Foxtrail – Play.Think.Move.


Foxtrail Portugal Ltd. Privacy Policy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from

How we use personal data

After signing up for a game/mission

When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information, email address, and phone number. We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information. The reasons why we hold and process personal data are:

To help you as a customer

We may keep a record of personal data so that we can contact you and people in your teams about your experience, for example if there is a problem, or for feedback. We may also keep a record of personal data from purchases on our site that weren’t completed, often known as ‘dropped checkouts’, to enable us to follow up with customers who indicated an intent to purchase, but did not complete the purchase. The basis for processing this data, as defined by the General Data Protection Regulation (GDPR) under Article 6 is ‘legitimate interests’.

If you have signed up multiple teams, this data will also be shared by email with captains and players on your booked game. If you would like to avoid this, you can do so by selecting the “secret” option when booking. This will mean that no communications are sent to anyone other than the Team 1 captain until that person begins the game, at which point only text messages will be sent, not emails. 

After you have played a game, we will keep your data, unless you tell us you would like us to remove it. If you contact us we can look up your details, so we can tell you which missions you have done in the past, so we can recommend other missions to you, and importantly make sure you don’t do the same mission again. This is because the missions do not usually change enough to make them suitably different to be a challenge to do again.

Sharing personal information

Our technology partners and our customer support staff have access to personal data so that they can make sure our systems run properly, and can serve you as a customer. They have access to name, email and mobile number. 

So that we can work out which experiences people like most

We do broad analysis of data so that we can understand how to market our products to help us work out which experiences we should create next. For example, to work out whether people who sign up to the mission The Hidden Valley to play the mission From Dogs to Trams.

Our retention policy is to retain data indefinitely, unless you ask us to remove it. This enables us to do reasonable analysis of which products people continue to buy, and recognise our most loyal customers.

So that we can tell you about Foxtrail experiences

If you tell us you would like to be kept updated about Foxtrail experiences, we will provide your name and email to send emails using the Klaviyo email sending tool. You can unsubscribe at any time – click the unsubscribe link in the email. This basis for holding your data for electronic marketing is ‘consent’ under GDPR.

We may provide data to Facebook, so that customers can find out about new Foxtrail experiences in adverts on the Facebook or Instagram sites. The information we send is for Foxtrail advertising purposes only; Facebook do not have access to the data for their purposes. The data sent is name, email, and phone number. If you see an advert from Foxtrail on Facebook and do not want to see further adverts from Foxtrail click the ‘…’ menu on the top-right hand corner of the ad and navigate to ‘Hide all ads from this advertiser’. Read more about hiding adverts. The basis for processing this data under the General Data Protection Regulation (GDPR) is ‘legitimate interests’. Customer data sent to Facebook is hashed (encrypted in a way that it cannot be easily reversed) locally on the browser before it goes to Facebook for matching. Facebook typically deletes all matched and unmatched hashes within 48 hours after the matching process ends.

We have agreements in place with the organizations above to ensure they safeguard data.

So that we can publish your review of your experience

If you submit a review, we may publish it alongside your name. Your contact details will not be made public.

Right to forget

If you would like us to correct or remove your data after you have played an experience with us, or you would like us to stop processing it for any reason, then let us know. You have the right to ask us to do this under GDPR. We won’t be offended.

If we remove your data we may retain a small amount of information about your request, including your name and email address and your communication to us related to GDPR so that we can (1) monitor the effectiveness of handling GDPR-related enquiries and (2) monitor systems to protect ourselves from repetitive spurious enquiries, cyber-attack or fraud.


Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity. For further information, visit 
You can set your browser not to accept cookies and the above website tell you how to remove cookies from your browser. However, in a few cases, some of our website features may not function as a result.

Changes to this policy

This privacy policy was last updated on August 25th, 2022. You can find updates on this web page.

If you want to contact us

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at

If you have a complaint

Contact us if you have a problem. If you wish to file an official complaint to Portuguese authorities, click on the “Livro de Reclamações” icon on the footnote of our website.