Privacy Policy

1. Information We Collect

Information You Provide Directly

We collect information you give us when you interact with our site or services, including:

• Bookings, waivers, and gift card purchases: Your name, email address, phone number, billing address, payment information, party size, age (where applicable), emergency contact details, and signature. This information is collected through our booking partner, Off The Couch ("OTC"), at offthecouch.io.
• Waiver acceptance: When you sign our Accident Waiver and Release of Liability Form, you also provide consent to be added to our mailing list and to allow Escape Room Co. to photograph, videotape, or audio-record your participation in our experiences.
• Mailing list sign-ups: Your email address, and any other fields you provide (such as your name). You may join the mailing list through the sign-up form on our website or by providing your email address when signing our waiver.
• SMS / Mobile messaging sign-ups: Your name, email address, mobile phone number, and your consent preferences for transactional and promotional messages.
• Email and phone inquiries: Any information you choose to share when you email info@escaperoomco.com or call (717) 488-3822.
• Contact and idea-submission forms: Information you submit through forms on our site, including your "Suggest a Room" submissions.

Photos, Video, and Audio Recordings

During your visit to Escape Room Co., we may photograph, videotape, or audio-record your participation in our experiences. By signing our waiver, you grant us the right to use these recordings for any legitimate business purpose, including marketing, social media, training, and operational review. We do not sell or license recordings of identifiable individuals to unrelated third parties for advertising purposes. If you have concerns about a specific recording or wish to request its removal from public-facing materials, contact us using the information in Section 11.

Information Collected Automatically

When you visit our site, we and our service providers may automatically collect:

• Your IP address, device type, browser type and version, and operating system.
• Pages you visit, links you click, time spent on pages, and referring URLs.
• Cookies and similar tracking technologies (described in Section 4).
• Approximate geographic location (city or region level, derived from IP).

Information from Third Parties

If you interact with our content on social media platforms (Facebook, Instagram, TikTok, YouTube), those platforms may share certain information with us in accordance with their own privacy policies and your account settings.

2. How We Use Your Information

We use the information we collect to:

• Process bookings, payments, gift card orders, and waivers.
• Send booking confirmations, reminders, and post-visit communications.
• Charge stored payment methods for damages or other charges authorized in our waiver, where applicable.
• Send marketing communications, including newsletters, promotional emails, and SMS messages, where you have consented. You can unsubscribe at any time.
• Use photos, video, and audio recordings of your visit for marketing, social media, training, and other legitimate business purposes, as authorized in our waiver.
• Respond to inquiries, support requests, and feedback.
• Improve our website, services, and customer experience.
• Measure the effectiveness of our advertising and marketing.
• Comply with legal obligations and protect our business interests.
• Ensure the safety of our guests and prevent fraud.

3. How We Share Your Information

We do not sell your personal information. We do not sell, rent, or share mobile phone numbers with third parties for their marketing purposes. We share your information only as described below:

Service Providers

We share information with third-party service providers who help us operate our business, including:

• Off The Couch (OTC): Our booking, gift card, and waiver platform. OTC processes booking details, waiver submissions, and payment information on our behalf. See offthecouch.io for their privacy policy.
• Stripe: Payment processing for bookings and gift card purchases, accessed through OTC.
• TextMagic: Our SMS messaging provider. When you sign up for text messages, your contact information is added to our list at TextMagic so we can send messages. See TextMagic's privacy policy at textmagic.com/privacy-policy.
• Google Analytics 4: Website traffic and behavior analytics. See Google's privacy policy at policies.google.com/privacy.
• Meta (Facebook): Advertising and analytics through the Meta Pixel and Conversions API. See Meta's privacy policy at facebook.com/privacy/policy.
• WordPress hosting and form services: Including Forminator for storing form submissions.
• Zapier: Workflow automation that connects our forms to our messaging and contact services.

Legal Requirements

We may disclose your information when required by law, subpoena, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or respond to a government request.

Business Transfers

If Escape Room Co. LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate our website, remember your preferences, analyze traffic, and measure marketing performance.

Types of Cookies We Use

• Essential cookies: Required for the site to function, such as cookies that keep your booking session active.
• Analytics cookies: Used by Google Analytics to understand how visitors use our site.
• Advertising cookies: Used by the Meta Pixel to measure ad performance and serve relevant advertisements on Facebook and Instagram.
• Third-party cookies: Cookies set by embedded content from YouTube, Google Maps, social media platforms, or our booking partner OTC.

Your Choices

Most browsers allow you to block or delete cookies through your browser settings. Blocking certain cookies may affect site functionality. You can also opt out of personalized advertising through industry tools such as the NAI opt-out tool or the DAA opt-out tool.

5. SMS / Text Messaging

If you have opted in to receive SMS messages from Escape Room Co., we collect your name, email address, and mobile phone number, and we record your consent preferences (transactional and/or promotional). Messages are sent through TextMagic.

You can opt out of SMS messages at any time by replying STOP to any text message from us. For help, reply HELP or contact us at info@escaperoomco.com or (717) 488-3822. Message frequency may vary. Message and data rates may apply.

For full SMS terms, see our Mobile Terms of Service.

6. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal exceptions.
• Opt-out of marketing: Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us. Opt out of SMS by replying STOP to any text message.
• Request photo/recording removal: If you have appeared in marketing or social-media content we have produced and wish to request removal, contact us.
• Do Not Track: We do not respond to "Do Not Track" browser signals at this time, as no industry standard for these signals has been finalized.

California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights. To exercise these rights, contact us using the information in Section 11.

EU and UK Residents (GDPR)

If you are located in the European Union or United Kingdom, you have rights under the GDPR, including the right to access, rectify, erase, restrict processing of, port, or object to processing of your personal information. Our legal bases for processing include consent (for marketing), performance of a contract (for bookings), and legitimate interests (for site security and analytics).

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information. Our booking and payment partner OTC uses industry-standard encryption (SSL/TLS) for data in transit, and Stripe handles all payment card information in accordance with PCI-DSS standards.

However, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Minors under 18 may visit Escape Room Co. and participate in our experiences, but bookings and waivers for minors must be completed by a parent or legal guardian. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly.

9. Data Retention

We retain your information for as long as needed to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

• Booking and waiver records: Retained for at least seven (7) years to support business operations, liability protection, and tax requirements.
• Mailing list and SMS subscription information: Retained until you unsubscribe or request deletion. Consent records (timestamp, IP address, and source) are retained for at least five (5) years for TCPA compliance.
• Photos, video, and audio recordings: Retained for as long as needed for our legitimate business purposes, unless removal is requested.
• Analytics data: Retained according to the retention settings of our analytics providers (typically 14-26 months for GA4).

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will provide additional notice, such as posting a banner on our website or sending an email if you are on our mailing list. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise any of your rights, contact us at: