Privacy Notice

1. Introduction

This Privacy Notice explains who we are, what Personal Data we hold and for how long, how we collect it, protect it and who we share it with. It informs you of our lawful bases and purpose for collecting data, and the rights you have over your data.

We will update this Privacy Notice from time to time and will inform you of any major changes.

Rest assured that we continue to place the utmost importance on security and privacy. We have never sold, nor will sell your personal information to a third party.

There is a lot of information here which we have tried to convey as simply as possible, but if you have any questions, we’ll answer them as best we can!

2. Who We Are

Wisemoney Ltd. t/a Escape2

Wisemoney Ltd. is our parent company, Escape2 is our trading name, and www.escape2.co.uk is our e-commerce website. For simplicity's sake, in this Privacy Notice We/Us/Our refers to Wisemoney Ltd. t/a Escape2, the data controller.

You can contact us by:

• Email – shop@escape2.co.uk
• Telephone – 01432 761488
• Post - Wisemoney Ltd t/a Escape2, Hermitage Farm, Canon Pyon, Hereford, Herefordshire, HR4 8NN

3. Our Lawful Bases For Collecting Data

Consent

We will gather data under the category of ‘Consent’ when you have given clear consent for Us to use personal data for a specific purpose, in order to perform the task or service that you have requested.

For example, when you request to:

• Set-up an account
• Receive email newsletters
• Be contacted about a future order
• Receive further information from us about any aspect of our business

Contract

We hold data under the category of ‘Contract’ when the processing of your personal data is necessary for us to fulfill all aspects your purchase.

For example, when you:

• Purchase goods
• Request a quotation
• Place any other form of order with Us

Legal Compliance

In certain circumstances the Police or other law enforcement agencies may request Us to collect and divulge Personal Data in criminal investigations or for fraud prevention. We will also share employees’ Personal Data with HMRC.

Legitimate Interest

We collect Personal Data as part of our legitimate business interests, enabling us to deliver the best possible, and most relevant service to you.

For example We:

• Use your purchase or browsing history to identify relevant, personalised offers
• Combine Personal Data of many users to identify trends, helping us to maintain correct stock levels and offer you a better service

4. The Personal Data We Store

When you register for an account with Us, whether purchasing or not, our system will store personal information including:

• Your email address
• Password (which is encrypted)
• Date registered and the date you last visited
• Your IP address
• Host Name used the last time you logged in
• If you provide further information, such as your address and telephone number, this will also be stored in your account

When you purchase from Escape2, the following personal information will be stored within the order:

• Name
• Email address
• Billing address
• Delivery address
• Telephone number(s)
• Company name and VAT number 

We also collect the following data:

• IP address, its host name and its country location
• Type of device used, such as mobile, desktop or tablet
• Date and time of order
• Payment method
• How much was paid
• Shipping method
• Any activity on the order, such as the date and time the order was completed
• Whether you are a new customer, a returning one, or a guest
• Products ordered
• Product reviews
• Further email contact
• Complaints
• Any other information provided, such as in ‘Comments’ boxes

If you communicate with Us via email, we will hold your email address and any information you divulge in its contents.

5. What Other Data Do We Use?

As an e-commerce website, we collect log  and tech data to streamline and improve customer service and your online shopping experience. 

Cookies

Cookies are used to track which pages you visit, so that our website can function as an online shop, and to make your shopping experience as streamlined as possible. Our website uses two kinds of cookies:

• PHPSESSID

These cookies allow our site to recognise you when you click from page to page. Without them, every page would be treated as the first visit to the site and anything added to the shopping basket would be instantly forgotten. Online shopping would, therefore, be impossible! These cookies expire when the browser is closed.

• Session

These cookies aid convenience; they allow our site to see when you make a return visit and they ensure that the content of your shopping basket is retained. If you sign in with an email address and password, these details are also saved, so you can remain logged in when returning (the password is encrypted). When you sign out, your login details are removed from the cookie. This type of cookie expires after one year.

Any other cookies are created by third party scripts, such as Google Analytics, and any information about the cookies they use can be obtained through them.

Social Media

Our social media share buttons only transmit data once they have been clicked. Therefore, the button only becomes active once you’ve clicked on it and at this point you will be using the social media's website. The only data the social media's servers receive from our site is referral information from the page, such a product title and image. No personal data is transmitted. The Facebook login feature works in a similar way, and no personal information is transmitted to Facebook. However, once you have clicked on the button, any data that is gathered from your Facebook account, such as your name and Facebook ID, will be stored within your User Account. This can be deleted as usual, if requested.

Employees

As part of our legal compliance, we also collect and store Personal Data relating to all employees of our Company. This kind of Personal Data includes:

• Full name
• Address
• Date of Birth
• Pay
• Tax Codes
• Employment history

6. How Do We Protect Your Data?

We take the utmost care and take appropriate action to protect your Personal Data.

For example we:

• Use industry-leading RapidSwitch secure servers
• Employ ‘https’ technology to enhance security
• Personal account data is accessed via an encrypted password
• We take all reasonable precautions to protect physical access to our offices and hence access to data
• Access is password protected

Online Orders:

No payment information, such as credit card number, is stored within our website site or our web hosting company’s servers. This information is collected and processed separately by our payment providers, Worldpay and Paypal.

Escape2 accepts secure online payments via:

• Card payments and Pay by Link transactions through Worldpay’s Payment Gateway, using Worldpay’s securely operated, PCI DSS compliant systems
• Paypal’s securely operated, PCI DSS compliant systems

Telephone Orders:

• You will be required to verbally provide Personal Data over an unsecured telephone line;
• If you want Us to take a card payment over the telephone, you will provide Us with the card details necessary to process the payment;
• We will record Personal Data and card payment details on a paper form that’s destroyed upon completion of payment;
• We will manually enter your card payment details into Worldpay’s Payment Gateway;
• Or, We can send you a Pay By Link request for you to make a payment directly through Worldpay’s Payment Gateway, eliminating the need to disclose your payment card details to ourselves;
• An account will be manually created for you on our website, which will store the same data as an online order, as listed in ‘4. The Personal Data We Store’.

Data Breaches

Our web hosting company ensures that it has appropriate security measures in place to safeguard against any unauthorised access or unlawful proceedings or accidental loss, destruction or damage or disclosure of Personal Data.

We take all appropriate measures to prevent other forms of Personal Data Breaches, which could include:

• Unauthorised access by third parties
• Accidental action/inaction by ourselves/authorised subcontractors
• Sending Personal Data to incorrect recipients
• Lost/stolen computing devices

However, should a data breach be detected, we will inform you and the ICO as and when necessary.

7. How Long Do We Store Your Data?

Data will be held indefinitely, allowing us to deal with future concerns you may have about a particular product, because many of the products We sell have a ‘product’s lifetime warranty’, and we strive to offer the best possible customer service, even years later. However, you have the right to have your Personal Data deleted at any time. Simply complete the form on our Right to be Forgotten page, email us, or use the Contact Us page.

If you placed an order prior to requesting deletion, your details will still remain on that order within our system. This is due to VAT regulations, which request that all records of sales transactions are kept for a minimum of six years.

Session Cookie Data expires after one year.

8. Who Do We Share Your Personal Data With?

Your personal data will not be disclosed to any third party, other than our employees, authorised subcontractors, or law enforcement agencies, and then only to the extent necessary for Us to provide the service you request, to meet our legitimate business interests or to fulfill our legal obligations. Responsibility for Data Protection lies with our Company Secretary.

We will not sell your personal data to any third party.

Courier Companies

We will provide your name, delivery address, telephone number(s), email address and extra delivery information supplied to the courier company employed to deliver your goods. They may contact you via telephone, email or text message.

Suppliers

If you request Us to contact a supplier on your behalf, We will seek your positive consent prior to divulging your name, delivery address, email address and/or telephone number, should it be necessary.

Web Hosting Company

Our web-hosting provider will hold Personal Data transmitted by or on behalf of Escape2 only to the extent necessary for the provision of the Services and will not divulge the whole or any part of the Personal Data to any person, except to the extent necessary for the proper performance of the Services or as permitted by Escape2.

Authorised Subcontractors

Our authorised subcontractors include:

• Bluepark
• Worldpay
• Paypal
• With Hindsite
• Sum It Computer Systems
• Streetwise Couriers
• APC
• Royal Mail
• Other Delivery Companies
• Google, including Google Analytics
• Facebook
• Twitter
• Instagram
• Bing

Law Enforcement Agencies

We may also be required to share Personal Data by the Police or other law enforcement agencies, banks or payment processors in the interests of fraudulent, or potentially fraudulent, transaction prevention, or other criminal investigation.

HMRC

Personal Data may be disclosed to HMRC as part of a routine VAT inspection. We have a legal duty to share employees’ Personal Data with HMRC.

9. What Rights Do You Have Over Your Personal Data?

 GDPR includes the following rights for individuals:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure
• The right to restrict processing
• The right to data portability
• The right to object
• The right not to be subject to automated decision-making including profiling

If you’ve set up a User Account, you will be able to log in and view/change your Personal Data details at any time. If you checked out as a Guest, you can contact us to request the details or amendment.

You can contact us in writing, by email or through the Contact Us page on the website to request any of your applicable rights to be exercised, which we will do within 30 days upon of receipt of your written request (unless we need extra time to process your request, in which case you will be kept informed accordingly).

Children

Our Terms & Conditions state that customers must be over the age of 18 to create an account or to purchase from Us, as such We do not collect or process Personal Data for children under the age of 16.

10. Consent

We will only contact you by email, mail or telephone if you have positively opted-in, requesting us to do so, for instance you have to tick a box to consent to receiving email newsletters. We will assume that if you telephone Escape2, requesting further information about any aspect of our business, that you have given verbal consent for us to record your contact details and to contact you accordingly.

You can withdraw your consent for Us to use or store your Personal Details at any time, and We will no longer send you email newsletters or any other marketing material.

You can contact us via any of these streams, stating that you withdraw consent:

• In writing to our postal address
• By email
• Through the online Contact Us page
• Completing the Right To Be Forgotten form on our website

VAT regulations require Us to store necessary sales information for six years, so Personal Data relating to purchases won’t be able to be deleted until that time has elapsed.

11. Contacting The Regulator

We make every effort to ensure that your Personal Data is stored securely and used according to this Privacy Notice. However, if you feel that there is a problem in the way that We handle your data, please inform Us so that we can attempt to rectify the issue.

You also have the right to complain to the regulator, the Information Commission Officer (ICO), at any time.