This Privacy Notice explains who we are, what Personal Data we hold and for how long, how we collect it, protect it and who we share it with. It informs you of our lawful bases and purpose for collecting data, and the rights you have over your data.
We will update this Privacy Notice from time to time and will inform you of any major changes.
Rest assured that we continue to place the utmost importance on security and privacy. We have never sold, nor will sell your personal information to a third party.
There is a lot of information here which we have tried to convey as simply as possible, but if you have any questions, we’ll answer them as best we can!
2. Who We Are
Wisemoney Ltd. t/a Escape2
Wisemoney Ltd. is our parent company, Escape2 is our trading name, and www.escape2.co.uk is our e-commerce website. For simplicity's sake, in this Privacy Notice We/Us/Our refers to Wisemoney Ltd. t/a Escape2, the data controller.
You can contact us by:
3. Our Lawful Bases For Collecting Data
We will gather data under the category of ‘Consent’ when you have given clear consent for Us to use personal data for a specific purpose, in order to perform the task or service that you have requested.
For example, when you request to:
We hold data under the category of ‘Contract’ when the processing of your personal data is necessary for us to fulfill all aspects your purchase.
For example, when you:
In certain circumstances the Police or other law enforcement agencies may request Us to collect and divulge Personal Data in criminal investigations or for fraud prevention. We will also share employees’ Personal Data with HMRC.
We collect Personal Data as part of our legitimate business interests, enabling us to deliver the best possible, and most relevant service to you.
For example We:
4. The Personal Data We Store
When you register for an account with Us, whether purchasing or not, our system will store personal information including:
When you purchase from Escape2, the following personal information will be stored within the order:
We also collect the following data:
If you communicate with Us via email, we will hold your email address and any information you divulge in its contents.
5. What Other Data Do We Use?
As an e-commerce website, we collect log and tech data to streamline and improve customer service and your online shopping experience.
Cookies are used to track which pages you visit, so that our website can function as an online shop, and to make your shopping experience as streamlined as possible. Our website uses two kinds of cookies:
These cookies allow our site to recognise you when you click from page to page. Without them, every page would be treated as the first visit to the site and anything added to the shopping basket would be instantly forgotten. Online shopping would, therefore, be impossible! These cookies expire when the browser is closed.
These cookies aid convenience; they allow our site to see when you make a return visit and they ensure that the content of your shopping basket is retained. If you sign in with an email address and password, these details are also saved, so you can remain logged in when returning (the password is encrypted). When you sign out, your login details are removed from the cookie. This type of cookie expires after one year.
Any other cookies are created by third party scripts, such as Google Analytics, and any information about the cookies they use can be obtained through them.
Our social media share buttons only transmit data once they have been clicked. Therefore, the button only becomes active once you’ve clicked on it and at this point you will be using the social media's website. The only data the social media's servers receive from our site is referral information from the page, such a product title and image. No personal data is transmitted. The Facebook login feature works in a similar way, and no personal information is transmitted to Facebook. However, once you have clicked on the button, any data that is gathered from your Facebook account, such as your name and Facebook ID, will be stored within your User Account. This can be deleted as usual, if requested.
As part of our legal compliance, we also collect and store Personal Data relating to all employees of our Company. This kind of Personal Data includes:
6. How Do We Protect Your Data?
We take the utmost care and take appropriate action to protect your Personal Data.
For example we:
No payment information, such as credit card number, is stored within our website site or our web hosting company’s servers. This information is collected and processed separately by our payment providers, Worldpay and Paypal.
Escape2 accepts secure online payments via:
Our web hosting company ensures that it has appropriate security measures in place to safeguard against any unauthorised access or unlawful proceedings or accidental loss, destruction or damage or disclosure of Personal Data.
We take all appropriate measures to prevent other forms of Personal Data Breaches, which could include:
However, should a data breach be detected, we will inform you and the ICO as and when necessary.
7. How Long Do We Store Your Data?
Data will be held indefinitely, allowing us to deal with future concerns you may have about a particular product, because many of the products We sell have a ‘product’s lifetime warranty’, and we strive to offer the best possible customer service, even years later. However, you have the right to have your Personal Data deleted at any time. Simply complete the form on our Right to be Forgotten page, email us, or use the Contact Us page.
If you placed an order prior to requesting deletion, your details will still remain on that order within our system. This is due to VAT regulations, which request that all records of sales transactions are kept for a minimum of six years.
Session Cookie Data expires after one year.
8. Who Do We Share Your Personal Data With?
Your personal data will not be disclosed to any third party, other than our employees, authorised subcontractors, or law enforcement agencies, and then only to the extent necessary for Us to provide the service you request, to meet our legitimate business interests or to fulfill our legal obligations. Responsibility for Data Protection lies with our Company Secretary.
We will not sell your personal data to any third party.
We will provide your name, delivery address, telephone number(s), email address and extra delivery information supplied to the courier company employed to deliver your goods. They may contact you via telephone, email or text message.
If you request Us to contact a supplier on your behalf, We will seek your positive consent prior to divulging your name, delivery address, email address and/or telephone number, should it be necessary.
Web Hosting Company
Our web-hosting provider will hold Personal Data transmitted by or on behalf of Escape2 only to the extent necessary for the provision of the Services and will not divulge the whole or any part of the Personal Data to any person, except to the extent necessary for the proper performance of the Services or as permitted by Escape2.
Our authorised subcontractors include:
Law Enforcement Agencies
We may also be required to share Personal Data by the Police or other law enforcement agencies, banks or payment processors in the interests of fraudulent, or potentially fraudulent, transaction prevention, or other criminal investigation.
Personal Data may be disclosed to HMRC as part of a routine VAT inspection. We have a legal duty to share employees’ Personal Data with HMRC.
9. What Rights Do You Have Over Your Personal Data?
GDPR includes the following rights for individuals:
If you’ve set up a User Account, you will be able to log in and view/change your Personal Data details at any time. If you checked out as a Guest, you can contact us to request the details or amendment.
You can contact us in writing, by email or through the Contact Us page on the website to request any of your applicable rights to be exercised, which we will do within 30 days upon of receipt of your written request (unless we need extra time to process your request, in which case you will be kept informed accordingly).
Our Terms & Conditions state that customers must be over the age of 18 to create an account or to purchase from Us, as such We do not collect or process Personal Data for children under the age of 16.
We will only contact you by email, mail or telephone if you have positively opted-in, requesting us to do so, for instance you have to tick a box to consent to receiving email newsletters. We will assume that if you telephone Escape2, requesting further information about any aspect of our business, that you have given verbal consent for us to record your contact details and to contact you accordingly.
You can withdraw your consent for Us to use or store your Personal Details at any time, and We will no longer send you email newsletters or any other marketing material.
You can contact us via any of these streams, stating that you withdraw consent:
VAT regulations require Us to store necessary sales information for six years, so Personal Data relating to purchases won’t be able to be deleted until that time has elapsed.
11. Contacting The Regulator
We make every effort to ensure that your Personal Data is stored securely and used according to this Privacy Notice. However, if you feel that there is a problem in the way that We handle your data, please inform Us so that we can attempt to rectify the issue.
You also have the right to complain to the regulator, the Information Commission Officer (ICO), at any time.