Privacy notice

1. Who we are

Walton Group Ltd, trading as Bee Games, is the controller of personal data handled through this website and platform.

2. Information we collect

• Account information: name, email address, password hash, account role and sign-in records.
• Business and venue information: organisation, venue, contact and subscription details.
• Game information: a player display name, answers, scores, game events and participation history. Players do not need to create an account.
• Support and communications: messages, support requests and correspondence you send to us.
• Technical and security information: session identifiers, request and audit records, device/browser information made available in standard server logs, and security events.
• Billing information: subscription status and transaction references. Payment-card details are handled by our payment provider and are not stored by Bee Games.

3. Why we use information and our legal bases

We do not use solely automated decision-making that produces legal or similarly significant effects.

4. Who receives information

We use trusted service providers for website hosting, database and file storage, transactional email, payment processing and technical support. They may process information only under our instructions and appropriate contractual safeguards. Venue account administrators can see information associated with their organisation and game sessions.

If you contact us through WhatsApp, Meta processes that communication under its own privacy terms. If you make a payment, our payment provider processes payment information under its own privacy terms. We may also disclose information where required by law, to protect legal rights, or as part of a business sale or reorganisation.

5. International transfers

Some suppliers may process information outside the United Kingdom. Where this happens, we use a lawful transfer mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with appropriate security measures.

6. How long we keep information

We keep account, venue and subscription information while the account is active and afterwards only as long as needed for legal, accounting, dispute and security purposes. Game participation data is kept for as long as the relevant venue needs its game history and is then deleted or anonymised. Expired sign-in sessions and reset tokens are removed automatically. Support, audit and financial records are kept only for the period reasonably required for their purpose or by law. Backups expire on a controlled rotation.

You may ask us for the retention period that applies to a particular record using the contact details above.

7. Your rights

Under UK data protection law, you may have rights to access, correct or erase your information; restrict or object to processing; receive portable information; and withdraw consent without affecting earlier lawful processing. Rights can depend on the circumstances and legal basis.

Contact us to exercise a right. We may need to confirm your identity. You may also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint, although we would appreciate the chance to resolve the issue first.

8. Children

Venue customers can join games using a display name without creating an account. Venue operators are responsible for supervising their events and deciding whether a game and its content are suitable for their audience. The business account service is not directed at children.

9. Security and changes

We use access controls, encrypted connections, password hashing and other organisational and technical measures designed to protect information. No internet service can guarantee absolute security. We may update this notice when the service or law changes and will publish the revised date here.