1. Definitions and Interpretation
In this Policy the following terms shall have the following meanings:
“Data” means collectively all information that you submit to the booking and payment systems via the Website. This definition shall, where applicable, incorporate the definitions provided in the Data Protection Act 2018;
“History Mystery Ltd/We/Us/Our” means History Mystery Ltd, a limited company registered in England and Wales number 9647695, whose registered address is Towlers Court, 30A Elm Hill, Norwich, NR3 1HG and whose main trading address is 21-23 Castle Meadow, Norwich NR1 3DH;
“User” means any third party that accesses the Website and is not employed by History Mystery Ltd and acting in the course of their employment; and
“Website/Our Site” means this website (historymystery.games and any website address variant owned by Us that redirects to it) and any sub-domains of this site unless expressly excluded by their own terms and conditions.
2. Scope – What Does This Policy Cover?
3. Data Collected
Some data will be collected automatically by Our Site, other data will only be collected if you voluntarily submit it. Depending upon your use of Our Site, We may collect some or all of the following data:
3.2 contact information such as email addresses, mail address and telephone numbers; and
3.3 demographic information such as postcode
4. How Do We Use Your Data?
4.1 Any personal Data you submit will be retained by History Mystery Ltd for as long as permitted for legitimate business purposes.
4.2 Unless we are obliged or permitted by law to do so, and subject to Clause 5, your Data will not be disclosed to third parties.
4.3 All personal Data is stored securely in accordance with the principles of the Data Protection Act 2018. For more details on security see Clause 11 below.
4.4 Any or all of the above Data may be required by us from time to time in order to provide you with the best possible service and experience when using our Website. Specifically, Data may be used by us for the following reasons:
4.4.1 internal record keeping;
4.4.2 improvement of our products or services;
4.4.3 transmission by email of promotional materials that may be of interest to you;
4.4.4 contact for market research purposes which may be done using email, telephone or mail. Such information may be used to customise or update the Website.
5. Third Party Websites and Services
5.1 History Mystery Ltd may, from time to time, employ the services of other parties for dealing with matters that may include, but are not limited to, making bookings, payment processing, search engine facilities, advertising and marketing. The providers of such services have access to certain personal Data provided by Users of this Website.
5.2 Any Data used by such parties is used only to the extent required by them to perform the services that History Mystery Ltd requests. Any use for other purposes is strictly prohibited. Furthermore, any Data that is processed by third parties shall be processed within the terms of this Policy and in accordance with the Data Protection Act 2018.
6. How and Where Do We Store Your Data?
6.1 We only keep your data for as long as We need to in order to use it as described above in section 4, and/or for as long as We have your permission to keep it.
6.2 Some or all of your data may be stored or transferred outside of the European Economic Area (“the EEA”) (The EEA consists of all EU member states, plus Norway, Iceland and Liechtenstein). You are deemed to accept and agree to this by using Our Site and submitting information to Us. If We do store or transfer data outside the EEA, We will take all reasonable steps to ensure that your data is treated as safely and securely as it would be within the EEA and under the Data Protection Act 2018. Such steps may include, but not be limited to, the use of legally binding contractual terms between Us and any third parties We engage and the use of the EU-approved Model Contractual Arrangements.
6.3 Data security is of great importance to Us, and to protect your data We have taken suitable measures to safeguard and secure data collected through Our Site.
6.4 Notwithstanding the security measures that We take, it is important to remember that the transmission of data via the internet may not be completely secure and that you are advised to take suitable precautions when transmitting to Us data via the internet.
7. How Do We Process Your Data?
7.1 We may sometimes contract with third parties to supply services to you on Our behalf. These may include payment processing, delivery of goods, search engine facilities, advertising and marketing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, We will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, Our obligations, and the obligations of the third party under the law.
7.2 We may compile statistics about the use of Our Site including data on traffic, usage patterns, user numbers, sales and other information. All such data will be anonymised and will not include any personally identifying information. We may from time to time share such data with third parties such as prospective investors, affiliates, partners and advertisers. Data will only be shared and used within the bounds of the law.
7.3 In certain circumstances We may be legally required to share certain data held by Us, which may include your personal information, for example, where We are involved in legal proceedings, where We are complying with the requirements of legislation, a court order, or a governmental authority. We do not require any further consent from you in order to share your data in such circumstances and will comply as required with any legally binding request that is made of Us.
8. What Happens If Our Business Changes Hands?
8.1 History Mystery Ltd may, from time to time, expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of History Mystery Ltd. Data provided by Users will, where it is relevant to any part of our business so transferred, be transferred along with that part and the new owner or newly controlling party will, under the terms of this Policy, be permitted to use the Data for the purposes for which it was originally supplied to us.
8.2 In the event that any Data submitted by Users is to be transferred in such a manner, you will not be contacted in advance and informed of the changes.
9. How Can You Control Your Data?
9.1 When you submit information via Our Site, you may be given options to restrict Our use of your data. In particular, We aim to give you strong controls on Our use of your data for direct marketing purposes (including the ability to opt-out of receiving emails from Us which you may do by unsubscribing using the links provided in Our emails and at the point of providing your details).
9.2 You may also wish to sign up to one or more of the preference services operating in the UK: The Telephone Preference Service (“the TPS”), the Corporate Telephone Preference Service (“the CTPS”), and the Mailing Preference Service (“the MPS”). These may help to prevent you from receiving unsolicited marketing. Please note, however, that these services will not prevent you from receiving marketing communications that you have consented to receive.
10. Your Right to Withhold Information
You may access the Website without providing any Data at all. However, to make bookings via the Website you will be required to submit certain Data to our booking and payment systems.
11. How Can You Access Your Data?
You have the right to ask for a copy of any of your personal Data held by History Mystery Ltd (where such data is held). Please contact Us for more details using the contact details below in section 12.
12. Contacting Us
14. Temporary Addendum - How We Use Your Information for NHS Test and Trace
To support NHS Test and Trace (which is part of the Department for Health and Social Care) in England, we have been mandated by law to collect and keep a limited record of staff, customers and visitors who come onto our premises for the purpose of contact tracing. By maintaining records of staff, customers and visitors, and sharing these with NHS Test and Trace where requested, we can help to identify people who may have been exposed to the coronavirus.
As a customer/visitor of History Mystery Ltd you will be asked to provide some basic information and contact details. The following information will be collected for everyone over the age of 16:
- the names of all customers or visitors
- a contact phone number and/or email for each customer or visitor
- date of visit and arrival time and departure time
History Mystery Ltd as the data controllers for the collection of your personal data, will be responsible for compliance with data protection legislation for the period of time it holds the information. When that information is requested by the NHS Test and Trace service, the service would at this point be responsible for compliance with data protection legislation for that period of time. The NHS Test and Trace service as part of safeguarding your personal data, has in place technical, organisational and administrative security measures to protect your personal information that it receives from the venue/establishment, that it holds from loss, misuse, and unauthorised access, disclosure, alteration and destruction.
In addition, if you only interact with one member of staff during your visit, the name of the assigned staff member will be recorded alongside your information. NHS Test and Trace have asked us to retain this information for 21 days from the date of your visit, to enable contact tracing to be carried out by NHS Test and Trace during that period. We will only share information with NHS Test and Trace if it is specifically requested by them. For example, if another customer at the venue reported symptoms and subsequently tested positive, NHS Test and Trace can request the log of customer details for a particular time period (for example, this may be all customers who visited on a particular day or time-band, or over a 2-day period).
We will require you to pre-book appointments for visits or to complete a form on arrival. Under government guidance, the information we collect may include information which we would not ordinarily collect from you and which we therefore collect only for the purpose of contact tracing. Information of this type will not be used for other purposes, and NHS Test and Trace will not disclose this information to any third party unless required to do so by law (for example, as a result of receiving a court order). In addition, where the information is only collected for the purpose of contact tracing, it will be destroyed by us 21 days after the date of your visit.
However, the government guidance may also cover information that we would usually collect and hold onto as part of our ordinary dealings with you (for example, your name, phone number and email address). Where this is the case, this information will continue to be held after 21 days and we will use it as we usually would, unless and until you tell us not to.
Your information will always be stored and used in compliance with the relevant data protection legislation.
The use of your information is covered by the General Data Protection Regulations Article 6 (1) (c) – a legal obligation to which we as a venue/establishment are subject to. The legal obligation to which we’re subject, means that we’re mandated by law, by a set of new regulations from the government, to co-operate with the NHS Test and Trace service, in order to help maintain a safe operating environment and to help fight any local outbreak of coronavirus.