Our privacy policy


Lollipop is shaping the future of hospitality by putting customer satisfaction at the centre of everything we do. We are passionate about delighting customers at every stage of the process, and that care and attention extends to all forms of customer data.

We have never and will never sell or trade any personal details of any sort with any other company and consider the loyalty and on-going support of our community to be the main driver to our success. Data is only ever used between Lollipop group companies to provide the Lollipop community with the latest information on events and experiences.

This Privacy Policy applies to any form of communication to have with Lollipop or any Lollipop brand or company including sign-ups to the mailing list, ticket purchases, visits to our websites and attendance any Lollipop experience. It provides detailed information on when and why we collect your personal information, how we use it, how we keep it secure and the extremely limited conditions under which we may disclose it to others (when forced to by law).

The Lollipop group of companies includes Banng Ltd, Lolly and Pop Ltd and Immerse and Escape Ltd (trading as Pink Acid), operating as one company together from our London office (18 – 20 Scrutton Street, EC2A 4RX) with a single Data Controller, Sebastian Lyall (admin@lollipopup.co.uk).

Personal data we collect

When you sign up to be contacted about ticket releases and updates on Lollipop projects we collect, process and store your email address in order to contact you. This email is used to alert you to ticket releases and news across Lollipop projects, giving you early access to tickets and other limited-time offers only available to the Lollipop community.

For ticket bookings we use a third-party booking management system called Res Diary. Once you reach the booking stage you will see the Res Diary logo and all personal data provided at this point is managed under Res Diary’s own policies. As part of the Res Diary process you can also opt-in to join the Lollipop community mailing list. When you do opt-in then your personal data including you email address, name and telephone number is collected, stored and processes by our systems.

We do not store any payment information at all. This is collected, stored and processed by our payment-processing partner Stripe who have there own separate data and privacy policies.

If at any stage you share personal information about other people, you agree that you have notified any such people whose personal data you are providing and, where necessary, have obtained their consent so that we can lawfully process their personal data in accordance with this policy.

All personal data that you provide to us must be true, complete and accurate. If you provide us with inaccurate or false data, and we suspect or identify fraud, we will record this.

When you contact our customer services team by email, we may keep a record of the correspondence to assist with future support requests and create an auditable trail. We’ve never recorded any phone calls for training but this may be something we do in the future. We will always let you know before any recording is made to allow you to opt-out.

Data we automatically collect

When you visit any Lollipop group website, we, or third parties on our behalf, may automatically collect and store information about your device and your usage activities. This information could include (a) your computer or other device's unique ID number; (b) technical information about your device such as type of device, web browser or operating system; (c) your preferences and settings such as time zone and language; and (d) statistical data about your browsing actions and patterns.

This information would only ever be for analytical and research purposes and is collected on an anonymous basis to help us improve our website experience.

Any data that is collected in this way is collected in accordance with the Cookie section of this policy (below).

Marketing Communications

Our business is built on providing the Lollipop community with access to amazing experiences like ABQ, The Bletchley and The Grid. Our events are often oversubscribed and will often ask customers to register their interest in tickets by joining a mailing list that signs users up to receive further information about future Lollipop projects.

When you opt-in to receive marketing communications from us you consent to the processing of your data to send you such communications, which may include ticket news, marketing offers, newsletters, and information about new events. We retain a record of your consent.

You can choose to no longer receive marketing communications by contacting us at admin@lollipopup.co.uk or clicking unsubscribe from any marketing email. If you do unsubscribe to marketing communications, it may take up to 5 business days for your new preferences to take effect.

We will retain your personal data in our records for marketing Lollipop projects until you notify us that you no longer wish to receive marketing emails from us.

Lawful processing of your personal data

We will use your personal data in order to comply with our contractual obligation to deliver the experience you have booked and, where you have opted in, to inform you with news about Lollipop projects. This may include contacting you with information relating to the event, to deliver the event to you in accordance with any requests you make or to deal with any questions, comments or complaints you have in relation to the experience.

We may also use your personal data for other legitimate needs, including dealing with any customer service concerns, enforcing the terms of any other agreement between us, for regulatory and legal purposes (for example anti-money laundering), for audit purposes and to contact you about changes to this policy.

Who do we share your data with?

Email addresses submitted to our mailing list are never shared with anyone outside of Lollipop. Support emails or contact made with our customer services team is only used in-house and is never shared with anyone else.

Under certain circumstances we may have to disclose some personal data under applicable laws and/or regulations, for example, as part of anti-money laundering processes or protect a third party's rights, property, or safety.

On occasion, we may share your personal data with service providers, sub-contractors and agents that we directly appoint to perform specific functions on our behalf and in accordance with our instructions, for example accountants, auditors or lawyers.

We may also share your personal data in connection with, or during negotiations of, any merger, sale of assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company.

Where we hold and process your personal data

Some or all of your personal data may be stored or transferred outside of the European Union (the EU) for any reason, including for example, if our email server is located in a country outside the EU or if any of our service providers or their servers are based outside of the EU. We shall only transfer your personal data to organisations that have provided adequate safeguards in respect of your personal data.


A cookie is a small text file containing a unique identification number that is transferred (through your browser) from a website to the hard drive of your computer. The cookie identifies your browser but will not let a website know any personal data about you, such as your name and/or address. These files are then used by websites to identify when users revisit that website.

Lollipop project websites may use cookies to remember who you are and tailor the experience for you, recognising when you return and personalising your settings and preferences.

Most browsers are initially set up to accept cookies. You can change your browser settings either to notify you when you have received a cookie, or to refuse to accept cookies. Please note that our websites may not operate efficiently if you refuse to accept cookies.

We may also use Google Analytics to monitor how Lollipop project websites are used. Google Analytics collects information anonymously and generates reports detailing information such as the number of visits to the site, where visitors generally came from, how long they stayed, and which pages they visited. Google Analytics places several persistent cookies on your computer's hard drive. These do not collect any personal data. If you do not agree to this you can disable persistent cookies in your browser. This will prevent Google Analytics from logging your visits.


We shall process your personal data in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. All information you provide to us is stored on our secure servers. Any payment transactions are encrypted using SSL technology (and are handled by our payment-partner Stripe).

Where we have given, or you have chosen a password, you are responsible for keeping this password confidential.

However, you acknowledge that no system can be completely secure. Therefore, although we take these steps to secure your personal data, we do not promise that your personal data will always remain completely secure.

Your rights

You have the right to obtain from us a copy of the personal data that we hold for you, and to require us to correct errors in the personal data if it is inaccurate or incomplete. You also have the right at any time to require that we delete your personal data. To exercise these rights, or any other rights you may have under applicable laws, please contact us at admin@lollipopup.co.uk.

Please note, we reserve the right to charge an administrative fee if your request is manifestly unfounded or excessive.

If you have any complaints in relation to this policy or otherwise in relation to our processing of your personal data, you should contact the UK supervisory authority: the Information Commissioner, see www.ico.org.uk.

Our Lollipop project websites and the Lollipop & Pink Acid corporate websites may contain links to other sites of interest. Once you have used these links to leave our domain, you should note that we do not have any control over that other site. Therefore, we cannot be responsible for the protection and privacy of any information that you provide whilst visiting such sites and such sites are not governed by this policy. You should exercise caution and look at the privacy policy applicable to the site in question.


If you receive marketing communications from us, we shall retain your personal data until you opt-out of receiving such communications.

If you have contacted our team including customer services with any question or comment, we shall retain this personal information to allow us to respond to any further queries you might have unless requested to delete it.


If any provision of this policy is held by a court of competent jurisdiction to be invalid or unenforceable, then such provision shall be construed, as nearly as possible, to reflect the intentions of the parties and all other provisions shall remain in full force and effect.

This policy shall be governed by and construed in accordance with the law of England and Wales, and you agree to submit to the exclusive jurisdiction of the English Courts.

We may change the terms of this policy from time to time. You are responsible for regularly reviewing this policy so that you are aware of any changes to it. If you continue to use any of our Lollipop projects, ticketing or corporate sites at the time we state the changes will take effect, you will have accepted the changes.