Language
Language

XForce Galaxy Privacy Policy

XForce Galaxy (together with our affiliates and subsidiaries, if any, “XForce Galaxy,” “we,” “us,” or “our”) provides live, in-person cybersecurity-themed escape room and interactive game experiences, and related services (such as bookings, events, customer support, and our website) (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Services, including when you visit our website, make a booking, participate in an in-person experience, engage with us on social media, or otherwise interact with us.

If you do not agree with this Privacy Policy, please do not use our Services.

1) Definitions

“Personal Information” means information that identifies, relates to, describes, or can reasonably be linked to you (directly or indirectly). Examples include name, email address, phone number, and online identifiers such as IP address. If we de-identify or aggregate information so it can no longer reasonably identify you, it is no longer Personal Information.

2) Information We Collect

We collect information in three ways: (A) information you provide, (B) information collected automatically, and (C) information from third parties.

A. Information you provide to us

Depending on how you interact with our Services, you may provide:

  • Contact details: name, email address, phone number, mailing address.
  • Booking and transaction details: reservation details (date/time, number of players, game selected), gift card purchases, receipts, and customer service history.
  • Payment information: payment card details are typically collected and processed by our third-party payment processors; we generally do not store full payment card numbers.
  • Event and group information: company/school/team name, point-of-contact details, and event preferences.
  • Communications: messages you send to us (email, chat, phone, social media), including any information you choose to share.
  • Photos/videos you submit: if you post content to our pages, participate in promotions, or share feedback.
  • Job applicant information (if applicable): resume/CV, work history, education, and other details provided through your application.

B. Information collected automatically

When you visit our website or use online features, we may collect:

  • Device and usage data: IP address, browser type, device identifiers, operating system, referring URLs, pages viewed, and interactions with the site.
  • Approximate location: generally derived from IP address.
  • Cookies and tracking data: as described in the Cookies and Tracking section below.

C. Information from third parties

We may receive information from:

  • Booking, waiver, payment, and event platforms you use to interact with us.
  • Social media platforms if you interact with us or log in using a social account (if we offer this).
  • Marketing and analytics providers (e.g., ad networks, measurement tools), subject to your settings and applicable law.

3) How We Use Personal Information

We use Personal Information to:

  • Provide and operate the Services (process bookings, manage schedules, deliver experiences, issue confirmations, administer gift cards, and provide customer support).
  • Process payments and prevent fraud (via payment processors and fraud-prevention tools).
  • Communicate with you (respond to inquiries, send booking updates, policy changes, and important notices).
  • Improve and personalize the Services (analytics, troubleshooting, testing, understanding what content and experiences are most useful).
  • Marketing and advertising (send promotions, event invitations, newsletters, and show ads that may be relevant to you; you can opt out as described below).
  • Security and safety (protect our guests, staff, and facilities; enforce policies; detect/prevent misuse; and protect our rights and property).
  • Legal and compliance purposes (comply with laws, respond to lawful requests, and maintain required records).
  • Corporate transactions (evaluate or complete a merger, acquisition, financing, reorganization, or sale of assets).

4) Legal Bases for Processing (Where Applicable)

If you are located in a jurisdiction that requires a legal basis (e.g., EEA/UK), we process Personal Information based on:

  • Performance of a contract (e.g., to fulfill a booking or purchase).
  • Legitimate interests (e.g., improving Services, marketing, security, and fraud prevention) where not overridden by your rights.
  • Consent (e.g., certain marketing preferences, optional cookies where required).
  • Legal obligations (e.g., recordkeeping, responding to lawful requests).
  • Vital interests (e.g., urgent safety situations).

5) How and When We Share Personal Information

We may share Personal Information in the following situations:

A. Service providers

We share information with vendors who perform services on our behalf, such as:

  • Payment processing
  • Booking and scheduling
  • Email/SMS communications
  • Customer support tools
  • Analytics and website hosting
  • Marketing and advertising partners These providers may access Personal Information only as needed to provide services for us and are required to protect it.

B. Business partners

We may share limited information with trusted partners when we co-sponsor events, promotions, or group experiences, or when you direct us to do so.

C. Legal and safety reasons

We may disclose information if necessary to:

  • Comply with law, regulation, subpoena, court order, or lawful government request;
  • Enforce our terms, policies, or agreements;
  • Protect rights, safety, and security of guests, staff, and the public;
  • Detect/prevent fraud or security incidents.

D. Corporate transactions

If we are involved in a merger, acquisition, financing, or sale of assets, we may share information as part of that transaction, consistent with applicable law.

E. Aggregated or de-identified data

We may share aggregated or de-identified information that does not reasonably identify you.

6) Cookies and Tracking Technologies

We and our service providers may use cookies, pixels, SDKs, and similar technologies to:

  • Operate and secure our website;
  • Remember preferences;
  • Analyze site performance and usage;
  • Support advertising and measure marketing effectiveness (where permitted).

Your choices

You can manage cookie preferences through:

  • Your browser settings (block or delete cookies), and
  • Any cookie preference tools we provide on our site (if available).

Interest-based advertising: You may be able to opt out through industry programs such as the Digital Advertising Alliance (DAA) and the Network Advertising Initiative (NAI), and through platform-specific settings (e.g., Google, Meta). Even if you opt out, you may still see contextual ads.

Opt-out preference signals: Where required by applicable law, we will honor opt-out preference signals (such as the Global Privacy Control (GPC)) for applicable processing.

7) Social Media and Third-Party Links

Our Services may link to third-party websites or embed third-party tools (e.g., maps, video players, social widgets). Your interactions with those third parties are governed by their own privacy policies. We are not responsible for third-party privacy practices.

8) In-Person Experience Data (Facility, Safety, and Media)

When you visit an XForce Galaxy location, we may collect or generate additional information such as:

  • Safety and incident information (e.g., if an injury or safety issue occurs).
  • Entry/attendance details related to your booking.
  • Photos/videos taken during or around the experience only where offered (for example, group photos). If we use photos/videos for marketing, we will do so consistent with any notices provided at the time and applicable law.

Security cameras: We may use video surveillance in common areas for security and safety purposes. We do not intend to place cameras in areas where individuals have a reasonable expectation of privacy (such as restrooms).

9) Data Retention

We retain Personal Information for as long as reasonably necessary to:

  • Provide the Services and fulfill transactions;
  • Maintain business records (e.g., accounting, tax, dispute resolution);
  • Enforce agreements and protect our rights; and
  • Comply with legal obligations.

Retention periods vary depending on the type of data and the reason we collected it. When no longer needed, we delete, anonymize, or securely store and isolate it until deletion is feasible.

10) Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no security measure is perfect, and no method of transmission over the internet or storage can be guaranteed 100% secure. Please do not send highly sensitive information through unencrypted channels.

11) Your Privacy Rights and Choices

Depending on where you live, you may have rights such as:

  • Access (request a copy of your Personal Information),
  • Correction (fix inaccurate information),
  • Deletion (request deletion, subject to exceptions),
  • Opt-out of certain processing (such as targeted advertising, and in some jurisdictions, “sale” or “sharing” as defined by law),
  • Portability (receive certain information in a portable format),
  • Non-discrimination for exercising your rights.

How to exercise your rights

You (or an authorized agent, where permitted) can submit a request using: 

We may need to verify your identity before responding. If you use an authorized agent, we may require proof of authorization.

Marketing preferences

  • Email: You can unsubscribe using the link in marketing emails.

12) Do-Not-Track

Some browsers have “Do Not Track” signals. There is no uniform standard for responding to DNT signals, so we do not respond to them in all cases. Where applicable law requires honoring certain signals (such as GPC), we do so as described above.

13) International Visitors

If you access our Services from outside the United States, your information may be processed and stored in the United States (and other locations where our service providers operate). These locations may have different data protection laws than your home jurisdiction.

14) Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top indicates when it was last revised. If we make material changes, we will provide notice as required by applicable law.

15) Contact Us

If you have questions or requests regarding this Privacy Policy, contact us at:

XForce Galaxy

Email: info@xforcegalaxy.com

Phone: 469-586-4050

Mailing Address: 230 W John Carpenter Fwy, Irving, TX 75039