World of Escapes Privacy Policy

Last updated on September 4, 2026

We are committed to protecting your privacy. To better protect your privacy, we provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personal data may be requested.

This Privacy Policy governs the manner in which ESCAPY B.V. collects, uses, maintains and discloses information (“Personal Data”) collected from users (each, a “User”) of the worldofescapes.com website (“Site”). This privacy policy applies to the Site and all products and services offered by ESCAPY B.V.

ESCAPY B.V. is the data controller responsible for the processing of personal data described in this Privacy Policy.

If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, you may contact us at:

ESCAPY B.V.

Email: [email protected]

The Personal Data that we may collect broadly falls into the following categories:

1. Personal identification information
   In the course of engaging with our Site, you may provide Personal Data about you. We may collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our site, leave reviews, fill out a form, and in connection with other activities, services, features or resources we make available on our Site. Users may be asked for, as appropriate, first name, last name, email address, mailing address, and phone number. We collect and process your personal data only where we have a valid legal basis under applicable data protection laws, including where processing is necessary for the performance of a contract, compliance with legal obligations, our legitimate interests, or where you have provided your consent.
2. Technical and Usage Information
   We may collect technical and usage-related information when Users interact with our Site. Technical and usage-related information may include your computer’s Internet Protocol address (e.g., IP address), browser type, browser version, pages visited, date and time of visits, time spent on pages, advertisements viewed or clicked, operating system, device type, unique device identifiers, Internet service provider, and other similar technical information. We may be able to determine from an IP address a user’s Internet Service Provider and the geographic location of his or her point of connectivity. We may use internal and third-party analytics tools, including Google Analytics.
3. Information we collect from other sources
   From time to time, we may obtain information about you from third-party sources, such as our joint marketing partners. We take steps to ensure that such third parties are legally or contractually permitted to disclose such information to us.

We will only use your personal data when the law allows us to.

Pursuant to the GDPR, we will use your personal data in one or more of the following circumstances:

1. Where we need to perform the contract, we are about to enter into or have entered into with you
2. Where it is necessary for our legitimate interests (or those of a third-party) and your interests and fundamental rights do not override those interests
3. Where we need to comply with a legal or regulatory obligation
4. With your consent.

We may use the information we collect from you in the following ways:

1. To improve our website in order to better serve you
2. To contact you to answer your inquiry
3. To allow us to better service you in responding to your customer service requests
4. To administer a contest, promotion, survey or other Site feature
5. To send service-related communications and, where permitted by applicable law or where you have provided consent, marketing communications regarding our products and services. You may opt out of marketing communications at any time by following the unsubscribe instructions included in such communications or by contacting us directly.

Most of our services do not require any form of registration, allowing you to visit our website without telling us who you are. However, some services (review, partnership inquiry or escape room submission) may require you to provide us with Personal Data. In these situations, if you choose to withhold any Personal Data requested by us, it may not be possible for you to gain access to certain parts of the Site and for us to respond to your query.

We use analytics services, including Google Analytics, to help us understand how visitors use our Site and to improve our services and user experience.

Where required by applicable law, analytics technologies will only be used after you have provided your consent. Information collected through analytics tools may include IP address, browser type, device information, operating system, language settings, pages visited, time spent on pages, and similar usage information.

Such information may constitute personal data or pseudonymous data under applicable data protection laws.

Our Site may use “cookies” to enhance user experience. User’s web browser places cookies on their hard drive for record-keeping purposes and sometimes to track information about them. They may be used to help us understand your preferences based on previous or current site activity, which enables us to provide you with improved services.

User may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Site may not function properly.

We do not intentionally collect sensitive categories of personal data such as financial account information, government identification numbers, or special categories of data unless required for a specific lawful purpose. The collected information is used to provide an overview of how people are accessing and using our website. It is not used for any additional purpose, such as to profile those who access our website.

You may have the following data protection rights:

1. To access, correct, update or request deletion of Personal Data. We take reasonable steps to ensure that the data we collect is reliable for its intended use, accurate, complete and up to date. You may contact us at any time about accessing, correcting, updating or deleting your Personal Data, or altering your data, by emailing us at [email protected].
2. Individuals who are residents of the EEA can object to processing of their Personal Data, ask to restrict processing of their Personal Data or request portability of their Personal Data. You can exercise these rights by emailing us at [email protected].
3. Similarly, if Personal Data is collected or processed on the basis of consent, the data subject can withdraw their consent at any time.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. We may ask you to verify your identity in order to help us respond efficiently to your request.

Our Site includes links to other websites of our commercial partners and other third parties, whose privacy practices may be different from ours. If you submit Personal Data to any of those sites, your information is governed by their privacy policies. We encourage you to carefully read the privacy policy of any website you visit.

We do not sell, trade, or otherwise transfer your personal data to outside parties, except as described in this Privacy Policy. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others’ rights, property, or safety.

We may share aggregated or de-identified information that does not reasonably identify individuals for analytics, research, marketing, or business purposes, in accordance with applicable law.

We may share personal data with trusted third-party service providers who process information on our behalf for purposes such as website hosting, analytics, communications, customer support, advertising, and technical infrastructure, subject to appropriate contractual and security safeguards.

From time to time, we may use Google Analytics and Ads tracking codes, along with other third-party software tools (such as remarketing codes) in order to collect marketing analytics about the pages you browse on our Site or when you undertake specific actions through our services. These platforms may also use cookies, codes and other technologies to help us analyze our users’ patterns.

For example, third-party vendors may display our advertisements on websites across the Internet after you leave our Site. Information collected through advertising and analytics technologies may include online identifiers, browser information, device information, and browsing activity associated with your interactions with our Site.

Such information may constitute personal data or pseudonymous data under applicable data protection laws. We use this information to analyze the effectiveness of our advertising campaigns, improve our services, and provide more relevant content and advertising experiences.

Our third-party vendors may also use cookies and beacons to track your Internet browsing in order to serve you ads based on what they or us believe to be of your interest. Such information will be processed for purposes of evaluating your browsing activities and consumer preferences.

Where required by applicable law, we will obtain your consent before using advertising, remarketing, analytics, or similar tracking technologies.

You may withdraw or modify your consent preferences at any time through the cookie settings available on our Site or through your browser settings, subject to certain technical limitations. You can manage your cookie preferences through our cookie banner or browser settings.

In order to enforce and uphold your right to privacy, you have the option to elect not to receive this type of advertising from us or third parties, now or in the future. You can learn more about how to opt-out by browsing Google’s opting-out and privacy pages located at www.google.com, or the Network Advertising Initiative website located at www.networkadvertising.org. In addition, you may set browser and system preferences for how other third parties serve ads to you.

If you are a resident of the European Economic Area, our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which we collect it.

We process personal data only where we have a lawful basis under applicable data protection laws. Depending on the circumstances, processing may be based on:

1. your consent;
2. the performance of a contract with you;
3. compliance with legal obligations; or
4. our legitimate interests, provided such interests are not overridden by your rights and freedoms.

Typically, our legitimate interests include improving, maintaining, providing, and enhancing our technology, products, and services, ensuring the security of the Site, preventing fraud, and communicating with users regarding our services where permitted by applicable law. Where required by law, we will collect Personal Data only where we have your consent to do so.

This GDPR Statement applies to persons in the European Economic Area (“EEA”), including those based in the United Kingdom. This GDPR Statement supplements our Privacy Policy; however, where the Privacy Policy conflicts with the GDPR Statement, the GDPR Statement will prevail as to persons in the EEA.

You have certain rights regarding your personal data.

Your rights with respect to your own personal data include the following:

1. The right to request access to your personal data. This enables you to receive a copy of the personal data we hold about you
2. The right to request to correct your personal data if it is inaccurate. You may also supplement any incomplete personal data we have, taking into account the purposes of the processing
3. The right to request deletion of your personal data if:
   1. your personal data is no longer necessary for the purposes for which we collected or processed them; or
   2. you withdraw your consent if the processing of your personal data is based on consent and no other legal ground exists; or
   3. you object to the processing of your personal data and we do not have an overriding legitimate ground for processing; or
   4. your personal data is unlawfully processed; or
   5. your personal data must be deleted for compliance with a legal obligation.
4. The right to object to the processing of your personal data. We will comply with your request, unless we have a compelling overriding legitimate interest for processing or we need to continue processing your personal data to establish, exercise or defend a legal claim
5. The right to restrict the processing of personal data, if
   1. the accuracy of your personal data is contested by you, for the period in which we have to verify the accuracy of the personal data; or
   2. the processing is unlawful and you oppose the deletion of your personal data and request restriction; or
   3. we no longer need your personal data for the purposes of processing, but your personal data is required by you for legal claims; or
   4. you have objected to the processing, for the period in which we have to verify overriding legitimate grounds.
6. The right to data portability. You may request that we send this personal data to a third-party, where feasible. You only have this right if it relates to personal data you have provided to us where the processing is based on consent or necessity for the performance of a contract between you and us, and the processing is conducted by automated means.
7. You also have the right to lodge a complaint with the competent supervisory authority in the country where you reside, work, or where an alleged infringement of applicable data protection law has occurred.

You will not have to pay a fee to access your personal data (or to exercise any of the other rights described in this Privacy Policy). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. In an effort to speed up our response, we may also contact you to ask you for further information in relation to your request. You can exercise several of your rights through the personal data section of your account.

Your personal data may be transferred to and processed in countries outside the European Economic Area (“EEA”) or the United Kingdom (“UK”), including countries that may not provide the same level of data protection as your jurisdiction.

Where we transfer personal data internationally, we implement appropriate safeguards in accordance with applicable data protection laws, including:

1. adequacy decisions issued by the European Commission or UK authorities;
2. Standard Contractual Clauses approved by the European Commission;
3. the UK International Data Transfer Agreement (“IDTA”); or
4. other legally recognised transfer mechanisms.

We take reasonable steps to ensure that transferred personal data remains protected and processed in accordance with this Privacy Policy and applicable law.

Under California Law, California residents have the right to request in writing from businesses with whom they have an established business relationship, (a) a list of the categories of Personal Data, such as name, email, and mailing address, and the type of services provided to the customer that a business has disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third-parties’ direct marketing purposes, and (b) the names and addresses of all such third parties. To request the above information, please email us at [email protected].

Effective January 1, 2020, the California Consumer Privacy Act (CCPA) allows California residents, upon a verifiable consumer request, to request that a business that collects consumers’ personal data to give consumers access, in a portable and (if technically feasible) readily usable form, to the specific pieces and categories of personal data that the business has collected about the consumer, the categories of sources for that information, the business or commercial purposes for collecting the information, and the categories of third parties with which the information was shared. California residents also have the right to submit a request for deletion of information under certain circumstances. Consistent with California law, if you choose to exercise your rights, we won’t charge you different prices or provide different quality of services unless those differences are related to your information.

We do not sell personal data to third parties.

We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal data, transaction information and data stored on our Site and third-party Sites. We process confidential information (e.g., payment transactions) through third-party payment providers and will not transmit information to our servers in any way.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, reporting, or regulatory requirements.

The criteria used to determine retention periods include:

1. the nature of the relationship with the user;
2. the purposes for which the data was collected;
3. legal and regulatory obligations;
4. applicable limitation periods; and
5. operational necessity.

When personal data is no longer required, we will securely delete, anonymize, or otherwise dispose of it in accordance with applicable laws.

Our Site and services are not directed to children under the age required by applicable data protection laws in their jurisdiction, and we do not knowingly collect personal data from children without appropriate legal consent where required.

If you believe that a child has provided personal data to us in violation of applicable law, please contact us and we will take appropriate steps to delete such information.

ESCAPY B.V. has the discretion to update this privacy policy at any time. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal data we collect. Our electronically or otherwise properly stored copies of this privacy policy are each deemed to be the true, complete, valid, authentic, and enforceable copy of the version of this privacy policy that was in effect on each respective date you visited the Site.

If you have any questions about this Privacy Policy, the practices of this site, or your dealings with this site, please contact us at:

ESCAPY B.V.

email: [email protected]