Privacy Policy

Last updated: 15 September 2026.

This notice explains what personal information Escape Rooms Cornwall collects, why we collect it, who we share it with and what rights you have over it. It covers this website and the services we provide at our venue in Penzance.

Who we are

Escape Rooms Cornwall Ltd is the data controller for the information described here.

Address: The Basement, The Old Telephone Exchange, 44 New Street, Penzance, Cornwall, TR18 2LZ
Phone: 01736 691049
Email: sales@escaperoomscornwall.com

What we collect, and why

When you book a game

We collect your name, email address, phone number, the room and time slot you have chosen, and your group size. We need this to hold your booking, to contact you if anything changes, and to have a named person to greet on the day.

Lawful basis: performance of a contract.

When you pay

Payments are processed by Stripe. Your card details are entered on Stripe’s own secure systems and are never seen or stored by us. We receive only a confirmation that payment succeeded, the amount, and a reference.

Lawful basis: performance of a contract, and legal obligation for keeping financial records.

When you complete a waiver

Before playing, participants complete a disclaimer. This records the names of the people playing, confirmation that the safety information has been read, and any relevant health or accessibility information you choose to tell us so that we can keep you safe in the room.

Lawful basis: performance of a contract, and our legitimate interest in the safety of people in our rooms. Any health information you give us is used only to keep you safe, and only for as long as needed for that purpose.

When you contact us

If you use our contact form, email us or ring us, we keep your message and contact details so we can reply and so we have a record of the conversation.

Lawful basis: legitimate interests — answering enquiries about our own services.

When you use this website

We use cookies and similar technologies. Essential cookies make the site and the booking process work. Analytics and advertising cookies are only set after you consent through our cookie banner, and you can change or withdraw that consent at any time from the banner.

Lawful basis: consent for non-essential cookies; legitimate interests for essential ones.

Marketing

We will only send you marketing emails if you have asked us to. Every marketing email includes an unsubscribe link, and unsubscribing takes effect immediately. Booking confirmations and messages about a game you have booked are not marketing — we send those because you have a booking with us.

Who we share information with

We do not sell, rent or trade your personal information. We share it only with the services we need to run the business, and only for that purpose:

Stripe — card payment processing
Our booking system — to hold and manage your reservation
Our website host — the site and its database are stored on their servers
Our email provider — to send booking confirmations and, if you have opted in, marketing
Google (Analytics, Tag Manager, Ads) and Meta — website analytics and advertising measurement, only where you have consented
Our website security provider — to detect and block malicious activity

We may also disclose information where we are legally required to, or to establish or defend legal claims.

International transfers

Some of the providers above are based outside the UK, or store data outside the UK. Where that happens, the transfer is covered by UK adequacy regulations or by standard contractual clauses, so your information keeps an equivalent level of protection.

How long we keep it

Booking and payment records: six years after the end of the relevant financial year, because we are required to keep financial records for that long.
Waivers: kept for as long as we may need them in connection with a visit, and then deleted.
Enquiries and contact-form messages: normally up to two years, so we have context if you come back to us.
Marketing consent: until you unsubscribe or ask us to remove you.
Analytics data: for the retention period set in the analytics platform, in aggregate form.

How we protect it

The website runs over HTTPS. Access to booking records is limited to the people who need it to run the business. Payment card details never reach our systems. We keep the website, its plugins and its security tools up to date.

Your rights

Under UK data protection law you have the right to:

ask for a copy of the personal information we hold about you
have inaccurate information corrected
ask us to delete information, where we have no continuing reason to keep it
ask us to restrict how we use it
object to processing based on our legitimate interests
ask us to transfer information you gave us to another provider
withdraw consent at any time, where we rely on consent

To exercise any of these, email sales@escaperoomscornwall.com or ring 01736 691049. We will respond within one month.

Complaints

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Children

Under-14s must be accompanied by an adult in the room, and 14 to 16 year olds need an adult close by. Where a child is playing, we expect the booking and the waiver to be completed by a parent or guardian.

Changes to this notice

If we change how we handle personal information we will update this page and change the date at the top. Material changes will be made clear.