Privacy Policy

Last Updated: 15 October 2025

ScreamWorks (“us”, “we”, or “our”) operates the websites www.screamworks.co.uk and www.screamworks.london, our “Open House” Escape Room, our “Granny” Horror Escape Game, any bespoke event we design, and any other event or game which we offer under the ScreamWorks brand (the Service). 

52 Events Limited trade as and operate under the ScreamWorks brand. 52 Events Limited are a company registered in England & Wales, with the company number 12245899. It’s registered office is at 261 Paradise Row, London, E2 9LE.

This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and your rights under data protection law in the UK, including the UK Data Protection Act 2018 (DPA 2018) and the UK’s version of the General Data Protection Regulation (UK GDPR).

Definitions

  • Personal Data
    Data that can be used to identify a living individual.
  • Usage Data
    Data collected automatically, such as IP address, browser type, visit duration, and other analytics.
  • Cookies
    Small data files stored on your device. Cookies can be used to track activity and enhance user experience. For more details about how we use Cookies, please see our Cookie Policy.
  • Data Controller
    The person or organisation determining how and why personal data is processed — in this case, ScreamWorks.
  • Data Processor
    Any third party who processes data on behalf of the Data Controller.
  • Data Subject
    Any individual using the Service and who is the subject of Personal Data. 

Terms not defined here carry the same meaning as in our Terms and Conditions.

Information We Collect

We collect several types of information to provide and improve our Service:

Personal Data

We may ask you to provide Personal Data, such as:

  • Name
  • Email address
  • Phone number
  • Address
  • Emergency contact information
  • Date of birth, and proof of date of birth (if required for age verification)
  • Content of messages you send to us or any feedback you provide
  • Social Media Handles (where you contact us via social media)

We may also collect Personal Data about you when you use our Service, such as:

  • Recordings captured which feature you and are taken to monitor on site safety, or for entertainment, or promotional purposes
  • How you interact with our Service including Usage Data and information from Cookies

Use of Your Personal Data and our Legal Basis for Processing it

We use the Personal Data we collect for the following purposes:

  • To provide our Service, and we rely on our contractual relationship with you to process your personal data to provide the Service
  • To set up an account for you on our Service to enable you to access your tickets, manage your orders and access your Attendee Dashboard , and we rely on our contractual relationship with you to process your personal data to provide the Service
  • To improve our Service, and we rely on our legitimate interests in improving and enhancing our Services and our business
  • To administer bookings and event access, we rely on our legitimate interests in entering a contract with you for our Services, and thereafter our contractual relationship with you.
  • When you contact us, by phone, email, via our ‘contact us’ page or via social media, we process your personal data as it’s in our legitimate interest to make sure we can properly respond to your query.
  • For safety, security, and fraud prevention, we rely on our legitimate interest in ensuring the safety and security of our Services for the processing of your Personal Data. Where we have a legal obligation to ensure safety, security or fraud prevention, we process your personal data in order to comply with our legal obligations.
  • To send booking confirmations and essential communication, we rely on our contractual relationship with you.
  • To verify age and identity, when legally required, relying on our legal obligation to age verify.
  • To share event media with guests, we rely on your legitimate interest in remembering your experience with us and our legitimate interest in enabling you to re-watch your experience to encourage you to visit again.
  • To use event media for promotional purposes on our website, in adverts and on social media, we rely on our legitimate interest in promoting our Service.
  • For email and text marketing purposes, where you have consented to receiving marketing from us. Where you have expressed an interest in our Service, we rely on our legitimate interest in sharing marketing with you where you have not opted out of receiving our marketing and we think that you may be interested in our other Services. You can contact us at any time to withdraw your consent to marketing or opt-out of marketing using the contact details below. To respond to requests from legal authorities, or comply with our legal obligations, we process your personal data in order to comply with the relevant legal obligation.
  • If our business is sold. We process your personal data for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal data in this way, the buyer of our business may not be able to provide Service to you.

Sharing your Personal Data 

We may share your data with trusted third-party service providers to assist us with providing our Service to you, including:

  • Booking & ticketing systems
  • Payment processors
  • Video hosting platforms
  • Analytics tools (e.g., Google Analytics)
  • Marketing platforms
  • Professional Advisors (including lawyers and accountants)

We may also share your Personal Data with:

  • Regulators, authorities or law enforcement agencies, where we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect our, our customers’ and others’ rights. This includes exchanging your personal data with other companies and organisations for the purposes of fraud protection.
  • Prospective buyers of our business under our legitimate interest to ensure our business can be continued by the buyer.

Additional information about how we use CCTV for security, safety and Media & Marketing 

We operate CCTV and video/audio recording systems throughout our premises for security, safety, quality control, and customer experience documentation. These recordings may capture images and/or voices of guests. We may use recordings to promote our Service, where we do this, we rely on our legitimate interest in promoting our Service. You can opt out of the use of recording of you for marketing by logging into your Attendee Dashboard after your experience and changing your preferences.

We may produce recordings for use in:

  • Guest replays and group media galleries (which can be accessed through our Attendee Dashboard)
  • Promotional material, social media content, and advertising campaigns

Recordings are made available to event participants for 14 days after your use of our Service via our Attendee Dashboard. Recordings will be unavailable to download after this time. If you do not want us to share your recording with the other members of your group and/or do not want us to use your recording for promotional purposes please log in to your Attendee Dashboard after the experience and opt-out.

Guests Aged 13–17

ScreamWorks permits attendees aged 13 and older to attend certain events. 

We only enable children to use our Service where we have obtained appropriate consent from a parent or guardian.

We only collect Personal Data necessary for event participation and safety, we do not collect Personal Data for email or text marketing to children.

Data Retention

We retain Personal Data only for as long as necessary:

  • Check-in and booking data: up to 12 months
  • CCTV footage: typically retained for 60 days unless required for investigation
  • Event footage: retained for the specified number of days shown in your booking (usually 14 days), unless we have nominated it for use in our marketing materials, in which case the footage will be retained for the duration of its use in marketing plus 60 days.
  • Marketing preferences: until consent is withdrawn, and thereafter it is retained on a suppression list for 12 months
  • Legal, financial, regulatory and health and safety records: as required under applicable UK law

Your Rights Under UK GDPR and DPA 2018

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Request deletion (where legally permitted)
  • Restrict or object to processing
  • Withdraw consent at any time
  • Data portability (receive your data in a machine-readable format)
  • File a complaint with the ICO (Information Commissioner’s Office), the regulator for data protection in the UK.

To exercise your rights, or those rights of a child that you have guardianship over, email us at: info@screamworks.co.uk

Data Transfers

Your information may be stored or processed in the UK or elsewhere. We ensure that any international data transfers comply with applicable data protection laws and apply appropriate safeguards.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page.

Contact Us

If you have questions about this Privacy Policy or your data, please contact:

ScreamWorks / 52 Events Ltd
Email: info@screamworks.co.uk
Registered in England & Wales
Company No: 12245899
Registered Office: 261 Paradise Row, London, E2 9LE.52 Events Limited is Registered as a Tier 1 Data Controller with the Information Commissioners’ Office, Reg. No. ZB868418. A copy of our certificate can be viewed here