top of page
Abstract Design


Last updated: 22nd Jan 2024

1. About this policy

This section of our website is designed to help you understand what we do with information about people, referred to as “personal data”.  We have provided this policy to ensure that you understand what personal data we may collect and hold about you, what we may use it for and how we keep it safe. You have legal rights to access the personal data that we hold about you and to control how we use it which are also explained within this policy.

You can read or print this whole policy.  As we undertake a wide range of activities, we’ve divided it into several different sections, reflecting the different ways you might interact with us, in order to help you get to the information you want quickly.

Our company

This policy covers the use of your personal data by Riddles Retreat Ltd. The company consists of the following brands and, in this privacy policy, “we” or “us” will apply the relevant brands below:

Riddles Retreat Ltd – this company processes your personal data when you use its website (

Escape Room HQ –

 2. Information we collect:

  1. When you visit our websites, we will collect technical information about your visit: your IP address, your visit login information, browser type and version, time zone setting, browser plug-in types and versions, device type, operating system and platform, as well as details of how you navigated to our website and when you left, what pages you viewed or searched for, page response times, download errors, length of visits to certain pages, and page interaction information (such as scrolling, clicks, and mouse-overs).
  2.  When you register to for information or make purchases: name, address, phone number and email address.

We collect this information from you or from the booking person on your behalf and do not collect personal information from any other source.


3. Use of Cookies


We may gather information about your general internet use while visiting the website by using the cookie to assist us in improving the website. Where applicable this website uses a cookie control system allowing the user on their first visit to the website to allow or disallow the use of cookies on their mobile devices. This complies with the legislation requirements for websites to obtain explicit consent from users before leaving behind or reading files such as cookies on a user’s mobile device.


You can adjust the settings on your computer to decline any cookies if you wish. This can be done within the “settings” section of your computer. For more information, please read the advice at


The website uses tracking software to monitor visitors to better understand how they use it, provided by Google Analytics. The software will save a cookie to your computer’s hard drive to track and monitor your engagement and usage of the website, but will not store, save or collect personal information. You can read Google’s privacy policy here for further information: .

By using our website, you consent to the use of cookies in accordance with our Cookies Policy.


4. Use of Your Information


We use the information that we collect from you to provide our services to you. In addition to this we may use the information for one or more of the following purposes and on the following lawful grounds:


- To take online, telephone or in person card payments from you (contractual necessity) using Resova, having its own privacy notice which can be viewed here:

- To provide information to you that you request from us relating to our products or services (contractual necessity). This includes SMS messages to the mobile phone number for the lead booking to confirm and remind you of your booking.

- To provide information to you relating to other products that may be of interest to you. Such additional information will only be provided where you have consented to receive it. For example, you have already registered our email subscription.

- To post your team photos on our social media platform which you request/consent to at the time you play the game (information and consent obtained from you when you arrive and register to play). 

- To inform you of any changes to our website, services or goods and products (legitimate interests).

- CCTV:  We have CCTV security cameras in communal areas at our location sites.  It is in our legitimate interests to record visitors to our premises in the interests of safety and security of people and property.

We never give your details to third parties.


5. Social media


Communication, engagement, and activities conducted on external social media platforms by this website and its owners adhere to the terms and conditions and privacy policies of each respective social media platform.


Users are advised to exercise prudence and caution when using social media platforms, particularly regarding their privacy and personal information. The website and its owners will never request personal or sensitive information through these platforms and recommend users with such concerns to reach out through primary communication channels such as telephone or email.


The website may incorporate social sharing buttons to facilitate the direct sharing of web content to specific social media platforms. Users are advised to use these buttons judiciously, understanding that the social media platform may track and save their request to share a web page via their respective social media accounts.


6. Retaining your Information


We only obtain, use, and retain personal information that is relevant to and not excessive for the purpose that we require it. We will delete your information when you ask us to or when we no longer have a need to retain it which will be no longer than 5 years after we last had any contact from you. CCTV footage is recorded on a loop system which, on average, over-records after 4 weeks.


7. Third Party Links

On occasion we include links to third parties on this website. Where we provide a link, it does not mean that we endorse or approve that site’s policy towards visitor privacy. You should review their privacy policy before sending them any personal data.


8. Access to Information and your rights under GDPR 2018

In accordance with GDPR 2018 you have the right to access any information that we hold relating to you. You have the right to ask Escape Room HQ to delete all data we hold on to you. The request can be made 60 days after your booked experience and will be fulfilled within 30 days of your request. To request the deletion of your data please email .


You can find more information about your GDPR rights and when they apply in the UK ICO Guidance:

9. Contacting Us

If you have any matter related to this Privacy Policy, please do not hesitate to contact us via email on using the subject title Privacy Policy.

bottom of page