Privacy Policy
Last updated 3 September 2026
Last updated: 3 September 2026
[COMPANY_NAME NOT SET] ("we", "us") runs Tavern Escapes at https://tavernescapes.com. This notice explains what we do with your personal data, and the rights you have over it. We are the data controller for that information.
If you have any questions, or want to exercise any of the rights below, email hello@tavernescapes.com.
Who we are
| Trading name | Tavern Escapes |
| Legal entity | [COMPANY_NAME NOT SET] |
| Company number | [COMPANY_NUMBER NOT SET] |
| Registered address | [REGISTERED_ADDRESS NOT SET] |
| ICO registration | [ICO_NUMBER NOT SET] |
| Contact | hello@tavernescapes.com |
What we collect, and why
When you buy a room. Your email address, your name, and a record of what you bought and when. We need this to give you access to what you paid for and to send you a receipt. The lawful basis is performance of a contract.
Your card details never reach us. Payments are handled by Stripe. We receive a confirmation that a payment succeeded, the last four digits of the card, and Stripe's own reference — never the full card number.
When you play. The rooms you have unlocked, the sessions you host or join, the access codes issued to your crew, and your saved progress. This is how the game works at all; the lawful basis is again performance of a contract.
When you give feedback. Your answers to the questions we ask after a room. The lawful basis is legitimate interests — understanding whether our rooms are any good. You do not have to answer, and nothing changes if you do not.
When you contact us. Your name, email, and whatever you write. Kept so we can answer you and refer back if you write again. Lawful basis: legitimate interests.
When you join the mailing list. Your email, plus the time and IP address you subscribed from, which is how we can show your consent was given. Lawful basis: consent, which you can withdraw at any time using the unsubscribe link in any email.
Cookies. See our Cookie Policy.
Who we share it with
- Stripe — payment processing. Stripe's privacy policy.
- Our email provider — to deliver receipts, access codes and gift links.
- Our hosting provider — the servers this site runs on.
We do not sell your data, and we do not share it for anyone else's marketing.
How long we keep it
| What | How long |
|---|---|
| Purchase and payment records | 6 years, as UK tax law requires |
| Your account and unlocked rooms | Until you ask us to delete it |
| Game sessions and saved progress | 12 months after the session ends |
| Feedback answers | 3 years, then anonymised |
| Contact form messages | 2 years |
| Mailing list | Until you unsubscribe |
Your rights
Under UK GDPR you can ask us to: give you a copy of your data; correct it; delete it; restrict what we do with it; hand it to another provider; or object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.
Email hello@tavernescapes.com and we will respond within one month. We will never charge you for this or make it difficult.
Deleting your account removes your access to any rooms you have bought, and we cannot restore it afterwards. We keep the minimum purchase record the law requires us to keep.
Complaints
If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or on 0303 123 1113.
Children
Tavern Escapes is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us information, email hello@tavernescapes.com and we will delete it.
Where your data is held
Our servers are in the United Kingdom. Some of our providers, including Stripe, may process data outside the UK. Where they do, that transfer is covered by the UK's approved safeguards such as the International Data Transfer Addendum.
Changes
If we change this notice we will update the date at the top, and tell you by email if the change materially affects you.
Your cookie choice, and our record of it
When you answer the cookie panel we do two things. Your choice is saved in your browser, so the site knows what to do on your next page. We also keep our own record of the decision, because the law asks us to be able to show that you agreed rather than simply assert it.
That record holds the date and time, what you allowed, how you answered, which version of this wording you were shown, your IP address, and your browser's description of itself. It does not hold your name unless you were signed in.
Changing your mind adds a new record rather than replacing the old one, so the history stays honest about what was agreed and when it was withdrawn. Records are deleted automatically once they are no longer useful as evidence — two years by default.
You can change your answer whenever you like using Cookie settings at the bottom of any page.