Privacy Policy

1. Information We Collect

When you reserve an escape room or laser tag session, purchase a gift voucher, or interact with our support desk, we collect only necessary personally identifiable information (PII):

• Contact Information: Full name, email address, mobile phone number / WhatsApp contact.
• Booking Details: Selected game experience, venue location, date, time slot, group size, and custom player notes.
• Payment Reference Data: Gateway payment identifiers, transaction order IDs, and payment status. We do not capture or store sensitive payment credentials such as raw credit/debit card numbers, CVVs, or online banking passwords.
• Technical Information: IP address, device type, browser metadata, and essential session cookies required for booking integrity.

2. Purpose of Data Collection

We process your personal information strictly for legitimate commercial and operational purposes:

• Confirming and managing your game slot reservations and e-vouchers.
• Issuing automated SMS/WhatsApp/email booking confirmations, calendar invites, and arrival directions.
• Conducting required pre-game safety briefings and participant check-ins.
• Providing responsive customer service, slot rescheduling, and refund handling.
• Complying with applicable Indian legal obligations, financial audits, and safety records.

3.Payment Processing & Gateway Security

All online digital payments on our platform are processed securely through certified, PCI-DSS Level 1 compliant payment aggregators including Cashfree Payments and Razorpay.

Payment data transmission is encrypted via 256-bit Transport Layer Security (TLS/SSL) with cryptographic signature validation (HMAC-SHA256). Adventure Grid LLP never handles or stores unencrypted bank account numbers, debit/credit card numbers, or UPI PINs on its servers.

4.Data Protection & Encryption Standards

We implement robust technical and organizational measures to safeguard guest records:

• Sensitive customer data stored at rest is protected with AES-256-GCM encryption algorithms.
• Access to internal databases is restricted to authorized personnel under multi-factor authentication (MFA) and strict confidentiality agreements.
• We perform regular vulnerability scanning and security reviews of our hosting infrastructure.

5.Sharing & Third-Party Disclosures

Adventure Grid LLP does not sell, rent, monetize, or trade your personal information to any third parties or marketing brokers.

Data is shared exclusively with essential trusted service partners (such as authorized payment gateways, SMS/WhatsApp transactional notification providers, and cloud hosting providers) strictly for fulfilling your booking experience.

6.Your Rights & Data Retention

In accordance with the Digital Personal Data Protection (DPDP) Act and the Information Technology Act 2000 (and rules framed thereunder), you have the right to request access to, correction of, or deletion of your personal records held by Adventure Grid LLP.

Booking records are retained for a duration compliant with statutory accounting and tax regulations, after which they are securely scrubbed or anonymized.