Privacy Policy

At WhereToEscape, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this Privacy Policy carefully. By using WhereToEscape, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Information You Provide

To use certain features of WhereToEscape, you may need to provide information including:

• Account Information: Name, email address, password, and profile information
• Trip Data: Rooms you've saved, trips you've planned, and preferences
• Reviews: Ratings, reviews, and feedback you submit
• Communications: Messages you send to us via contact forms or email

1.2 Information Automatically Collected

We automatically collect certain information when you use our service:

• Usage Data: Pages viewed, features used, time spent, and actions taken
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring website addresses
• Location Data: Approximate location based on IP address (for region detection)

1.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information, please see our Cookie Policy.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve the WhereToEscape service
• Account Management: To create and manage your account
• Personalization: To personalise your experience and show relevant escape rooms
• Communication: To send transactional emails (e.g., password resets, account notifications)
• Reviews: To display and manage your reviews and ratings
• Trip Planning: To save and manage your escape room trips
• Analytics: To analyse usage patterns and improve our Service (with your consent)
• Security: To detect, prevent, and address technical issues and security threats
• Legal Compliance: To comply with legal obligations and enforce our Terms

3. Third-Party Services and Data Processors

We use third-party service providers to operate our Service. These providers have access to your personal information only to perform specific tasks on our behalf:

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data is encrypted in transit using TLS/SSL
• Access Controls: Strict access controls limit who can access your data
• Authentication: Secure password requirements and authentication mechanisms
• Monitoring: Regular security monitoring and vulnerability assessments

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfil the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained while your account is active
• Account Deletion: Upon account deletion, personal data is permanently deleted within 30 days
• Analytics Data: Anonymised analytics data may be retained according to Google Analytics' retention policies

6. Your Legal Rights

Under UK GDPR and data protection laws, you have certain rights regarding your personal information:

6.1 Rights of Access and Control

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (right to be forgotten)
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

6.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@wheretoescape.com . We will respond to your request within 30 days in accordance with legal requirements.

7. Children's Privacy

WhereToEscape is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Sending an email to the address associated with your account
• Posting a notice on our platform
• Updating the "Last updated" date at the top of this policy

Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: