Privacy policy

1. Who is responsible for your data

Foxchaser Ltd is the data controller. We are registered in England and Wales (company number 17138404, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ) and with the Information Commissioner's Office (registration ZC150456). For anything in this policy, email hello@foxchaser.co.uk.

2. What we collect, and why

When you book

Your name, email address and phone number, each teenager's first name and age, and your consent choices. This is what running your booking needs: confirmation, reaching you on the day, and a session pitched to the group. Legal basis: the booking contract.

If you start a booking and stop at the payment page

We may send you one email about that booking, and only one, so you can finish it or tell us what stopped you. It goes whether or not you ticked the marketing box, because it is about the booking you started, not about anything else. Legal basis: the steps you have taken towards a booking. Reply to that email and we will not send another.

Health, allergies and additional needs

Only what you choose to tell us at booking so the provider can support your teenager safely. This is special category data, and we handle it with extra care: we ask for your explicit consent before sharing it with the provider, we share only what is relevant, and we delete it 30 days after the experience.

Payment

Payment is handled by Stripe on Stripe's own pages. We never see or store card details; we receive confirmation that a booking is paid, and Stripe sends your receipt.

When you join the email list

Your email address and, if you give it, your first name. Consent-based: signing up on the form is the consent, we send a welcome email straight away, and every email includes an unsubscribe link that works immediately.

When you contact us

Your name, email address and message, kept while we deal with it and for a reasonable period afterwards. Contacting us never signs you up to anything.

When you browse

Anonymous, aggregated analytics: pages viewed, country, device type and referral source, measured without cookies. To see where booking journeys stall, we also record anonymous interaction events on this site: a page being viewed, whether the visitor scrolled or tapped at all (so we can tell people from automated traffic), whether the link arrived with an advertising click tag (recorded as the tag's name only, never its value), how far down an experience page was read, a date being chosen, and the booking form or payment step being reached. Each visit gets a random reference that links these steps together and is forgotten when you leave. The events record the site you arrived from as a domain only (for example instagram.com), never the full address, and they hold no names, contact details or IP addresses, and use no cookies or device storage. If you complete a booking, that reference and the campaign link you arrived from (if any) are kept with the booking, so we know which of our communications actually led to it. We cannot identify you from any of this, and none of it uses cookies or device storage. Stripe uses its own cookies on its checkout pages for fraud prevention and security.

Usage recordings, only if you say yes

If you accept the cookie choice shown on the site, we use Microsoft Clarity to see how the site is used: maps of where people click and scroll, and anonymised replays of visits. Clarity is set to mask all text on every page, so nothing you or anyone else types is captured. Saying yes lets Clarity set analytics cookies (_clck, _clsk and Microsoft's MUID) that link the pages of a visit together; if you say no, or say nothing, Clarity does not load and no tracking cookies are set. We never use Clarity for advertising. Microsoft processes this data for us on its Azure service and keeps recordings for up to 30 days (a small sample for up to nine months); processing can involve transfer to the United States under Microsoft's standard contractual safeguards. You can change your choice at any time via Cookie choices in the site footer.

3. Children's data

Bookings are made by adults; we do not take bookings or collect data directly from under-18s. About each teenager we hold what their parent or carer gives us at booking: first name, age and, where provided, the health information above. We keep it to the minimum a safe session needs, and we never use children's data for marketing.

4. Photos, video and sound

A photographer sometimes joins a session. Whether your teenager, or the adult coming with them, appears in what is recorded is your choice, made through two separate, optional tick boxes on the participant form completed after booking: one for your teenager and one for the accompanying adult, who is named on the form. Each covers photographs, video and sound used in Foxchaser marketing (our website, social media, advertising and press), including a short interview if the person chooses to give one on the day. Both are unticked by default and neither affects your booking. We review everything before it is published, and you can ask to see anything featuring you or your teenager before it goes live.

You can change your mind at any time by emailing us; if you withdraw consent we stop using the material, though we may not be able to recall copies already published or shared before withdrawal. Choices made on forms completed before 7 September 2026 cover photographs only, and we ask separately before using video or sound from those sessions.

5. Who we share data with

• The provider or venue running your experience. They receive what safe delivery needs: participant first names and ages, your name and phone number as the responsible adult, and, with your explicit consent, the relevant health information. Some venues need full attendee names in advance, for example for security or commemorative certificates; the experience page says so where that applies. Providers may use this information only to deliver the session.
• Services that run the site. Stripe (payments), Neon (our booking database), Resend (booking and confirmation emails), Vercel (hosting and cookieless analytics) and, only if you accept the cookie choice, Microsoft (Clarity usage recordings, described above). Each processes data only on our instructions.
• Emergency services, if there is an emergency on the day and sharing information protects a participant.
• Nobody else. We do not sell personal data, and we do not share it with advertisers.

6. How long we keep things

Health and additional-needs information

Deleted 30 days after the experience takes place.

Booking and payment records

Kept for six years after the booking, as accounting and tax law requires, together with the consent choices and terms version accepted with them.

Email list

Kept while you are subscribed, and removed after two years of inactivity.

Correspondence

Kept while we are dealing with it and for a reasonable period afterwards.

Usage recordings (Microsoft Clarity)

Kept by Microsoft for up to 30 days, with a small sample kept for up to nine months. Only collected if you accepted the cookie choice.

7. Your rights

You can ask us for a copy of the personal data we hold about you or your teenager, ask us to correct or delete it, restrict or object to how we use it, ask for it in a portable format, and withdraw any consent you have given, at any time. Email hello@foxchaser.co.uk and we will respond within a month. If you are not happy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we would appreciate the chance to sort it out first.

8. Changes to this policy

When we change how we handle data, this policy is updated and the date at the top changes with it. If a change materially affects an existing booking, we email you about it. Our booking terms are at Terms and cancellation.