Openworld Quests Privacy Policy

Our contact details

Director name: Ryan Willis

Company name: Openworld Quests Ltd

The type of personal information we collect

Personal information is any information that can be used to identify a living person.

We currently collect and process the following information:

• Name
• Email address
• Phone number
• Postal address (if you buy a physical gift voucher)
• Subject & body of emails which may contain personal information
• IP address of the device or connection you use to access our website

How we get the personal information

Most of the personal information we process is provided to us directly by you for one of the following reasons:

• You made a reservation for a quest game through our website.
• You booked a quest game with us directly through our website.
• You booked a quest game through a sales partner for example Eventbrite, GetYourGuide, Tripadvisor (Viator).
• You contacted us with an enquiry by phone, email or SMS.
• You signed up to receive something for example our Top Tips city guide

How we use the personal information

We use the information that you have given us in order to:

We use your name and email address to:

• Deliver your quest game.
• Support you if something goes wrong.
• Email you other information (if you’ve requested it)
• Ask follow-up questions, for example:
  • Checking if everything was OK (if you did not complete the game),
  • Inviting you to join our mailing list,
  • Asking you how you thought the game was,
  • Asking about any disruptions to the game that you encountered,
  • Asking if we can phone you for user research,
  • Other questions relating to you, your booking or your experience in the city.
• Send emails to our opt-in mailing list.
• Store payment receipts as required by HMRC.

We use your phone number to:

• call you back if we’ve missed your call,
• support you if something goes wrong,

We use your postal address to:

• send you a physical gift voucher, if applicable

We use the subject and body of emails to:

• automatically categorise the type of email
• extract structured information for example if you’ve mentioned a date
• automatically respond to certain specific types of email

We use your sort code & account number to:

• Pay you for a photo that you’ve agreed to sell us for promotional use.

We use your IP address to:

• Keep a record of visitors to our website for debugging and abuse investigation.

We use third-party organisations listed in the next section to process information and run our business.

Apart from those listed, we do not share personal information with other organisations or individuals.

Third parties we use and the personal information they process

We use third party organisations for the day-to-day running of our business. Some of these receive personal information.

These are the third-parties, the personal information they receive and the reason they receive it:

• We use Shopify to process payments. They have full access to our payments account and the payment receipts, some of which contain name and email address.
• We use Google Analytics for tracking website visitor activity.

What lawful bases we use to process personal information

Under the UK General Data Protection Regulation (UK GDPR), the lawful bases we rely on for processing this information are:

• Your consent. This applies to our opt-in marketing emails. You are able to remove your consent at any time. You can do this by using the unsubscribe link or replying to any email we send you.
• We have a contractual obligation. This applies to fulfilling bookings made directly by you or through our sales partners.
• We have a legitimate interest. This lawful basis applies to our sending follow up communication after you book a quest game.
• We have a legal obligation. We may be required to disclose information for example, to law enforcement. At the time of writing this has never happened.

How we store your personal information

How we keep your personal information safe

• We minimise what we collect in the first place. We try to collect only the personal information information we need to run our business effectively.
• We store it securely, protected by strong authentication.
• We use two-factor authentication on all services that contain personal information.
• We minimise where we store personal information. We have a single business database that contains most data required to run our business. We limit where personal information is stored.
• We automatically delete personal information to prevent it from accumulating over time.

How long we retain your personal information for

As a principle we try to delete personally identifiable information within 30 days of it no longer being required, and no longer than 90 days.

• If you sign up for our mailing list, we retain your name and email address until you unsubscribe. We then automatically delete your information.

Your data protection rights

Under data protection law, you have rights including:

• Your right of access - You have the right to ask us for copies of your personal information.
• Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
• Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.
• Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.
• Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances.
• Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please use our contact details at the top of the page if you wish to make a request.

How to complain

If you have any concerns about our use of your personal information, you can make a complaint to us at the contact details at the top of the page.

You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we have used your data.

You should quote our ICO registration reference: ZB014668.

The ICO’s address:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

ICO Helpline number:

0303 123 1113

ICO Website contact page:

https://ico.org.uk/global/contact-us/