Privacy Policy
Last updated: 10th September 2026
Fuddled Limited (“Fuddled”, “Fuddled Escape Rooms”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and protect personal information when you use our website, make or participate in a booking, visit Fuddled Escape Rooms, contact us, sign up to receive marketing communications or otherwise interact with us.
Fuddled Limited is the data controller responsible for the personal information described in this policy.
1. Who we are
Fuddled Limited is a company registered in England and Wales and trades as Fuddled Escape Rooms.
Company name: Fuddled Limited
Trading name: Fuddled Escape Rooms
Company number: 17006022
Registered office: Nethercott Lodge, Iddesleigh, Winkleigh, Devon, EX19 8BD
Escape room venue: Unit 3 River View Commercial Centre, Riverside Road, Barnstaple, EX31 1QN
Email: hello@fuddled.com
Website: fuddled.com
If you have any questions about this Privacy Policy or how we use your personal information, please contact us using the details above.
2. Personal information we collect
The personal information we collect depends upon how you interact with us.
When you make a booking, we may collect information including your name, email address, telephone number, booking date and time, number of participants, the escape room booked, payment and transaction information, discount or voucher information and any information you choose to provide in connection with your booking.
We may also collect information about other members of your group where this is necessary to provide our services. We ask that you do not provide us with unnecessary personal information about other people.
When you contact us, we may collect your name, contact details and the contents of your correspondence with us.
When you use our website, we may collect technical information such as your IP address, browser type, device information, pages visited, referring website and information collected through cookies or similar technologies.
If you subscribe to marketing communications, we will collect your contact details and information about your marketing preferences.
We operate CCTV at our premises and we may also collect images of people visiting the venue.
We do not intentionally collect special category personal data unless there is a genuine reason to do so. However, you may sometimes choose to tell us information relevant to accessibility, health or other requirements so that we can help you participate safely and comfortably. Where this happens, we will only use the information where we have an appropriate lawful basis and, where required, an additional condition for processing special category data.
3. How we use your information and our lawful bases
UK data protection law requires us to have a lawful basis for processing personal information. Depending on the circumstances, we may use your information for the following purposes.
Bookings and providing our services. We use information to process and administer bookings, take payment, send booking confirmations and reminders, communicate important information about your booking and provide the escape-room experience you have purchased. We generally process this information because it is necessary to enter into or perform our contract with you.
Customer service. We use personal information to answer enquiries, deal with booking changes, complaints, refunds and other customer-service matters. Depending on the circumstances, our lawful basis is contract or our legitimate interests in operating our business and providing good customer service.
Payments and financial records. We use transaction information to process payments, refunds and maintain appropriate accounting and tax records. Our lawful bases are contract and, where applicable, compliance with a legal obligation.
We do not normally receive or store your complete payment-card details where payments are handled by a third-party payment provider. The payment provider processes your payment information in accordance with its own privacy arrangements.
Safety, security and preventing misuse. We may process information where reasonably necessary to protect our customers, employees, premises and equipment; investigate incidents; prevent fraud or misuse; and establish, exercise or defend legal claims. Our lawful basis will generally be our legitimate interests and, where applicable, compliance with a legal obligation.
Where we rely upon legitimate interests, we consider whether our use of personal information is necessary and balance our interests against the rights and interests of the people concerned.
CCTV. If CCTV is used at our premises, we may process images for the purposes of safety, security, crime prevention, protecting our property and investigating incidents. Our lawful basis will generally be our legitimate interests.
Marketing. If you have chosen to receive marketing emails or other electronic communications from us, we may use your contact details to tell you about Fuddled Escape Rooms, including new rooms, events, offers and other news.
Where consent is required, we rely upon your consent. You can withdraw that consent at any time by using the unsubscribe facility in a marketing communication or by contacting us.
In some circumstances UK electronic-marketing rules may permit us to contact existing customers about our own similar products or services. Where we rely on this, we will always provide an opportunity to opt out.
We will not sell your personal information to third parties for their own marketing purposes.
4. Cookies and our website
Our website may use cookies and similar technologies.
Some cookies are necessary for the website to function properly. Others may be used for purposes such as remembering preferences, understanding how visitors use our website or measuring the effectiveness of our advertising.
Where UK law requires consent before a cookie or similar technology is placed or accessed on your device, we will request your consent. The ICO confirms that where consent is required under the Privacy and Electronic Communications Regulations (PECR), consent will normally also be the appropriate UK GDPR lawful basis for subsequent processing of personal data obtained through that technology.
You can manage your choices through our cookie controls where available and through your browser settings.
Further information about the cookies we use is provided in our Cookie Policy.
5. Who we share personal information with
We may share personal information with trusted organisations that help us operate Fuddled Escape Rooms. These may include:
- booking and reservation-system providers;
- payment processors;
- website hosting and IT service providers;
- email and communications providers;
- marketing and analytics providers;
- accountants, professional advisers and insurers;
- companies providing security or CCTV systems; and
- government bodies, regulators, law-enforcement agencies or other organisations where disclosure is required or permitted by law.
Where another organisation processes personal information on our behalf, we require appropriate arrangements to protect that information.
We do not sell or rent customer personal information to third parties.
6. International transfers
Some of the service providers we use will process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we will ensure that an appropriate mechanism or safeguard is used where required by UK data protection law. This may include transferring information to a country covered by UK adequacy regulations or using approved contractual safeguards.
You may contact us if you would like further information about safeguards relating to international transfers that affect your personal information.
7. How long we keep personal information
We do not keep personal information for longer than we reasonably need it.
The exact retention period depends upon why the information was collected, any contractual requirements, legal or regulatory requirements, the need to resolve disputes or complaints and whether information may be required to establish, exercise or defend legal claims.
For example, we may retain booking and transaction records for the period required for accounting and tax purposes.
Marketing information may be retained while you remain subscribed. If you unsubscribe, we may retain limited information on a suppression list so that we can respect your request not to receive further marketing.
CCTV recordings, where used, will normally be retained only for a limited period unless footage is required to investigate an incident, protect someone’s safety or establish, exercise or defend legal claims.
When personal information is no longer required, we will delete it, anonymise it or otherwise dispose of it securely.
The ICO requires organisations either to state retention periods or explain the criteria used to determine them, rather than retaining personal information indefinitely
8. Keeping your information secure
We take appropriate technical and organisational measures to protect personal information against accidental or unlawful loss, destruction, alteration, disclosure or access.
Access to personal information is restricted to employees, contractors and service providers who reasonably need access to it for their work.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
9. Children
Our escape rooms may be enjoyed by children and young people, but bookings will generally be made by an adult.
We aim to collect as little personal information about children as reasonably possible. Where information relating to a child is required, we will process it in accordance with applicable data protection law and take the child’s interests into particular consideration.
Parents and guardians should avoid providing unnecessary personal information about children when making a booking or contacting us.
10. Photographs and social media
We may occasionally take photographs or video at our premises for promotional purposes.
Where an identifiable customer is the focus of promotional photography or video, we will obtain any consent that is required before using the material.
If customers choose to post photographs, reviews or other content about Fuddled Escape Rooms on third-party websites or social-media platforms, the processing of that information by those platforms is governed by their respective privacy policies.
11. Your data protection rights
Depending upon the circumstances and the lawful basis on which we process your information, UK data protection law gives you a number of rights.
These may include the right to:
- access personal information we hold about you;
- rectify inaccurate or incomplete information;
- erase your personal information in certain circumstances;
- restrict the way we process your information in certain circumstances;
- object to certain processing;
- data portability, where applicable;
- withdraw your consent at any time where our processing is based upon consent; and
- raise concerns about how your information is being used.
These rights are not absolute and some apply only in particular circumstances.
Your right to object
Where we process your personal information on the basis of legitimate interests, you have the right to object to that processing in certain circumstances.
You have an absolute right to object to the use of your personal information for direct marketing.
To exercise any of your rights, please contact us at hello@fuddled.com
We may need to ask you for information to confirm your identity before responding to a request.
There is normally no charge for exercising your data protection rights. We will respond within the timescales required by law.
The ICO specifically requires the right to object to be brought clearly and separately to people’s attention.
12. Complaints
If you are concerned about the way we have handled your personal information, please contact us first so that we have an opportunity to investigate and respond.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
Information Commissioner’s Office
Telephone: 0303 123 1113
You do not have to contact us before making a complaint to the ICO.
13. Links to other websites
Our website may contain links to websites operated by other organisations. We are not responsible for the privacy practices of those websites. We recommend reading their privacy information before providing personal information to them.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, the services we use or applicable law.
The latest version will be published on our website and the “last updated” date at the top of this policy will be amended accordingly.