Your privacy

Updated 26 September 2026. This notice covers our escape room directory, practice puzzles and venue enquiries. Free player accounts are available. Online bookings are restricted to venues whose connection and payment checks have passed. Optional local room alerts are separate from any general newsletter.

Who looks after your information?

Find Escape Rooms is operated by MERP CREATIONS LTD, the controller of this information. Our company details and postal address appear at the bottom of this page. Email escape@findescaperooms.co.uk for privacy questions or requests.

Player accounts

We use your email, account identifier and securely stored password information to provide the account you request, on the basis of performing our agreement with you. Account setup and password-reset emails are service messages, not marketing. You can request access, correction or deletion using our contact email. Account information is retained while needed to provide your account, with periodic reviews of inactive accounts and any continuing purpose. Optional future services will have separate information before activation.

Local room alerts

If you opt in, we use your email, private postcode and the coordinates returned by Postcodes.io to notify you about newly bookable rooms within 15 miles. Confirm your email before alerts start. You may withdraw consent in your account or using the link in an alert. We record your consent and delivery status to honour your preferences and prevent duplicate messages; delivery logs do not prove that a message reached your inbox. Your postcode is sent to Postcodes.io for location lookup, not published on your profile.

Venue workspaces

Signed-in operators can save private business, venue and room details. Connecting Bookeo uses the account owner’s approval on Bookeo and encrypted connection credentials on this site. Connection checks read business identity, rooms and availability. Saving details does not grant ownership of a researched listing or enable bookings. We retain connection and agreement evidence while needed to supply and protect the service, and review it on closure or a privacy request.

What we collect and why

• Venue enquiries: business name, town, website, booking software, email and telephone, plus an optional contact name. Required fields let us identify the venue and respond. Without them we cannot accept the online enquiry; you can email us instead. Please do not provide passwords, API keys or sensitive personal details.
• Public venue research: venue and room names, locations, official links and public business contact details from official websites and business directories. Research contacts are kept privately; enquiry email addresses and telephone numbers are not published.
• Security and support: correspondence and technical request information needed to operate the website, prevent abuse and resolve problems. Hosting logs may include IP addresses and requested URLs. The enquiry form uses an IP-derived identifier for an hourly submission limit and a separate daily duplicate-submission check.

We rely on legitimate interests to handle business enquiries, maintain an accurate directory and protect the service. You can object to this processing. Sending an enquiry does not subscribe you to marketing, verify ownership or activate a booking connection. We do not make decisions with legal or similarly significant effects about you solely by automated processing.

Who can receive it?

Authorised administrators handle enquiries in our private website administration. Bluehost supplies website hosting and Titan supplies our business email service; these providers process information needed to supply those services. We may disclose relevant information where required by law or to handle a legal claim. We do not sell enquiry contact details.

Following a venue’s booking link takes you to that business’s website. Its privacy notice applies to information you give it. This directory does not send your enquiry details to that venue through the link.

How long we keep it

We retain an enquiry while handling it and review inactive enquiries after 12 months to decide whether to delete or anonymise them. Continuing discussions, a requested listing or an unresolved dispute may justify keeping relevant information longer; unnecessary details should be removed. Public business research is reviewed for accuracy and continuing relevance rather than kept as an unrestricted personal contact archive.

The form’s rate-limit and duplicate-check identifiers expire after one hour and one day respectively. Website email-delivery logs are configured for 14 days; this does not delete emails from our mailbox. Hosting logs, backups and mailbox records require separate retention review. A deletion request may leave limited records needed for a legal obligation or dispute; we will explain any exception.

Your choices and rights

Contact us to request access, correction or deletion, to object to processing, or to request restriction or portability where applicable. We may need proportionate identity checks. We normally respond within one month and will explain any lawful extension. You can also ask us to correct a venue listing without submitting a new venue enquiry.

If you are unhappy with our handling of your information, contact us first so we can investigate. You can also complain to the Information Commissioner’s Office.

Cookies and children

See our cookie information for browser storage. The directory does not require a player profile. The venue enquiry form is intended for business representatives; please do not submit children’s details.