Book Now
Effective: Aug 2026
This Privacy Policy (together with our Terms of Visit and any venue-specific privacy notices) explains how Cipher Corp Management Ltd and its affiliates ("we", "us", or "our") collect, use, and protect your personal information across our websites, products, venues, and services—including www.spyscape.com and www.spygames.com (the "Sites").
By using our Sites or visiting our venues, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Sites, attend our venues, or provide your information.
This Privacy Policy is designed to align with the principles and requirements of applicable privacy laws, including those in the United Kingdom, the European Union, and the United States where relevant.
We aim to implement reasonable measures to ensure your data is handled in a manner consistent with the applicable legal obligations in the regions where we operate or where you access our services.
The Sites are owned and operated by Cipher Corp Management Ltd, a company registered in England and Wales under company number 10001328, with a registered office at:
1 Chapel Street, Warwick, United Kingdom, CV34 4HL.
We operate the SPYSCAPE and SPYGAMES brands, experiences, venues, and digital services globally. We are registered with the UK Information Commissioner’s Office under registration number ZA201368.
We may collect and process many types of personal data, including but not limited to:
a. Information you provide directly
b. Information we collect automatically
c. Information collected during venue visits
We use cookies to:
You may configure your browser to reject cookies. Blocking cookies may impair site functionality. Third-party services (e.g., social media plugins, analytics) may also use cookies outside of our control.
We use your personal information to:
We process your personal data where we have a lawful basis to do so under UK GDPR, such as your consent, performance of a contract, legal obligation, or our legitimate interests.
Use of Imagery for Promotional Purposes
When you visit a SPYSCAPE or SPYGAMES venue, you may be photographed or recorded. In accordance with our Terms of Visit, entry to the venue is considered implied consent for the use of your image, voice, or likeness in promotional content across any media formats. We use such imagery to promote our venues and experiences, in line with our legitimate interests and visitor expectations. If you do not wish to appear in promotional materials, please let a member of our team know during your visit.
If you have interacted with us previously, we may send you relevant information about similar products or experiences. You can opt out at any time via the unsubscribe link or by contacting us.
We value your privacy and treat your personal data with care. We do not sell your personal data to third parties. We only share your information where necessary to deliver our services, improve your experience, or comply with legal obligations.
Your data may be transferred and stored outside the UK/EEA, including in the United States. We use appropriate safeguards (e.g., Standard Contractual Clauses) to protect your rights. By submitting your data, you consent to these transfers.
We use technical and operational measures to safeguard your data. However, no online transmission is 100% secure, and we cannot guarantee absolute protection.
Depending on your jurisdiction, you may have the right to:
Making a Subject Access Request (SAR)
You have the right to request a copy of the personal data we hold about you (commonly known as a Subject Access Request or “SAR”), together with information about how we use that data.
To make a Subject Access Request (SAR), please contact us at helloLDN@spyscape.com with the subject line “Subject Access Request”. To help us locate your information, please include your full name, your contact details, and any information that may assist us in identifying the records you are requesting (such as the email address used when making a booking or creating an account).
To protect your personal information, we may ask you to provide proof of your identity before we process your request. This may include a copy of a valid government-issued photo identification document or other documentation sufficient to verify your identity.
We will respond to your request without undue delay a to acknowledge your request. Where we require proof of identity to verify your request, the statutory response period will begin once we have received sufficient information to confirm your identity. If your request is particularly complex or we receive multiple requests from you, we may extend this period where permitted by applicable law, and we will let you know if this applies.
Requesting Deletion of Your Personal Data
You may request that we delete your personal data where you have the right to do so under applicable data protection laws.
To make a data deletion request, please contact helloLDN@spyscape.com with the subject line “Data Deletion Request”. Please include your full name, your contact details, and sufficient information to help us identify the personal data you would like us to delete.
To protect your personal information, we may ask you to provide proof of your identity before processing your request. This may include a copy of a valid government-issued photo identification document or other documentation sufficient to verify your identity.
We will respond to your request without undue delay to acknowledge your request and will confirm deletion within 30 days of your request.
Please note that we may need to retain certain information where we are required or permitted to do so by law, including for legal, regulatory, fraud prevention, accounting, or legitimate business purposes. Where we are unable to delete certain information, we will explain the reasons in our response.
Our Sites may include links to third-party websites or platforms. We are not responsible for their privacy practices. Please review their privacy policies before sharing your data.
We may update this Privacy Policy periodically. The "Effective" date at the top reflects the latest version. Continued use of our Sites or venues implies acceptance of these updates.
If you have questions or wish to exercise your rights, contact: helloLDN@spyscape.com
This Privacy Policy is governed by the laws of England and Wales and is written in English. Where required by local laws, we will respect additional rights and obligations.