Secret Streets Privacy Policy
This policy explains what personal data Secret Streets collects when you book or play our self-guided treasure hunt, why we collect it and what you can do about it.
Who we are
Secret Streets is based in London. We are the data controller for the personal data described here.
Website: secretstreetstours.com
Email: hello@secretstreetstours.com
For any privacy question or request, email hello@secretstreetstours.com.
What data we collect
We only collect what we need to run the game and the business.
Name, email address, billing details collected upon payment
WhatsApp phone number and profile name collected when you text us your start code
Game messages, answers and timestamps collected while you play
Email address collected if you sign up to our newsletter
Anything you choose to tell us collected when you email or message us
Website usage data (pages visited, device, rough location) collected through cookies on our website
We never see or store your full card number. Our payment provider handles all card details.
How we use your data
UK data protection law requires a lawful reason for each use of your data. These are ours.
To run your booking and game (contract): taking payment, sending your access code, sending clues on WhatsApp, and handling your questions, refunds and complaints.
To meet our legal duties (legal obligation): keeping payment records for tax.
For our legitimate interests: preventing fraud, handling payment disputes, and understanding how people use our website and game, using anonymous stats where possible.
With your consent: sending newsletters and offers (or under the soft opt-in, see below), and showing ads to people who have visited our website.
We do not sell your data, and we do not make automated decisions about you that have legal or similar effects.
Marketing messages
We only send marketing if you've signed up for it, or if you've bought from us and didn't opt out when we asked.
Every marketing email or message includes an easy way to unsubscribe.
You can also email hello@secretstreetstours.com at any time to stop marketing.
Messages that are part of your game, such as clues and your access code, are not marketing and are not affected by unsubscribing.
Photos and videos
We only use your photos or videos in our marketing if you've given us permission.
What we collect: photos or videos you send us, tag us in, or that we take of you during a hunt.
How we use them: on our website, social media (such as Instagram and TikTok) and in ads.
Lawful basis: consent. We'll ask before using any photo or video where you can be identified, and we'll ask every person in it who can be identified.
Children: we won't use images of anyone under 18 without permission from their parent or guardian.
Changing your mind: email hello@secretstreetstours.com and we'll stop using the photo or video and remove our posts within 14 days. We can't control copies others have already shared or saved.
How long we keep them: until you withdraw permission, or until we no longer use them, whichever comes first.
Who we share it with
We use trusted service providers to run Secret Streets. They only process your data on our instructions.
Payment processor: takes payments securely.
Messaging providers: send and receive WhatsApp messages during your game.
Automation and cloud storage: run bookings and the game, and store records.
Email provider: sends booking and newsletter emails.
Website host: hosts our website and newsletter sign-up.
Advertising platforms: show our ads, only if you accept marketing cookies.
We can give you the names of specific providers on request.
We may also share data if the law requires it, for example with HMRC.
International transfers. Some of these providers store data outside the UK, including in the US and EU. Where they do, they are covered by UK adequacy rules (such as the UK-US Data Bridge) or standard contract terms approved for UK data, so your data gets the same level of protection.
How long we keep it
DPhone number and game records: 12 months after your hunt, to handle refunds, disputes and support, and to recognise returning players.
Payment and transaction records: 6 years, as required for tax.
Newsletter email: until you unsubscribe.
Emails and support messages: 2 years after the conversation ends, in case of follow-up questions or complaints.
After these periods we delete your data or make it fully anonymous, for example keeping only the date, group size and completion time.
Cookies
Our website uses cookies. Essential cookies keep the site and checkout working. Analytics cookies help us see how the site is used. Marketing cookies let us show ads to people who have visited.
We only set marketing cookies if you accept them in our cookie banner. You can change your choice at any time through the cookie settings link at the bottom of the site, or by clearing cookies in your browser.
Your rights and how to complain
You have the right to:
get a copy of the data we hold about you
have inaccurate data corrected
have your data deleted
restrict or object to how we use it
withdraw consent at any time, where we rely on consent
receive your data in a portable format
To use any of these rights, email hello@secretstreetstours.com. We'll reply within one month and won't charge you.
Complaints. If you're unhappy with how we've handled your data, email us first. We'll acknowledge your complaint within 30 days and do our best to put things right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We'll update this policy when how we use data changes. The date at the top shows the latest version. If a change is significant, we'll tell newsletter subscribers by email.