This Privacy Policy explains how the Rivals Innovation group (“we”, “us”, “our”) collects, uses and protects your personal data when you:

• Visit www.rivalssocial.com,

• Make an enquiry or booking for Rivals Social,

• Or otherwise interact with us online or offline in relation to Rivals Social.

We are committed to protecting your privacy and complying with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

If you have any questions, please see section 10 for how to contact us.

1. Who we are (group structure)

Rivals Social is the venue and brand name of a competitive socialising site in Canterbury. It does not operate as a separate limited company – it is part of a wider group of companies.

For the purposes of this policy, the Rivals Innovation group includes:

• Rivals Innovation Ltd – holding / group company

• Escape Kent Ltd – operates escape rooms in Canterbury and handles bookings for Rivals Social

• Escape Kent Prison Island Ltd – operates Prison Island Maidstone

• Timescape Adventures Ltd – design and engineering team behind our games and attractions

When you use this website or make a booking for Rivals Social, your data will primarily be handled by:

Escape Kent Ltd, acting as data controller for bookings and venue operations,
and Rivals Innovation Ltd, acting as group data controller for shared systems and marketing.

In this policy, when we say “Rivals Social”, “we”, “us” or “our”, we mean Escape Kent Ltd and Rivals Innovation Ltd, together with the other group entities listed above where they are involved in providing your experience.

Contact details for data protection:

Rivals Social (Rivals Innovation group)
4a Simmonds Road
Canterbury
Kent
CT1 3RA
United Kingdom

Email: info@rivalssocial.com

2. What personal data we collect

The data we collect depends on how you interact with us. It may include:

2.1 Information you give us directly

For example, when you:

• Make a booking or enquiry for Rivals Social

• Enquire about or book escape rooms or other experiences with Escape Kent

• Join our mailing lists

• Fill in a contact or enquiry form

• Enter a competition or promotional campaign

• Communicate with us by email, phone, social media or in person

This may include:

• Name

• Contact details (email address, phone number)

• Booking details (date, time, activities, group size)

• Information about your group (e.g. occasion, age ranges, company name)

• Payment-related information (e.g. partial card details handled via our payment provider – we do not store full card numbers)

• Preferences (dietary requirements, accessibility needs, marketing preferences etc.)

• Any other information you choose to provide in free-text boxes or messages

2.2 Information we collect automatically

When you visit our websites (including rivalssocial.com and, where relevant, escapekent.com), we may collect:

• IP address

• Device type, operating system and browser type

• Approximate location (e.g. city/country level)

• Pages visited, links clicked, time spent on pages

• Referring site or campaign (e.g. if you clicked through from an advert or social media)

We usually collect this information via cookies and similar technologies. For more details, please see our Cookie Policy.

2.3 Information from third parties

We may receive information about you from:

• Booking platforms / ticketing systems you use to make reservations

• Payment providers that process your payments

• Marketing and advertising platforms (for example, if you interact with our ads or social media pages)

• Partners we work with to run joint events, promotions or corporate bookings

We only receive the information we need to provide our services and run our business, and we handle it in line with this Privacy Policy.

3. How we use your personal data (and legal bases)

We will only use your personal data where we have a lawful basis to do so. These include: performance of a contract, our legitimate interests, your consent, and compliance with legal obligations.

3.1 To manage bookings and provide our services

For example:

• Processing booking requests and enquiries

• Managing your visit or event at Rivals Social

• Coordinating group activities and schedules

• Communicating important information about your booking (confirmations, changes, reminders, etc.)

Legal basis:

• Performance of a contract (or steps taken before entering into a contract)

• Our legitimate interests in operating and managing our venues and services

3.2 To process payments and prevent fraud

For example:

• Taking and refunding payments

• Working with payment providers and banks

• Detecting and preventing fraud or suspicious activity

Legal basis:

• Performance of a contract

• Our legitimate interests in preventing fraud and protecting our business

• Compliance with legal obligations

3.3 To send you marketing and updates

If you opt in (or where we are permitted to do so under “soft opt-in” rules), we may send you marketing about:

• Rivals Social

• Escape Kent and Prison Island

• New games or experiences developed by Timescape Adventures

• Special offers, discounts, competitions and events

We may also use your data to build audiences for ads (for example, custom or lookalike audiences on social media platforms) where this is permitted.

You can opt out of marketing at any time by:

• Clicking “unsubscribe” in our emails, or

• Contacting us using the details in section 10.

Legal basis:

• Your consent (for email/SMS marketing where required)

• Our legitimate interests in promoting our services to existing customers (where soft opt-in applies)

3.4 To improve our websites, venues and services

For example:

• Analysing how people use our websites and emails

• Measuring the performance of activities, offers and campaigns

• Understanding demand for different games and experiences

• Testing new features and improving the guest journey

Legal basis:

• Our legitimate interests in running and improving our business and customer experience

• Your consent (for non-essential cookies/analytics, where required)

3.5 To comply with laws and protect our rights

For example:

• Keeping accurate records for tax and accounting

• Dealing with complaints and legal claims

• Responding to requests from regulators or law enforcement where required

• Enforcing our terms and conditions or venue rules

Legal basis:

• Compliance with legal obligations

• Our legitimate interests in protecting our legal rights and the safety of our guests and staff

4. Who we share your data with

We do not sell your data. We may share it with:

4.1 Other companies in the Rivals Innovation group

We may share your data with other companies in our group (Escape Kent Ltd, Escape Kent Prison Island Ltd, Timescape Adventures Ltd, Rivals Innovation Ltd) where necessary to:

• Deliver your booking or event

• Provide technical and operational support

• Run centralised systems (e.g. booking, analytics, marketing)

• Offer you relevant experiences across the group (e.g. escape rooms, Prison Island, new attractions)

They will only use your data for the purposes described in this policy or compatible purposes.

4.2 Service providers

Trusted third parties who help us run our business, such as:

• Booking and ticketing platforms

• Payment processors and banks

• Email and marketing platforms (e.g. newsletter tools, CRM)

• Website hosting and maintenance providers

• Analytics providers

• IT and security providers

• Customer support tools (e.g. helpdesk software)

These companies act as processors, meaning they only process your data on our instructions and are bound by contract to keep it secure and confidential.

4.3 Business partners

We may share limited information with partners where:

• We run joint events or promotions

• An external provider delivers part of your experience

• We need to pass limited details to secure a booking or event with them

We will only share what is necessary for them to provide their part of the service.

4.4 Legal, regulatory and safety reasons

We may share your data where:

• Required by law, court order or regulatory authority

• Needed to protect our rights, property or safety, or that of our guests, staff or the public

• Necessary to assist with the detection or prevention of crime or fraud

4.5 Business transfers

If our business or part of it is sold, merged or reorganised, your data may be transferred to the new owner or entity as part of that process, under appropriate safeguards.

5. International transfers

Some of our service providers and partners may be located outside the UK or European Economic Area (EEA).

Where personal data is transferred outside the UK/EEA, we will ensure appropriate safeguards are in place, such as:

• An adequacy decision by the UK government or European Commission, or

• Standard Contractual Clauses (SCCs) and any necessary supplementary measures.

You can contact us for more information about these safeguards.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy, including:

• To provide the services you’ve requested

• To meet legal, accounting and reporting requirements

• To manage complaints, disputes or legal claims

Typical retention periods may include:

• Bookings and transaction records: usually retained up to 6 years for tax and accounting purposes

• Marketing data: retained until you unsubscribe or we consider the data inactive and remove it as part of regular list hygiene

• Enquiries and correspondence: retained for a reasonable period to follow up, improve our services and manage any issues

When data is no longer needed, we will delete it or anonymise it so it can no longer be linked back to you.

7. Your rights

Under UK data protection law, you have the following rights in relation to your personal data:

• Right of access – to request a copy of the personal data we hold about you

• Right to rectification – to have inaccurate or incomplete data corrected

• Right to erasure – to ask us to delete your data in certain circumstances

• Right to restrict processing – to limit how we use your data in certain cases

• Right to data portability – to receive data you have provided in a structured, commonly used format and/or have it transmitted to another controller

• Right to object – to object to our processing of your data where we rely on legitimate interests, including for direct marketing

• Right to withdraw consent – where processing is based on your consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the details in section 10.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data. We would, however, appreciate the chance to deal with your concerns first.

ICO website: www.ico.org.uk

8. Children’s data

Rivals Social is principally aimed at adults and older teens, although families and younger guests may attend.

Bookings and contracts should be made by an adult (e.g. parent/guardian, teacher, or organiser). We do not knowingly collect children’s personal data directly for marketing purposes.

If you believe a child has provided us with personal data without appropriate consent, please contact us and we will review and, where appropriate, delete that data.

9. Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration or disclosure, including:

• Using secure hosting and reputable service providers

• Employing access controls so only those who need to see data can access it

• Using secure connections (HTTPS) on our websites

• Training staff on data protection and confidentiality

• Applying reasonable technical safeguards and monitoring

No system can be guaranteed 100% secure, but we work to keep your data as safe as reasonably possible.

10. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your rights, please contact us:

Rivals Social (Rivals Innovation group)
4a Simmonds Road
Canterbury
Kent
CT1 3RA
United Kingdom

Email: info@rivalssocial.com