Privacy Policy

We ask that you read this privacy policy carefully as it contains important information on who we are, how and why we collect, store, use and share personal information, your rights in relation to your personal information and on how to contact us and the Information Commissioner’s Office in the event you have a complaint.

This privacy policy is divided into the following sections:

Who we are?

This website and shopping centre is operated by J32 Castleford (Freeholdco) Limited, managed by CBRE.

Our intention is to provide the best possible experience for visitors to our website and shopping centres, the retailer brands and people that work there, and the local community in which we operate. 

We collect, use and are responsible for certain personal information about you. When we do so we are regulated under the UK GDPR as ‘controller’ of that personal information for the purposes of those laws.

Our website

This privacy policy relates to your use of our website and when you visit our shopping centres. 

When you are using this website, and visiting our shopping centres, J32 Castleford (Freeholdco) Limited is the data controller.

Throughout our website we may link to other websites owned and operated by certain trusted third parties. These other third-party websites may also gather information about you in accordance with their own separate privacy policies. For privacy information relating to these other third-party websites, please consult their privacy policies as appropriate.

Our collection and use of your personal information

We collect personal information about you when you access our website, visit or interreact with services at our shopping centres, register with us, contact us, send us feedback, complete customer surveys or participate in competitions either in-centre or via our website.

The personal information we collect about you depends on the activities carried out through our website and your interactions in our shopping centre. This information includes:

  • your name, address and contact details.
  • date of birth.
  • gender.
  • details of any feedback you give us by phone, email, post or via social media.
  • information about the services we provide to you.
  • your account details, such as username, login details.

For businesses operating within our centres, such as retailers and kiosk traders, we collect business and personal data such as names and contact details in order to create contracts and administer our business operations. Some of this information is required to conduct these services.

To protect our centres, shoppers, and retail staff we operate CCTV systems throughout our centres and car parks which record images for security. We do this on the basis of our legitimate business interests, for reasons of substantial public interest, including for the prevention or detection of unlawful acts or in compliance with, or to assist third parties to comply with, any regulatory requirements relating to the investigation of unlawful acts.

We collect this personal information from you either directly, such as when you register with us, contact us either in-centre or via our website or indirectly, such as your browsing activity while on our website (see ‘Cookies’ below).

We do not collect Information from children under the age of 13, but it may be collected from parents/guardians with their consent.  Examples include competitions that involve children’s participation. We will not market directly to children.

We also collect personal information about you from other sources as follows:

  • When you’ve given a third-party permission to share with us the personal information they hold about you.

Our legal basis for processing your personal information

When we use your personal information, we are required to have a legal basis for doing so. There are various legal bases on which we may rely, depending on what personal information we process and why.

The legal bases we may rely on include:

consent: where you have given us clear consent for us to process your personal information for a specific purpose, including:

  • Marketing purposes.

Contract performance: we may process your personal data to fulfil a contract, or to take steps linked to a contract, including:

  • clubs, events, competitions and promotions.
  • postal service and hiring services.
  • Wifi-service.
  • Access control data is also processed because of our contractual responsibilities to our occupiers.

Legal obligation: where our use of your personal information is necessary for us to comply with the law (not including contractual obligations)

Legitimate interests: we may process your personal data where it is necessary to pursue our, or third parties’, legitimate interests, including to:

  • Tailor our online services to you so the content you see is relevant to you.
  • Collect data obtained through our interaction with customers for research, analysis, testing, monitoring, risk management and administrative purposes including the optimisation of service delivery at our properties and to improve the customer experience.
  • Promote our site externally. 
  • We frequently ask for post code during our customer interactions to help us better understand our customers. We share this data with third parties without any personal identifiers to assist with our insight and analysis.
  • To bring you offers and promotions that are most relevant to you, we may also combine the personal information that we collect directly from you with information that we obtain from third parties to whom you have given your consent to pass that data onto us. 
  • For Social Media, our purpose is for our legitimate interests to i) respond to customer complaints; ii) obtain insight into the use and perception of our customer offerings so that we can improve them.

Who we share your personal information with?

  • We use third party marketing agencies who may have access to your personal details to develop email marketing campaigns and social media, to provide customer insight through the analysis of data and to collect personal data on our behalf.  We store your information in a secure marketing database hosted by a third party which we use to also generate our email marketing campaigns.
  • We frequently ask for post code during our customer interactions to help us better understand our customers. We share this data with third parties without any personal identifiers to assist with our insight and analysis.
  • We use third party service partners to provide security services, but the information recorded through these technologies is held on systems we control. The data we collect may be shared with the police, tenants, local authorities, other sites or local crime reduction partnerships and initiatives for our legitimate interests to run successful businesses in environments that are safe for our staff and customers, and the prevention and detection of crime. These organisations may also share data with us. ANPR data can be shared with third parties for the purposes of enforcement.
  • We may also obtain and share the information with insurance companies where they request data relating to insurance claims to support their legitimate interests, or those of their clients, or to defend legal claims.
  • When an incident occurs at one of our properties, we are required to document the particulars of an incident which may include witness statements, CCTV footage, photographs and written reports. This information may include special categories of data depending on the nature of the incident. The data may be shared with third parties such as insurance providers and legal advisors in order to defend a claim, government or other competent organisations who are required to report on incidents by law or the police to investigate a crime. It may also be shared with a third party who are liable for a claim under their contractual relationships with us for the purposes of allowing them to defend a claim. This information may also be shared with government or other competent organisations who are required to report on incidents by law or the police to investigate a crime.  
  • To our suppliers, contractors and professional advisors where this is necessary for them to provide services and facilities to us, such as to provide car parking services.
  • To our Joint Venture partners.
  • to any purchaser of all or part of our business or any of our properties.
  • to sell, make ready for sale or dispose of our business in whole or in part including to any potential buyer or their advisers.
  • where, acting in good faith, we believe disclosure is necessary to assist in the investigation or reporting of suspected illegal or other wrongful activity.  This may include exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; to protect and defend our rights or property; to deal with any misuse of any of our Services; or in order to enforce or apply our terms and conditions and other agreements with third parties.
  • to our group companies and affiliates or third-party data processers who may process data on our behalf to enable us to carry out our usual business practices.

We will share personal information with law enforcement or other authorities if required by applicable law.

Transfer of your information out of the UK

If we transfer your personal information outside of the UK, it will continue to be subject to one or more appropriate safeguards set out in the law. Where we do so, the third country’s data protection laws will have been approved as adequate by the UK Government, or other applicable safeguards are in place.

Cookies and other tracking technologies

A cookie is a small text file which is placed onto your device (e.g., computer, smartphone or other electronic device) when you use our website. 

We use cookies on our website.

Marketing

We will only provide you with email marketing where you have consented and you can withdraw this consent at any time by clicking the unsubscribe link within the emails you receive.  Where we send you information electronically, we review whether the communication has been opened and whether you have clicked on any links in the communication. This is because we want to make sure that our communications are useful for you. 

We also use third party marketing agencies who may have access to your personal details to develop email marketing campaigns and social media, to provide customer insight through the analysis of data and to collect personal data on our behalf.  We store your information in a secure marketing database hosted by a third party which we use to also generate our email marketing campaigns. 

If you have previously agreed to being contacted in this way, you can unsubscribe at any time by:

—contacting us at 

—using the ‘unsubscribe’ link in emails or ‘STOP’ number in texts

It may take up to 10days for this to take place.

For more information on your rights in relation to marketing, see ‘Your rights’ below.

Your rights

  • You have several important rights free of charge. In summary, those include rights to:
  • fair processing of information and transparency over how we use your use personal information i.e., this Privacy Notice.
  • access to your personal information and to certain other supplementary information that this Privacy Policy is already designed to address.
  • require us to correct any mistakes in your information which we hold.
  • require the erasure of personal information concerning you in certain situations.
  • receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations.
  • object at any time to processing of personal information concerning you for direct marketing.
  • object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you.
  • object in certain other situations to our continued processing of your personal information.
  • otherwise restrict our processing of your personal information in certain circumstances.

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection Regulation.

If you would like to exercise any of those rights, please:

  • email, call or write to us.
  • let us have enough information to identify you (e.g., account number, username, registration details).
  • let us have proof of your identity and address (a copy of your driving licence or passport and a recent utility or credit card bill), and
  • let us know the information to which your request relates.

Keeping your personal information secure

We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.

We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

Data retention/how long we keep your personal information for

For CCTV and Body Mounted Video: Generally, this data will not be held for longer than 31 days unless an incident or suspected incident has occurred. 

We will only collect the minimum amount of personal information necessary, and will only keep your information for as long as you remain engaged with our marketing campaigns. Where you have not engaged with our marketing material for over a year, we will take steps to remove your information from our marketing database. Where you unsubscribe from our marketing, we will add your email address to our suppression list and delete any additional information that we hold about you.

Where you have provided your details in relation to a competition, we will delete your personal data when the competition has finished (unless you have consented to your information being used for marketing purposes). 

For any contractual purpose, your personal data will be held for as long as is required to deliver the services requested.

For analysing responses to customer feedback, we generally keep these for 15 months to allow year on year comparisons.

For our VIP event run in our outlets, personal data is deleted after a period of 12 months unless you have subscribed to receive our marketing material.

All personal data (CCTV, Witness Statements, Photographs and written reports) relating to the incident is held for six years, unless there are reasons to retain it for longer, such as an ongoing HSE investigation, a suspected pattern of fraud, or because an injury has been sustained by a child. 

How to complain

We hope that we can resolve any query or concern you raise about our use of your information.

You also have the right to lodge a complaint with the supervisory authority in the UK which is the Information Commissioner’s Office who may be contacted at https://ico.org.uk/concerns/ or telephone: [0303 123 1113].

Changes to this website privacy policy

This website privacy policy was published last updated on 16/04/2024.

We may change this website privacy policy from time to time, when we do, we will inform you.

How to contact us

Please contact us if you have any questions about this privacy notice or the information we hold about you.

If you wish to contact us please send an email to or write to Centre Management Office, Junction 32 Yorkshire Outlet, Tomahawk Trail, Glasshoughton, Castleford, West Yorkshire, WF10 4FR or call 01977520153.