Privacy Policy

1. Introduction and Scope

Questoria Play ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal information of every individual who interacts with our business, whether through our website, in person at our Colorado Springs location, or via any other communication channel. This Privacy Policy explains in clear and complete terms how we collect, use, store, protect, and under certain circumstances disclose the personal information you provide or that we gather in the ordinary course of operating our immersive game experience and event production business.

This Policy applies to all visitors of our website, prospective clients who submit inquiries, confirmed clients who have booked our services, participants in our game sessions and events, and individuals who communicate with us through any digital or physical channel. By accessing our website or engaging with our services, you acknowledge that you have read, understood, and agree to the data practices described herein.

We operate in compliance with applicable United States federal and Colorado state privacy laws. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes under any circumstances.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us, submit an inquiry form, book a service, or communicate with our team, we may collect the following categories of personal information:

• Full name and preferred name or alias used during game sessions
• Email address for correspondence and service delivery
• Phone number for scheduling, confirmations, and logistical coordination
• Physical address or event venue address for on-site service delivery
• Event details including date, time, guest count, and thematic preferences
• Payment information processed securely through our third-party payment processor
• Any special requirements, accessibility needs, or health considerations voluntarily disclosed
• Feedback, survey responses, and testimonials submitted after service completion
• Any creative brief or scenario input you share during the scenario development process

2.2 Information Collected Automatically

When you visit our website, certain technical information is collected automatically through standard internet technologies and analytics tools. This includes:

• Internet Protocol (IP) address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent on each page, and navigation pathways
• Referring website address
• Device type (desktop, mobile, tablet) and screen resolution
• Date and time of each website visit
• Cookies and similar tracking technologies as described in our Cookie Policy

2.3 Information from Third Parties

We may occasionally receive information about you from third parties such as corporate clients who provide employee details for team-building event bookings, venue partners who facilitate coordination, or payment processors who confirm transaction status. In all such cases, we handle received information with the same level of care and confidentiality described in this Policy.

3. How We Use Your Information

We use the personal information we collect solely for legitimate business purposes directly related to providing our immersive game experience and event production services. Specifically, we use your information to:

• Respond to your inquiries and provide detailed information about our services and pricing
• Process and confirm bookings, issue invoices, and handle payment transactions
• Design, customize, and deliver game sessions and scenarios tailored to your specifications
• Coordinate logistics including venue setup, prop delivery, and staffing assignments
• Send service-related communications including confirmations, reminders, and follow-up messages
• Improve the quality and relevance of our services based on client feedback and usage patterns
• Fulfill our contractual obligations under any service agreement entered into with you
• Comply with applicable legal obligations and respond to lawful requests from authorities
• Protect against fraud, unauthorized access, and other harmful activities
• With your explicit consent, feature your testimonial or event highlights in our marketing materials

We do not use your personal information for automated decision-making that produces legal or similarly significant effects without human involvement. We do not engage in profiling for advertising purposes.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Policy, maintain adequate business records, and comply with applicable legal obligations. Our general retention periods are as follows:

• Client and event records: retained for a minimum of five years following service completion for contractual, tax, and dispute resolution purposes
• Inquiry and communication records: retained for two years from the date of last contact
• Payment records: retained in accordance with applicable tax law requirements
• Website analytics data: retained in aggregated, anonymized form for up to three years
• Marketing consent records: retained for the duration of the consent plus one additional year

When personal information is no longer required, we securely delete or anonymize it in accordance with industry-standard data destruction practices.

5. Disclosure of Your Information

We do not sell, rent, license, or otherwise transfer your personal information to any third party for commercial purposes. We may share your information in limited, specific circumstances:

• With service providers and subcontractors who assist us in delivering our services, such as payment processors, venue partners, or prop suppliers, under strict data processing agreements
• With professional advisors including attorneys, accountants, and insurance providers under duties of confidentiality
• When required by applicable law, court order, or lawful government request
• In connection with a merger, acquisition, or sale of business assets, in which case we will notify affected clients prior to any transfer of personal data
• With your express written consent for any other purpose not described herein

6. Your Privacy Rights

As a resident of Colorado or other applicable jurisdiction, you may have the following rights with respect to your personal information:

• The right to know what personal information we hold about you and how it is used
• The right to access and obtain a copy of your personal information in a portable format
• The right to correct inaccurate or incomplete personal information
• The right to request deletion of your personal information, subject to legal retention requirements
• The right to opt out of any marketing communications at any time
• The right to withdraw consent for any processing based on consent, without affecting the lawfulness of prior processing
• The right to lodge a complaint with applicable data protection authorities if you believe your rights have been violated

To exercise any of these rights, please contact us using the information provided at the end of this Policy. We will respond to verifiable requests within thirty days.

7. Security of Your Information

We implement commercially reasonable technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, disclosure, or destruction. These measures include encrypted data transmission, access controls, secure password practices, and regular security reviews.

However, no method of internet transmission or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that poses a material risk to your rights or freedoms, we will notify you and applicable authorities as required by law.

8. Children's Privacy

Our website and digital services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you believe a child has provided us with personal information without appropriate consent, please contact us immediately and we will take prompt action to remove such information from our records.

For family game events or sessions where minors participate, we require all participant information to be provided by a parent or legal guardian, who assumes responsibility for consenting on behalf of the minor in accordance with this Privacy Policy.

9. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time in response to changes in applicable law, our business practices, or the services we offer. When we make material changes, we will update the "Last Updated" date at the top of this Policy and, where appropriate, provide notice through our website or direct communication with affected clients. Your continued use of our services following any such changes constitutes your acceptance of the updated Policy.