Privacy Policy

Who this policy is from

This policy covers the information Crawler Madness collects when you visit our booking site, make a booking, or receive messages from us. Our booking site runs on BookingVana, the booking platform Crawler Madness uses to take reservations and payments; BookingVana processes this data on our behalf and under our instructions.

What we collect

• Contact details you give us at checkout — your name, email address, and, if you provide it, your mobile phone number.
• Booking details — the experience booked, date and time, party size, any add-ons, promo codes, and the service address when we come to you.
• Payment information — handled entirely by our payment processors. Card numbers are entered on their hosted checkout and are never seen by, or stored on, our systems. We keep only the amount, the status, and a processor reference for the transaction.
• Messaging preferences — whether you checked the box asking us to text you about your booking, and the date and time you did.
• Waivers and event notes — where an experience requires a signed waiver or you send us a question about a booking.
• Basic technical data — the standard request information any website receives (IP address, browser type) plus the cookies needed to keep you signed in and to attribute a booking to the link you arrived from.

How we use it

• To take, confirm, schedule, and deliver the booking you made.
• To collect payment, apply discounts and credits, and issue refunds.
• To send you service messages about your own booking — the confirmation, reminders, a balance-due notice, and a waiver request — by email and, if you opted in, by text.
• To answer your questions and provide customer support.
• To keep required financial and tax records, and to prevent fraud and abuse.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

Text messages, consent, and your phone number

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers collected for SMS consent will not be sold, rented, or shared with anyone, and all SMS consent data stays with Crawler Madness. The only party that ever receives your number is our messaging carrier, Twilio, purely so it can deliver the message you asked for.

Texting is optional. You can book without giving us a phone number at all, and giving us one is never a condition of purchase. When you check the SMS box at checkout you are opting in to Crawler Madness booking notifications — booking confirmations, appointment reminders, balance-due notices, and waiver requests — and nothing else. We do not send marketing or promotional texts on this program.

Reply STOP to any message to stop them immediately, or HELP for help. Message frequency varies. Msg & data rates may apply. Full details are in our SMS Program Terms.

We record the date and time you gave consent, and the wording you agreed to, so we can show that your consent was given — and honor a later opt-out.

Service providers we use

We use a small number of vendors to run the booking service. Each receives only what it needs to do its job, may use it only for that purpose, and may not sell it.

• Stripe — payment processing. Receives your name, email, and payment details, which you enter on Stripe's own hosted checkout.
• Shopify — order and invoice processing for bookings sold through our store. Receives your name, email, phone (for the order record), billing and service address, and the order contents.
• Twilio — text message delivery. Receives your phone number and the text of the booking message, only when you have opted in.
• Resend — email delivery. Receives your email address and the content of booking emails.

We also disclose information when the law requires it, and to our professional advisers where necessary. If our business is ever transferred, booking records may transfer with it, subject to this policy.

How long we keep it

• Booking and payment records — kept for 7 years after the booking, because tax and accounting rules require it.
• SMS consent and opt-out records — kept for 4 years after you opt out, which is what the messaging rules require us to be able to prove.
• Signed waivers — kept for 4 years after the event they cover.
• Support messages — kept for 2 years.
• Marketing email subscriptions — kept until you unsubscribe, then only the record that you did.

Deleting your information

Email us at the address below with the phrase “delete my data” and the email address or phone number you booked with. We will confirm the request, delete what we are not legally required to keep, and tell you what was kept and why — normally within 30 days and at no charge.

Two things survive a deletion request: the financial record of a completed transaction, which tax law requires us to retain for the period above, and your opt-out record, which we must keep precisely so we never text you again by mistake. Both are reduced to the minimum needed for that purpose.

Your rights

California residents (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to request a copy of it, to request its deletion, to correct it, and to not be discriminated against for exercising any of these rights. We do not sell or share personal information as those terms are defined by the CCPA, so there is no “Do Not Sell or Share” process to opt into. Make a request using the contact details below; we will verify it against the email or phone number on your booking.

EU/UK residents (GDPR). You have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to receive it in a portable form. Where we rely on your consent — text messages and marketing email — you may withdraw it at any time, which does not affect processing already carried out. Our lawful bases are performance of a contract (to deliver your booking), consent (for texts and marketing), and legitimate interests (to keep the service secure and prevent fraud). You may also complain to your local data protection authority.

Children

Our booking site is intended for adults. We do not knowingly collect personal information from anyone under 13. Children regularly attend our events, but the booking, the contact details, and any waiver are always provided by a parent, guardian, or other responsible adult. If you believe a child under 13 has given us information directly, contact us and we will delete it.

Security

Traffic to our site is encrypted in transit. Booking data is held in an access-controlled database, and staff access is limited to the people who need it to run your booking. Card details never reach our systems. No system is perfectly secure, but we work to keep the amount of information we hold to what the booking actually requires.

Changes to this policy

If we change this policy we will update the date at the top of this page. Material changes to how we use your information will be announced before they take effect.

Contact us

Questions, requests, or complaints about this policy:

• Email: contact@crawlermadness.com
• Web: https://www.crawlermadness.com