We respect your right to privacy and treat any information you give to us with care. This Privacy Policy describes how we collect, use, share, store or otherwise process the information we hold about you. We are committed to ensuring the personal information you provide is used for the purpose it was collected and is kept secure.
Personal data is information which relates to a person who is (or could be) identified.
Your personal information allows us to provide the services you have asked for, as well as enabling us to improve those services by understanding your interests and preferences. By understanding what you like (and what you don’t) we are able to personalise your experience.
Olympus Property Holding LTD (registered in Jersey with registration number 123519), Olympia Management Services Limited (company registration number 00238811), Olympia Limited (company registration number 661157), Olympia Car Park Limited (company registration number 5127045), Olympia Estate Services Limited (12306016), Olympia Emberton Hotel Limited (company registration number 12306011) and Olympia National Hotel Limited (company registration number 12303835) (collectively known as “Olympia” and referred also in this policy as “we”, “us” or “our” for short).
Our use of your personal information is governed by the UK General Data Protection Regulation (“UK GDPR” for short) and the UK Data Protection Act 2018 and other privacy laws which apply in the United Kingdom (the “Data Protection Laws”).
Where we decide how and why your personal information is processed, we are the “Controller” of your personal information and are responsible for complying with the Data Protection Laws.
Where other third parties decide how and why your personal information is processed, they will also be a Controller of your personal information. They are responsible for their processing of your personal information and are required to provide you with a separate privacy policy explaining how they process your personal information.
If you have any questions about this Privacy Policy, you can contact us by sending an email to DPO@olympia.co.uk or by writing to us at The Data Protection Officer, Olympia London, Hammersmith Road, Kensington, London W14 8UX.
We may make changes to this policy. We will always display clearly when the policy was last updated. We will notify you of changes by including a notice on our Platform or, if appropriate, we will communicate the change with you.
This Privacy Policy was last updated on 4 June 2026.
5.1. Information collected from you
When you interact with our services, for example when browsing our Platform or visiting the venue, we collect information about you and that particular interaction. This could be:
5.2. Information collected from other sources
Where you make a transaction and use our loyalty scheme at participating Merchants, we receive details of your transaction from the Merchant, including the identity of the Merchant that you transacted with, the amount that you spent, and details of any vouchers or loyalty points that you redeemed.
Where you visit the venue or plan to attend an event, we may receive information about you from other sources. We work closely with third parties in connection with events you attend (including, for example, event organisers, venue operators, sub-contractors in technical, payment services, advertising networks, analytics providers, search information providers) and we may receive information about you from them.
If you apply for a job with us, we may receive information about you from your referees.
We may collect, use, store and transfer personal information about you in the following categories. We explain why this information is used in paragraph 7 below.
6.1. Identity data: including your name, username or similar identifier, date of birth, gender.
6.2. Contact data: such as your address, e-mail address and phone number.
6.3. Images: including those collected in areas of our venue covered by CCTV or taken at events held at our venue.
6.4. Email or call data: including:
6.5. Payment data: including payment card or bank account details you provide to us when you make a purchase of any of our services such as booking car parking.
6.6. Services data: including details about products and services you have purchased, events you have attended, bookings you have made (including your access to restricted areas of our venue in connection with such bookings, and your entitlement to use the service that you have booked, such as blue badge parking spaces and/or any other accessibility facilities that we make available), and loyalty scheme activity (including points earned and redeemed).
6.7. Location data: including whether you are at our venue or your actual or inferred location when using our Platform or otherwise interacting with us, subject to permissions required by your browser or the operating system of your device to access your location.
6.8. Technical data: IP address; browser type; device type and operating system; the full URL of pages you view on our website; diagnostic data (including crash logs, launch time, and other data collected for technical diagnostics purposes); and any relevant unique identifiers assigned to your device or browser (including cookie identifiers). If you use our Wi-Fi, we may collect your device’s unique identifier, details of what type of device or operating system you are using, how often you use the Wi-Fi and where you were when you used it.
6.9. Usage data: Data observed or collected in relation to browsing activity on our website or interaction with our emails. When you use the website, we will collect information such as what site you came from, which part of the website you use and what you use the website for. We use that information to analyse activity on the website.
6.10. Marketing and communications data: including your preferences in receiving marketing from us and our third parties and your communication preferences.
6.11. Social media data: we may collect details of your interactions with us via social media. If you follow one of our social media accounts we may receive additional information about you, including your account name, gender, general interests, location, age (depending on your settings).
6.12. Medical data: including information about health and safety related incidents and accidents at the venue or about your requirements to allow us to make reasonable adjustments during your visit to the venue.
6.13. Job application data: including CVs and qualification information, information from referees, relevant background and criminal records checks.
The Data Protection Laws require us to have a legal reason to use your personal information (known as a “legal basis”). There are a number of legal bases available under the Data Protection Laws. It’s quite complicated but these are the ones we generally rely on:
7.1. To fulfil a contract: We process your personal information to fulfil a contract we have with you or to take steps at your request before entering into a contract. For example, when you book a car parking space, we will process your information to administer that booking.
7.2. For a legitimate interest: Sometimes we may use your personal information to help achieve our business objectives or those of a third party. For example, we will process personal information of our Platform users to improve and keep our services secure, or to provide social media and marketing content that is of interest. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal information for our legitimate interests. We will not use your personal information where our legitimate interests are overridden by the impact on you.
7.3. To comply with legal obligations: There may be situations where we need to use your information to comply with legal obligations. For example, ensure our staff, representatives and visitors are in a safe environment which complies with health and safety and employment laws.
7.4. In the public interest: There may be situations where retaining your information may be in the public interest. For example, images of events at Olympia which may be held in the public archives.
7.5. With your consent: There are some activities where we process personal information with your consent, for example, where you give your consent to us (or specified third parties) sending you direct marketing emails.
The following information explains why we process your personal information and our legal basis for doing so:
We collect and maintain personal information that you voluntarily submit to us to enable us to provide you with services or support. For example, where you have made a booking, use our Platform, access our Wi-Fi, use our loyalty scheme, or where we provide you with relevant information.
Personal information we process for this purpose
Our legal basis for this purpose
It is necessary for us to use your personal information to perform our obligations in accordance with any contract that we may have with you, or it is in our legitimate interests (or those of a third party) to use the personal information to ensure we provide our services effectively. We may also process this data to comply with our legal obligations.
We process personal information to set up and manage your user account on our Platform. For example, to verify your identity when logging in (including via email verification codes), to store your preferences, and to provide you with access to Platform features.
Personal information we process for this purpose
Our legal basis for this purpose
It is necessary for us to use your personal information to fulfil a contract with you. It is also in our legitimate interests to provide secure and effective access to our Platform and services.
We process personal information to notify and communicate with you about our services. For example, if there is a change to one of our events.
Personal information we process for this purpose
Our legal basis for this purpose
It is necessary for us to use your personal information to fulfil a contract with you.
We process personal information to keep our services secure. For example, to detect misuse of our Platform by a user which may impact others.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests to maintain a secure service and protect our users and systems from misuse. We may also process this data to comply with legal obligations (e.g. data protection laws).
We process personal information to improve our services. For example, by using information to understand what our customers’ needs are or to ensure content from our Platform is presented in the best manner. We may also contact you with surveys and feedback requests.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests to develop and improve our services and Platform, understand our customers’ needs, and enhance user experience.
We process personal information to allow you to use special features of our Platform, such as booking functionality, and to control access to restricted areas of our venue.
Personal information we process for this purpose
Our legal basis for this purpose
It is necessary for us to use your personal information to fulfil a contract with you (e.g. where this feature is part of our Platform or service) or with your consent (e.g. for location-based features).
We process personal information to market our services to you. For example, we may provide you with information about services that are similar to those you have previously purchased or recommend events you may be interested in. We may also share information about products and services of third parties.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests to grow our business and promote our services. Where we collect consent, we rely on your consent. Please see paragraph 8 for more information.
We process personal data to provide bespoke content and targeted advertising on social media platforms.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests to improve our online presence and promote our services via social media. Where we collect consent, we rely on your consent. Please see paragraph 9 for more information.
We process personal data to record and investigate health and safety related incidents at the venue.
We may process the following personal data:
Our legal basis for this purpose
We process this data to comply with legal obligations. It is also in our legitimate interests to effectively manage an incident, assess our handling of incidents, and improve our processes. We may also process this data where necessary to protect vital interests.
We process personal information to make reasonable adjustments for you at our venue or other locations. For example, if you will need assistance to attend an event or other appointment with us.
Personal information we process for this purpose
Our legal basis for this purpose
It is necessary for us to use your personal information to fulfil a contract with you. We may also process this data to comply with legal obligations.
We process personal information to prevent and detect fraud.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests or those of a third party to minimise fraud that could be damaging for us, our business partners and for you.
We process personal information to manage contracts with your employer. For example, if you work for one of our suppliers, an exhibitor or event organiser, we will require limited information about you in the context of that relationship.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests or those of a third party to manage our commercial relationships and supply chain effectively.
We process personal information to manage our business in a compliant and efficient way and to ensure our business policies are adhered to. For example, to train our staff.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests to operate our business effectively, maintain appropriate records, and ensure compliance with internal policies. We may also process this data to comply with legal obligations.
We process personal information to enforce our rights under our contracts and defend claims.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests or those of a third party to establish, exercise or defend legal claims.
We process personal information to keep our venue safe and secure. Security measures are in place at our venue, including CCTV and building access controls. We use CCTV and access control data to investigate any actual or suspected criminal activity or security incidents.
Personal information we process for this purpose
Our legal basis for this purpose
It is in our legitimate interests or those of a third party to keep our venue secure, provide a safe environment for visitors, staff and Merchants, and to assist in the prevention and detection of crime. We may also process this data to comply with legal obligations.
We process personal information to consider your application for a job with us.
Personal information we process for this purpose
Our legal basis for this purpose
It is necessary for us to use your personal information to take steps at your request before entering into a contract with you.
Special category personal data or criminal offence data
There may be circumstances where we need to use “special category personal data” about you. Special category personal data is information which reveals a person’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data (where used to uniquely identify you), data concerning health or data concerning a natural person's sex life or sexual orientation.
Where we use your special category personal data or criminal offence data, we are also required to identify a further condition under the Data Protection Laws.
We will use your medical data for the purposes listed above. When we do so, we will rely on the following conditions: (a) explicit consent; (b) where this information is manifestly made public by you; (c) to exercise or defend legal claims; (d) to comply with laws relating to employment, social security or social protection; (e) where use of this information is in your vital interests, but you are incapable of giving consent.
Where you apply for a job, we may also need to use your medical and criminal offence data to meet our legal obligations as your potential employer.
When your information is collected, you may be asked to indicate your preferences for receiving direct marketing communications from us (or specified third parties) via email, text, telephone or post.
We may use your personal information to send you direct marketing emails, texts or in app messages about our products and services, including exclusive offers, promotions or new products or services if:
We have a legitimate interest in processing your personal information for marketing purposes. However, where consent is needed (e.g., to send you third party marketing emails), we will ask for this consent separately and clearly.
You have the right to opt out of receiving direct marketing from us at any time by contacting us at DPO@olympia.co.uk or experience@olympia.co.uk, or by using the ‘unsubscribe’ link in emails.
We may ask you to confirm or update your marketing preferences if you instruct us to provide further products or services in the future, or if there are changes in the law, regulation, or the structure of our business.
We will share your personal information with social media sites to enable them to provide marketing messages, where you have consented to those sites providing you with these messages. The social media sites that we share your personal information with and their respective privacy statements are as follows:
We may use this personal information to:
9.1. to provide bespoke social media content (for example by analysing your general interests);
9.2. to create targeted advertising across all our social media channels (for example by analysing responses to posts and existing advertisements);
9.3. to find out more about our digital community (for example by analysing the age ranges of our followers); and / or
9.4. the other purposes set out in paragraph 7 above.
We have secure systems and processes in place to ensure the personal information you provide us is kept safe. We store personal information on our secure electronic systems. Any payment transactions will be encrypted.
All online transactions are processed by third party payment services providers, who are subject to rules about keeping payment data secure. Credit card details are not stored locally.
Your personal information may be transferred to one of our reputable service providers. We can assure you that we take all reasonable steps to ensure your personal information is handled securely under appropriate agreements with our suppliers.
We may transfer your personal information to third parties based outside the United Kingdom.
If we transfer personal information to countries outside of the United Kingdom, we may rely on: (a) a lawful exception to the rules relating to overseas data transfers (for example, you have given your explicit consent or it is necessary to make the transfer to fulfil our contract with you); (b) a decision from the Secretary of State (or other mechanism permitted under the Data Protection Laws) determining that the country provides an adequate level of protection to the Data Protection Laws; or (c) appropriate safeguards in respect of transfers of personal information to a country outside of United Kingdom (for example, by requiring the recipient of the personal information in the other country to agree to the standard contractual clauses or international data transfer agreement approved under the Data Protection Laws).
Please contact us if you would like further information on the measures taken to safeguard your data.
Your personal information is retained by us in accordance with the applicable Data Protection Laws. Our data retention periods vary depending on the nature and context of the personal information that we have in our care, and are calculated taking into account the following factors:
This means that, in general, we delete personal information when: the purpose for its processing has been fulfilled or the contractual relationship with our client, you or your company has ended; all mutual claims have been fulfilled; and there are no other legal obligations to retain the personal information nor legal bases for further processing.
At the end of the relevant retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.
Please note that if you delete your account on our Platform, we will delete all personal information associated with that account, except that we will continue to hold personal information in the following circumstances:
Any retained data won’t be used for purposes other than those outlined above.
Our Platform may, from time to time, contain links to websites operated by third parties, including Merchants. These third-party websites are outside of our control and are not covered by this policy. Those websites will have their own privacy and cookies policies and the information you give them will follow their rules not ours. We do not accept any responsibility or liability for other websites’ privacy policies. If you access other websites using the links provided, please check their policies before submitting any personal information.
If you download and install our mobile application from an app store (such as Google Play or the Apple App Store), you must first register for a user account with the provider of the app store (e.g. Google or Apple) and agree to that app store’s user agreement. We have no influence over the terms of such user agreement and are not a party to it. When downloading, installing and using our mobile application, certain information may be transmitted to the provider of the app store including identifiers relating to you or your device and the time of download. For further information on the type of information that may be shared with, or collected by, the provider of the app store, please see the relevant app store provider’s privacy notice. We have no influence over this process and are not responsible for the privacy practices of the provider of the app store.
Where we are required by law to collect personal information, or we need to collect personal information under the terms of a contract we have with you, and you fail to provide that personal information, we may not be able to fulfil any obligations that we owe to you, and we may not be able to enter into or perform a contract with you. This may apply where you do not provide personal information that we need to provide our services or process an application to register an account. In these circumstances, we may have to cancel the provision of the relevant services to you, in which case we will notify you.
We may share personal information where necessary with the parties set out below for the purposes set out in paragraph 7 above:
We only allow our service providers to handle your personal information if we are satisfied they take appropriate measures to protect your personal information. We also impose contractual obligations on service providers.
You have the following rights, which you can exercise free of charge:
To object: the right to object
We want to ensure that we provide you with the best possible service. Please therefore always keep us updated of any changes to your personal information, for example, if your email address changes. You can do this by changing your account details in the “update preferences” link in our emails, or by getting in touch using the contact details in paragraph 3 above.
Last updated: June 2026