Privacy Policy
DGLI Group Ltd – Don’t Get Locked In
Effective Date: 20/03/2026
Last Updated: 20/03/2026
1. Company Information
Data Controller: DGLI Group Ltd
Trading As: Don’t Get Locked In
Registered Office: Floors 1-2 Allhallows, Bedford MK40 1LN
Company Registration Number: 16670689
Email: [email protected]
Phone: 01234 374 100
Data Protection Enquiries: privacy@dontgetlockedin.com
2. Introduction
This Privacy Policy explains how DGLI Group Ltd (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you:
- Visit our website
- Book our escape room experiences
- Visit our premises
- Contact us for information
- Sign up for our newsletter or marketing communications
We are committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
3. What Personal Information We Collect
3.1 Information You Provide Directly
Booking Information:
- Full name
- Email address
- Phone number
- Age (to verify age restrictions compliance)
- Group size and composition
- Special requirements or accessibility needs
- Payment information (processed securely by our payment provider)
Contact and Marketing:
- Name and email address when you subscribe to our newsletter
- Contact details when you enquire about our services
- Feedback and review information
3.2 Information We Collect Automatically
Website Usage:
- IP address and location data
- Browser type and version
- Pages visited and time spent on site
- Referring website information
- Cookie and similar technology data (see our Cookie Policy)
CCTV and Security:
- CCTV footage for security and safety purposes while on our premises
- Entry and exit times for safety compliance
4. How We Use Your Personal Information
4.1 Legal Basis for Processing
We process your personal data under the following legal grounds:
Contract Performance:
- Processing bookings and providing escape room services
- Managing your visit and ensuring safety requirements
- Processing payments and issuing receipts
Legitimate Interests:
- Improving our services and customer experience
- Security and safety monitoring via CCTV
- Fraud prevention and detection
- Website analytics and improvement
Consent:
- Marketing communications (you can withdraw consent at any time)
- Non-essential cookies on our website
Legal Compliance:
- Age verification to comply with our safety policies
- Health and safety record keeping
- Financial record keeping for tax and accounting purposes
4.2 Specific Uses
Service Delivery:
- Confirming and managing your bookings
- Communicating important information about your visit
- Ensuring appropriate supervision for younger players
- Emergency contact if required during your visit
Business Operations:
- Customer service and support
- Processing refunds and handling complaints
- Improving our escape room experiences
- Staff training and quality assurance
Marketing (with consent):
- Sending promotional emails about new rooms and special offers
- Sharing news about events and corporate packages
- Customer satisfaction surveys
5. How Long We Keep Your Information
We retain personal data only for as long as necessary:
Account Information: Retained while your account remains active
Inactive Accounts: Deleted after 2 years of no login or booking activity
Booking History: Individual booking details deleted after 2 years (except financial records which are kept for 7 years)
Financial Records: 7 years (for tax and accounting compliance)
CCTV Footage: 30 days (unless required for incident investigation)
Marketing Consent: Until you unsubscribe or withdraw consent
Website Analytics: 26 months
Customer Support Records: 2 years after case closure
Account Closure: When you close your account, we delete your personal data within 30 days, except for financial records which we retain for 7 years to meet legal obligations.
6. Who We Share Your Information With
We do not sell, rent, or trade your personal information. We only share data when necessary:
6.1 Service Providers
Payment Processors: Secure payment handling (they do not store your card details)
Website Hosting: Secure data storage and website functionality
Email Marketing: If you consent to marketing communications
Booking System: Secure reservation management
6.2 Legal Requirements
We may disclose personal information if required by:
- Law enforcement agencies
- Legal proceedings or court orders
- Regulatory authorities
- Emergency situations involving safety risks
6.3 Business Transfers
In the event of a business sale, merger, or acquisition, personal data may be transferred as part of business assets, but only with equivalent privacy protections.
7. International Data Transfers
Where we use service providers outside the UK/EEA, we ensure adequate protection through:
- UK adequacy decisions
- Standard Contractual Clauses
- Certification schemes approved by regulators
8. Your Rights Under Data Protection Law
8.1 Your Rights Include:
Right of Access: Request copies of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data in certain circumstances
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured format
Right to Object: Opt-out of processing based on legitimate interests
Right to Withdraw Consent: For consent-based processing (e.g., marketing)
8.2 How to Exercise Your Rights
Contact us at: privacy@dontgetlockedin.com
We will respond to requests within one month. For complex requests, we may extend this by two months with explanation.
Some rights may not apply in all circumstances (e.g., if we need to retain data for legal compliance).
9. Cookies and Website Tracking
We use cookies and similar technologies to:
- Remember your preferences and improve user experience
- Analyse website performance and visitor behaviour
- Enable booking system functionality
For full details, please see our separate Cookie Policy.
You can control cookies through your browser settings, though this may affect website functionality.
10. Data Security
We implement appropriate technical and organisational measures:
Technical Measures:
- Secure encrypted data transmission (SSL/TLS)
- Regular security updates and monitoring
- Access controls and user authentication
- Secure backup systems
Organisational Measures:
- Staff training on data protection
- Data protection policies and procedures
- Regular security assessments
- Incident response procedures
11. Children’s Privacy
We take special care with children’s personal data:
- We only collect essential information for safety compliance
- Children under 16 require parental consent for marketing
- CCTV footage follows strict retention and access policies
- Staff are trained on appropriate data handling for minors
12. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Our business practices
- Legal requirements
- Technology developments
Significant changes will be notified via:
- Email (if we have your contact details)
- Website notification
- Updated “Last Modified” date
13. Complaints and Concerns
If you have concerns about how we handle your personal data:
- Contact us first: [email protected]
- Supervisory Authority: You can lodge a complaint with the Information Commissioner’s Office (ICO)
- Website: www.ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
14. Contact Information
Data Protection Enquiries:
Email: privacy@dontgetlockedin.com
Phone: 01234 374 100
Address: Floors 1-2 Allhallows, Bedford MK40 1LN
General Enquiries:
Email: [email protected]
Phone: 01234 374 100