Last updated: 18 October 2026
Who we are
This Privacy Policy explains how Riot Reset (“we”, “us”, “our”) collects, uses and protects your personal data when you visit riotreset.com, make a booking, or otherwise interact with us. Riot Reset is based at Springtown Industrial Estate, Derry, BT48 0LY.
We are the data controller for the personal data described in this policy. If you have any questions, you can contact us at privacy@riotreset.com or by post at the address above.
What personal data we collect
We collect personal data in the following ways:
- Booking / clearance form data: when you deploy a session through our booking form, we collect your name, email address, phone number, and your selected unit and duration.
- Order and account data: if you purchase a session or product through our store, we collect billing details, order history, and, if you create an account, your login details.
- Payment data: card and payment details are collected and processed directly by our payment provider (e.g. Stripe, PayPal, or WooPayments). We do not store full card numbers on our own servers.
- Website usage data: we use analytics tools (Google Site Kit / Google Analytics) to collect information such as pages visited, device type, and approximate location via IP address.
- Correspondence: if you contact us directly by email or through the site, we keep a record of that correspondence, including your contact details.
- Security logs: for site security, we log IP addresses associated with login attempts to protect against unauthorised access.
How we use your data
We use your personal data to:
- Process and confirm your session booking, including sending confirmation and reminder emails
- Process payments for bookings and purchases
- Respond to enquiries, feedback, or support requests
- Maintain the security of our website and prevent fraud or unauthorised access
- Understand how visitors use our site so we can improve it
- Meet our legal and accounting obligations (e.g. retaining transaction records)
Our legal basis for processing
Under UK GDPR, we rely on the following legal bases: performance of a contract (to process your booking and payment), legitimate interests (to keep our site secure and improve our services), consent (for analytics cookies, where required), and legal obligation (for financial record-keeping).
Who we share your data with
We do not sell your personal data. We share it only with trusted third parties who help us run our business, including: our payment processor (to take payment securely), our website hosting provider, our email delivery service (to send booking confirmations), and Google Analytics (where enabled and permitted by your cookie choices). These providers only process your data on our instructions and are required to keep it secure.
Cookies
Our website uses cookies to operate the booking and store functionality (e.g. keeping track of your session/cart) and, where enabled, analytics cookies to understand site usage. You can control or disable cookies through your browser settings at any time, though some parts of the site may not function correctly without them. Use the Consent Preferences button on our website to review or change your choices for non-essential cookies.
How long we keep your data
We keep booking and enquiry data for as long as reasonably needed to deliver our service and resolve any related queries. Order and payment records are kept for as long as required by UK tax and accounting law (currently up to 6 years). Security logs are retained only as long as needed to detect and prevent abuse.
How we protect your data
Our site is served over HTTPS/SSL, access to participant records is restricted to authorised staff, and repeated failed login attempts are rate-limited. Payment card data is never handled directly by our own servers.
Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to certain processing; request a copy of your data in a portable format; and withdraw consent at any time where we rely on consent. To exercise any of these rights, contact us at privacy@riotreset.com.
If you are unhappy with how we have handled your personal data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
Children’s data
Some experiences accept under-18 participants under the published age and supervision rules. A parent or legal guardian completes a separate check-in for each child. Participant details, age information, declarations and signatures are used for visit administration and safety checks, not to enrol children in marketing.
Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “last updated” date.
Contact us
Riot Reset
Springtown Industrial Estate
Derry, BT48 0LY
Email: privacy@riotreset.com
Participant check-in and signatures
We collect the named participant’s identity, date of birth, session reference, signer’s identity and capacity, contact details, declarations, signature, submission time and waiver version. We use these to match people to bookings, check eligibility and permission, administer visits and deal with incidents or claims. Access is restricted to authorised staff. Check-in is not consent to marketing or promotional photography.
Please discuss health or support needs privately rather than entering diagnoses into online forms. Contact us for information about access to your record, an accessible alternative or the retention period that applies to a particular record.
CCTV and promotional images
CCTV is used for safety, security and incident investigation as described in participant check-in. It is not consent to use your image in advertising. Ask staff about camera coverage and privacy arrangements. Contact us about footage access or retention; relevant footage may be retained for an incident or claim where lawful.