Privacy Policy

Lock & Lore Escape Rooms ("Lock & Lore," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (lockandlore.com), make a booking, participate in our escape room experiences, or interact with us in any other way.

By using our website or services, you consent to the practices described in this Privacy Policy. If you do not agree with the terms outlined here, please do not use our website or provide us with your personal information.

We collect information in several ways depending on how you interact with us.

Information You Provide Directly: When you make a booking, contact us, or sign up for communications, we may collect your full name, email address, phone number, and payment information (processed securely by our third-party payment provider). When you sign a liability waiver, we collect your name, date of birth, emergency contact information, and electronic signature. If you purchase a gift card, we collect the recipient's name and email address in addition to your own.

Information Collected Automatically: When you visit our website, we automatically collect certain technical information including your IP address, browser type and version, operating system, referring URL, pages visited and time spent on each page, device type (desktop, mobile, tablet), and approximate geographic location (city/region level, derived from IP address).

Information From Third Parties: Our booking system is powered by Off The Couch (OTC), a third-party platform. When you complete a booking through OTC, they share your reservation details with us including your name, contact information, booking date and time, group size, and payment confirmation. We do not receive or store your full credit card number, CVV, or banking details.

We use the information we collect for the following purposes:

Booking & Service Delivery: To process and confirm your reservations, send booking confirmations and reminders, manage check-in and waiver completion, communicate schedule changes or important updates about your visit, and provide customer support related to your booking.

Safety & Operations: To administer liability waivers as required for participation, contact you or your emergency contact in case of an incident, maintain security through our closed-circuit monitoring system (footage is retained for 30 days and used solely for safety purposes), and comply with local health and safety regulations.

Communications & Marketing: To send you post-visit follow-up emails (such as review requests or thank-you messages), notify you of promotions, new room launches, or special events (only if you have opted in), and respond to your inquiries submitted through our contact form or email. You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly.

Website Improvement: To analyze website traffic and usage patterns, improve our website design and user experience, identify and fix technical issues, and understand which rooms and experiences are most popular.

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytics data.

Essential Cookies: These are necessary for the website to function properly. They enable core features such as page navigation, session management, and access to secure areas of the site. These cookies do not collect personal information and cannot be disabled without impairing site functionality.

Analytics Cookies: We use analytics services (including Google Analytics) to understand how visitors interact with our website. These cookies collect anonymized data about page views, session duration, traffic sources, and user flow through the site. This data helps us improve our website and marketing efforts.

Third-Party Cookies: Our embedded booking system (powered by Off The Couch) may set its own cookies to manage the booking session, retain form data, and process payments. These cookies are governed by OTC's privacy policy. We may also use social media plugins or embedded content that set cookies from their respective platforms.

Managing Cookies: Most web browsers allow you to control cookies through their settings. You can typically choose to block all cookies, accept all cookies, or be notified when a cookie is set. Please note that disabling certain cookies may limit your ability to use some features of our website, including the booking system.

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

Service Providers: We share booking and contact information with Off The Couch (OTC) to process reservations and payments. We may share your email address with our email marketing platform to send communications you have opted into. We use web hosting and analytics providers who may process technical data on our behalf.

Legal Requirements: We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our website.

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

All data transmitted through our website is encrypted using SSL/TLS (HTTPS). Payment processing is handled entirely by PCI-DSS compliant third-party processors; we never store credit card numbers on our servers. Access to customer data is restricted to authorized personnel who require it for their job responsibilities. Our website and systems are regularly updated to address security vulnerabilities.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to taking every reasonable precaution.

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.

Booking records (name, contact information, booking details) are retained for up to 3 years for customer service and business record-keeping purposes. Liability waivers are retained for 7 years in accordance with Virginia's statute of limitations for personal injury claims. Marketing contact lists are maintained until you unsubscribe or request deletion. Website analytics data is retained in anonymized form and is not linked to individual identities. Security camera footage is retained for 30 days and then automatically overwritten.

Depending on your location, you may have certain rights regarding your personal information:

Access: You may request a copy of the personal information we hold about you. Correction: You may request that we correct inaccurate or incomplete information. Deletion: You may request that we delete your personal information, subject to legal retention requirements. Opt-Out: You may opt out of marketing emails at any time using the unsubscribe link or by contacting us. You may also opt out of analytics tracking by using browser-level privacy controls or a tool like the Google Analytics Opt-Out Browser Add-on.

To exercise any of these rights, please contact us at lockandloreva@gmail.com. We will respond to your request within 30 days.

If you are a Virginia resident, you may have additional rights under the Virginia Consumer Data Protection Act (VCDPA), including the right to confirm whether we are processing your personal data, access your data, correct inaccuracies, delete your data, and obtain a portable copy of your data.

You also have the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. Lock & Lore does not sell personal data or use it for profiling.

To submit a VCDPA request, please email lockandloreva@gmail.com with the subject line "VCDPA Request." We may ask you to verify your identity before processing your request. If we deny your request, you have the right to appeal by contacting us within 30 days of receiving our response.

Our website is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If a child under 13 participates in an escape room experience, a parent or legal guardian must make the booking and sign the liability waiver on their behalf.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at lockandloreva@gmail.com and we will promptly delete the information.

Our website may contain links to third-party websites, including social media platforms, review sites, and the Off The Couch booking platform. This Privacy Policy applies only to Lock & Lore's website and services. We are not responsible for the privacy practices of third-party sites.

We encourage you to review the privacy policies of any third-party site you visit through links on our website, particularly the Off The Couch privacy policy when making bookings.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last Updated" date at the top of this page. For material changes, we may also notify you via email or a prominent notice on our website.

We encourage you to review this Privacy Policy periodically. Your continued use of our website or services after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Lock & Lore Escape Rooms 138 S. Rosemont RD, STE #216 Virginia Beach, VA 23452 Email: lockandloreva@gmail.com Phone: (757) 301-1862

For privacy-specific inquiries, you may also email us directly with the subject line "Privacy Inquiry" for expedited handling.