketing. If you choose Essential only, none of this is kept in your browser or with your booking.
- Anonymous visit counts: we count how many people reach each step of the booking page, with no name, email or phone number. If you choose Essential only, or have not chosen yet, the count uses a random number held in your browser's memory that is gone when you leave the page, and we do not record how you found us. If you allow Analytics, the random number is kept in your browser tab until you close it, and we also record the campaign tags and website you came from. We do not count visits at all if your browser sends a Do Not Track signal.
Why we use it, and our legal basis
| What for | Legal basis |
|---|---|
| Taking and managing your booking, payments, refunds, confirmation and reminder messages, and replying to your questions or enquiry | To carry out our contract with you, or to take steps you asked for before one |
| Keeping the site secure and stopping fraud and abuse | Our legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Sending you offers, a one-off reminder if you don't finish a booking, and the loyalty scheme | Your consent (the boxes start unticked, and you can change your mind any time) |
| Analytics and advert measurement cookies | Your consent, given in the cookie banner |
Cookies and tracking
Essential storage keeps your booking working and always runs. Only if you allow them in the cookie banner, we also use:
- Analytics: Google Analytics, to see how people find and use the booking page.
- Marketing: the Meta (Facebook and Instagram) Pixel, to measure our adverts. If you allow Marketing and complete a booking, your email address and mobile number are scrambled (hashed) before being sent to Meta, so it can match the booking to an advert. Meta does not receive them in readable form.
You can change your choice at any time with the Cookie settings link at the bottom of any of our booking pages. If you turn Marketing off, advertising click identifiers are removed from your browser, and from a booking you have not yet paid for. If you turn both off, how-you-found-us details are removed from your browser, and from a booking you have not yet paid for. For a booking that is already confirmed, email us and we will remove them.
Who we share it with
Only companies that help us run bookings, each under contract and only for that job:
- Square (card payments and refunds)
- Google (Google Workspace sends our booking emails; Google Analytics only with your permission)
- Cloudflare (hosts the booking site; booking records are stored in the EU)
- Twilio (booking text messages, when we send them)
- Meta (only with your Marketing permission, as above)
Some of these companies may handle data outside the UK. Where they do, they use the legal safeguards UK law requires, such as the UK International Data Transfer Addendum or an adequacy decision. We never sell your details.
How long we keep it
- Booking details: 2 years after your last visit, then your name, email, phone and notes are removed. This includes notes and item text copied in from our old booking system, private hire enquiry answers, and the copies of messages we sent you. The booking amounts stay for our accounts, which the law requires us to keep for 6 years. If you are a loyalty member, we keep your booking details for as long as you are a member; if you leave, the 2 years run from your last visit.
- Internet address and browser type: 30 days.
- Marketing permission: until you withdraw it.
Your rights
You can ask us for a copy of your details, ask us to correct or delete them, object to how we use them, ask us to limit their use, or ask for a copy to take elsewhere. You can withdraw consent at any time, for example with the unsubscribe link in any offer email. Email bookings@rebelrosies.co.uk and we will reply within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would like the chance to put it right first.