Privacy Policy - AR City Quests

1. Introduction

AR City Quests ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our website and services. We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is:
AR City Quests
Email: privacy@unlockcity.quest
Address: [Your Business Address]

3. What Data We Collect

We may collect the following types of personal data:

Contact Information: Name, email address, phone number
Booking Information: Payment details, booking history, preferred cities
Device Information: IP address, browser type, device type, operating system
Usage Data: How you interact with our website and quests
Location Data: With your consent, we may collect location data for quest functionality

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

Contract: Processing necessary to fulfill our contract with you (booking and providing quests)
Consent: Where you have given explicit consent (marketing communications, location data)
Legitimate Interests: For website analytics, fraud prevention, and improving our services
Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Data

We use your personal data to:

Process and manage your bookings
Provide customer support
Send booking confirmations and quest instructions
Improve our website and services
Send marketing communications (with your consent)
Comply with legal obligations

6. Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure ("Right to be Forgotten"): Request deletion of your data
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time

To exercise your rights, please contact us at privacy@unlockcity.quest. We will respond within 30 days.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Booking data is retained for 7 years for legal and accounting purposes. Marketing data is retained until you withdraw your consent.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data is transmitted using SSL encryption.

9. Third-Party Processors

We may use trusted third-party service providers to process your data (e.g., payment processors, hosting providers). All processors are bound by data processing agreements and comply with GDPR requirements.

10. International Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Cookies

We use cookies and similar technologies to enhance your browsing experience. You can manage your cookie preferences through your browser settings. For more information, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page with an updated date.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@unlockcity.quest

14. Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with your local data protection authority.