Privacy
This notice explains how PuzzleDuck Ltd uses personal information when you browse our website, contact us, create an account, buy or join a hunt, or use the PuzzleDuck app. It is effective from 12 July 2026.
PuzzleDuck Ltd is the controller of the personal information described in this notice. We are registered in England and Wales under company number 11469979. For privacy questions or requests, email hello@puzzleduck.co.uk and include "privacy" in the subject line.
We collect information you give us, including your name, email address, phone number, organisation or group, enquiry and support messages, account details, booking and order details, marketing preferences, team details, clue answers, and photos you choose to submit. We also collect information when you use our services, such as hunt access and progress, check-ins, device and browser details, IP address, app identifiers, notification settings, and website usage. An organiser may give us participant or team details, and payment providers send us payment status and transaction references.
We use personal information to answer enquiries; recommend, create, sell, and deliver hunts; manage accounts, orders, Hunt passes, teams, progress, scoring, and completion; provide support and service messages; process payments and maintain business records; keep our services secure; understand and improve our website, app, routes, and services; and send marketing where you have asked for it or where the law otherwise permits it.
We rely on contract where information is needed to arrange, sell, or deliver a hunt; legal obligation for tax, accounting, fraud-prevention, and rights requests; legitimate interests to operate, secure, support, and improve PuzzleDuck and communicate with customers, provided those interests do not override your rights; and consent for optional analytics, marketing, notifications, or other features where consent is required. You can withdraw consent at any time without affecting earlier processing.
We share information only where needed with providers that support hosting, app infrastructure, email, payments, analytics, notifications, customer support, and business administration; with professional advisers and authorities where required; and with a group organiser where necessary to manage access, teams, participation, results, or safety. We do not sell personal information.
Stripe processes card payments; PuzzleDuck receives transaction details and payment status but does not store full card details. With your consent, Google Analytics helps us understand website use. OneSignal supports app email and push notifications where enabled. These providers process information under their own terms and our arrangements with them.
A hunt may ask you to answer clues, check in at stops, or submit a photo. We use this information to unlock content, record progress, score or complete the hunt, provide support, and show relevant results to you or your organiser. The app may use your device location to confirm that you are near a stop; device permissions control access. Do not submit photos or answers containing personal information about someone else unless you have their permission.
We use essential technologies needed for security, sessions, forms, checkout, and app operation. If analytics or marketing tools are enabled, we will use consent or another lawful basis where required and will provide controls where applicable.
Some providers may process information outside the UK. Where this happens, we use an adequacy regulation or appropriate safeguards recognised by UK data protection law, such as the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses. Contact us if you would like more information about the safeguard used for a particular transfer.
We keep information only for as long as it is needed for the purposes described here. We consider the length of your relationship with us, the nature and sensitivity of the information, service and security needs, limitation periods, and tax, accounting, and other legal requirements. We delete or anonymise information when it is no longer needed. You can ask about the period that applies to a particular record.
You do not have to provide personal information simply to browse our public pages. Information marked as required when you enquire, register, buy, or join a hunt is needed to respond, create the account, complete the order, or deliver the service. If you do not provide it, we may be unable to do that. Optional fields, analytics, marketing, photos, and notifications can be declined unless a particular hunt clearly explains why an item is needed.
Depending on the circumstances, you may ask us for access to your information, correction, deletion, restriction, or a portable copy, and you may object to processing. You can withdraw consent at any time. The right to object is especially relevant where we rely on legitimate interests or use information for direct marketing. These rights are not absolute, and we may need to verify your identity. Email hello@puzzleduck.co.uk to make a request.
We do not use personal information to make solely automated decisions that have legal or similarly significant effects. PuzzleDuck is designed for group play, and a responsible adult or organiser should manage participation by children and avoid providing more information about them than is necessary.
Please contact us first so we can try to resolve your concern. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk or by calling 0303 123 1113.
We may update this notice when our services or legal obligations change. We will publish the current version here and, where a change materially affects how we use your information, bring it to your attention through an appropriate channel before the new use begins.
Contact us with the part of this page you need help with.
