At Play group — Privacy & Cookies

Updated: 10 October 2026. This notice covers the eight websites below. At Play is a trading name of Sam Harrison, who is responsible for the use of personal information described here. Contact thecastle@samskingdom.com for privacy enquiries or a request concerning your information.

Websites covered

samskingdom.com — stories, colouring books, community accounts and Kingdoms Under Siege.
atplayinthewoods.co.uk — outdoor-activity enquiries, bookings and associated orders where available.
atplayevents.com — event-trailer hire and event-service enquiries.
discosandmagic.co.uk — entertainment and booking enquiries.
dmevents.org — event information and enquiries.
stnicholasfayre.co.uk — the historical Clevedon event archive; old event invitations do not constitute current booking offers.
livelifegaming.co.uk — gaming-community information. The game server is currently offline.
volcanoradiolive.co.uk — internet-radio information. The station is currently offline.

This notice does not cover unrelated websites reached through external links. Features vary between our sites; visiting one website does not create an account or booking on another.

Information collected and why

Enquiries and bookings: information you send, such as your name, contact details, event date, requested service and message. We use it to respond, prepare a quote and arrange the service you request. The basis is taking steps towards or performing a contract where applicable, or our legitimate interest in responding to general enquiries.

Accounts and games: account name, email address, password in its protected form, profile or Kingdom Passport information you provide, game progress, alliances, resources, messages and reports. These support the account and game service you request. Public profiles, leaderboards and forum posts are visible to other visitors or members, depending on the feature. Do not put private contact details in your public profile or posts. Moderation and abuse prevention support our legitimate interest in maintaining a safe, functioning community.

Orders and payments: customer and order information needed to supply purchases and handle support, such as contact and billing details, purchased items, order status and payment references. We use it to fulfil the purchase, deal with refunds and meet applicable accounting or legal obligations. Payment-card processing is handled by the connected payment provider, including Square where offered; please read that provider’s notice at checkout.

Technical and security information: hosting and security services can process IP addresses, browser details, requested URLs, times and error or access logs. This supports our legitimate interest in delivering the website, identifying faults and preventing abuse. Security features, including Google reCAPTCHA where used on an enquiry form, may process device and interaction information to help detect automated misuse.

We obtain information directly from you, from your use of our features and, for a transaction, from the relevant payment service. We do not need sensitive personal information for a general website enquiry. Please avoid sending it unless it is necessary for an agreed service.

Optional Analytics and advertising

Google Analytics integrations have been paused while consent behaviour is verified. AdSense has been prepared for the group websites, but adverts are currently held off while approval and consent checks are pending. A prepared advert block is not an active advert.

If Google Analytics is enabled with your permission, it can process information such as page views, device/browser details and interactions to help us understand and improve the website. Optional Analytics will use an explicit consent choice rather than being treated as essential. We do not treat agreement to our general terms as consent to optional tracking.

If advertising is enabled, third-party vendors including Google may use cookies to serve adverts based on your previous visits to our websites or other websites. Google’s advertising cookies enable Google and its partners to provide personalised adverts based on those visits. You can manage personalised advertising at Google My Ad Center, or visit AboutAds choices for participating third-party vendors. These external choices do not replace the choices on our websites.

Before personalised AdSense advertising is enabled for visitors in the UK, EEA or Switzerland, a Google-certified consent platform must provide the applicable provider list and consent choices. You must be able to refuse optional tracking and change your choice.

Cookies, browser storage and embedded content

Necessary storage supports requested services such as login sessions, security, baskets and checkout. Its use depends on the features you visit. WordPress login/session cookies and WooCommerce basket/session cookies, where those systems are used, support authentication and shopping rather than advertising.

Optional embedded videos, maps and social content can contact an external provider. Where an embed is held behind a Load content control, it is not loaded until you choose that control. Loading it shares technical information such as your IP address and browser details with the named provider and may allow its cookies or similar storage. Choosing not to load an embed does not prevent you reading the rest of the page.

YouTube, Google Maps or social providers have their own privacy terms. Read Google’s privacy policy for Google services and Meta’s privacy policy for Facebook or Instagram content. An ordinary external link only takes you to that provider when you follow it.

Use Cookie settings in the footer to see the current optional-service status and stop loaded optional content. Reloading removes a loaded embed from the current page; previously stored third-party cookies may remain until their expiry or until you remove them through your browser or the provider’s controls. Browser settings also let you remove cookies and control storage. Blocking all cookies can affect login, baskets and other requested features. Cookie and session lifetimes depend on the service and your login or browser choices; persistent identifiers can last beyond the visit. We do not describe a third party’s default duration as a verified inventory of every cookie on your device.

Who receives information

Information may be handled by our hosting provider, Hosting24/Hostinger, email and security providers, the connected payment provider for a purchase, and Google or another embedded-content provider when its service is used. WordPress, WooCommerce and game plugins run the website’s functions; using this software does not by itself mean that every software developer receives your information. We may disclose information where lawfully required, for example to fulfil a legal obligation.

International processing

Some service providers operate internationally and may process information outside the UK. Their privacy notices describe their locations and arrangements. Where we arrange a restricted international transfer, an applicable adequacy decision or other lawful transfer safeguard is required. Contact us for information about the provider and safeguards relevant to your request.

Retention

We decide retention by the purpose and the records needed for it. Enquiry records are assessed against whether the enquiry is open, a service was booked and follow-up or a dispute remains necessary. Account and game records support the active account, service history, security and any outstanding transaction or dispute. Order and accounting records are assessed against applicable legal obligations. Logs are assessed against fault investigation and security needs. Backup copies can remain until the relevant backup cycle replaces them. Contact us about a particular record; deletion rights may be subject to legal or other valid retention requirements.

Your privacy rights

Depending on the circumstances, you can request access, correction, erasure, restriction of processing or a portable copy of information you supplied. You can withdraw consent for processing based on consent without affecting the lawfulness of earlier processing. We may need proportionate information to confirm that a request comes from the right person.

Your right to object: you can object to processing based on legitimate interests, including explaining your particular circumstances. You can object to direct marketing at any time. Contact the privacy email above. We do not interpret a cookie refusal as a request to delete an account or cancel a purchase.

You can raise a concern with us and also complain to the Information Commissioner’s Office (ICO). You do not have to exhaust our process before contacting the ICO.

Children and family use

Our colouring and story content can be enjoyed by families. Accounts are for adults to create and manage for themselves or their household, using the adult's own email address. Children should use interactive features under adult supervision; adults manage purchases. Do not publish a child's contact information, school details or other private information in profiles, forums or messages. If a child's information has been posted, contact us so we can review removal.

Questions and changes

For questions about a feature, a provider, a record or this notice, email thecastle@samskingdom.com. We will update the notice when our use of information changes. Consent to a new optional purpose must be requested before that purpose is introduced.