Privacy Policy

1. Information We Collect

We may collect the following information when you use our services:

A. Automatically Collected Data

• IP address
• Browser type
• Device information
• Pages visited
• Time spent on the site
• Search queries
• Referring URLs

B. Contact Form Submissions

• Name
• Email address
• Message content

B2. Free Prep Pack / Lead Magnet

• Email address (required to deliver the free First Visit Prep Pack; a fulfilment copy is also sent to the site operator)
• First name (optional)
• Marketing opt-in preference (optional — requesting the pack alone is not marketing consent)

B3. Digital Product Purchases

• Email address and payment confirmation details processed by Stripe for paid digital products
• Order metadata needed to unlock downloads or interactive tools after payment
• Transactional access emails (purchase confirmation / download or tool links)

Payment card details are handled by Stripe and are not stored on our servers.

B4. Corporate Event Builder (organiser tool)

• Event planning details you enter in the builder (for example team size, budget, venue shortlist notes, and generated message drafts)
• These plan details are stored in your browser (local storage) while you use the builder — not used as a public listing. Payment is only required to download the full PDF pack.

B5. Corporate Booking System (venue-owner workspace)

• Venue/business profile details you enter in your workspace
• Corporate package, quote and proposal content you create
• Corporate lead/contact details and message drafts you choose to store for follow-up

This is operational customer data you provide as a venue operator. It is stored so you can return to your paid workspace. It is separate from optional marketing consent.

C. Business Submissions or Listing Updates

• Business name
• Address
• Contact details
• Opening hours
• Photos
• Prices/packages

D. Cookies and Tracking

Essential browser storage supports features you request and records your privacy choice. Optional analytics is off until you accept it. The table below describes the technologies controlled by that choice.

Google AdSense in-article ads can appear on editorial guide and blog pages only. They are not shown on directory listings, search, maps, checkout, downloads or the Rage Reset game. Advertising consent for UK, EEA and Swiss visitors is collected by Google's certified Privacy & messaging CMP (IAB TCF), not by the analytics toggle on this page. Accepting analytics does not turn ads on, and rejecting analytics does not turn ads off. Use Google's privacy message to change ad choices, and the control below for analytics.

2. How We Use Your Data

We use personal data for:

• Improving website performance
• Enhancing directory content
• Responding to enquiries
• Delivering free checklists and paid digital products
• Providing the Corporate Event Builder, paid PDF downloads, and venue-owner workspaces
• Maintaining accurate business listings
• Analytics and usage insights
• Detecting security issues
• Future personalisation features

We do not sell your data to third parties.

3. Legal Basis for Processing (UK GDPR)

We process personal data under:

• Consent (optional analytics, optional marketing opt-in, and advertising via Google's CMP where required)
• Legitimate interests where appropriate for service security and improvement that does not rely on optional browser storage
• Contractual necessity (digital product fulfilment, listing submissions, venue-owner workspace operation)
• Compliance with legal obligations

4. Data Sharing

We may share data with:

• Vercel - Our hosting provider, which processes your IP address and request data
• Vercel Web Analytics - Optional page-view measurement after analytics opt-in
• Cloudflare - Hosting-edge security and delivery may process request metadata independently of the optional Cloudflare Web Analytics beacon; the Web Analytics beacon runs only after analytics opt-in
• Stripe - Payment processing for paid digital products
• Resend - Transactional email delivery for checklist and purchase access messages (and optional marketing audience updates only when you opt in)
• Upstash - Durable storage for Corporate Booking System venue-owner workspaces when configured
• Google Analytics - Optional page, product, funnel and directory-event analytics after opt-in
• Google AdSense - Advertising; Google and participating ad partners may receive request, device and consent signals under Google's CMP and policies
• Email service providers (contact forms and transactional mail)

We limit disclosures to those needed for each service and review provider terms and safeguards. Provider use is also governed by its own terms and privacy information.

5. Data Retention

We retain data only as long as needed:

• Consent preference: up to 180 days, then we request a fresh choice
• Analytics: according to the retention configured in each provider; contact us for the current configuration
• Contact submissions: until resolved
• Free checklist delivery records: as needed to provide access and prevent abuse
• Paid digital purchase access links: according to the product (download links typically expire; interactive tool access follows the purchase access model)
• Corporate Booking System workspace data: while needed to provide the paid workspace, or until a deletion request is handled
• Business listings: ongoing until business requests removal

6. Your Rights (UK GDPR)

You have the right to:

• Access your data
• Request correction
• Request deletion
• Object to processing
• Request data transfer
• Withdraw consent

To exercise any rights:

👉 Email: ukrageroom@gmail.com

7. Security

We implement:

• HTTPS encryption
• Secure hosting
• Access controls
• Regular audits

No method is 100% secure, but we take reasonable steps to protect your data.

8. Google Services

We use Google services only in the circumstances described here:

• Google Analytics 4 - loaded only after analytics opt-in; advertising storage, user-data and personalisation signals remain denied
• Google Maps - loaded only when you explicitly press a load-map button; this choice is separate from analytics
• Google AdSense - advertising network on editorial guide and blog pages. UK/EEA/Swiss consent is handled by Google's certified Privacy & messaging CMP; this is separate from analytics

Google's use of information is governed by their Privacy Policy.

9. Cloudflare

Cloudflare may process requests at the hosting/network edge to protect the website and improve delivery. This is separate from the optional Cloudflare Web Analytics beacon. Edge services may process:

• IP addresses
• Request metadata
• Browser information
• Security logs

The Web Analytics beacon is not requested until analytics opt-in. Cloudflare states that the beacon does not use cookies, local storage or fingerprinting.

Cloudflare's privacy practices are detailed in their Privacy Policy.

10. Third-Party Links

Our site links to external businesses, including GetYourGuide for complementary tours around a rage-room visit. Those are outbound affiliate links; we do not load a GetYourGuide widget or script. If you follow a link, GetYourGuide may set its own affiliate cookie. We are not responsible for their privacy practices.

11. Changes to this Policy

We may update this policy as needed. Changes will be posted on this page with an updated "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: ukrageroom@gmail.com