Last updated: 14th of February 2026
1. Introduction
KB EXPERIENCE SLU, a company duly incorporated and existing under the laws of the Principality of Andorra, operating under the trade name Escape Society, with its registered office at CARRER CALLAUETA, NÚM. 8, 1R PIS, 3A PORTA, Andorra la Vella, Andorra (“Escape Society”, “we”, “us”, “our”), is committed to protecting your personal data and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and protect your information when you visit escape-society.com, subscribe to our communications, or book one of our trips or experiences. By using our services, you consent to the practices described in this policy.
2. Who We Are
Escape Society is a premium travel and adventure company offering curated trips, guided experiences, and outdoor expeditions worldwide.
Data Controller: KB EXPERIENCE SLU
Escape Society
🌐 https://escape-society.com
📧 contact@escape-society.com
2.1 Supervisory Authority
KB EXPERIENCE SLU is established in Andorra. Where the GDPR applies, the competent supervisory authority is:
Andorran Data Protection Authority (Agència Andorrana de Protecció de Dades – APDA)
You also have the right to lodge a complaint with the supervisory authority in your country of residence within the European Economic Area (EEA), where applicable.
3. What Personal Data We Collect
We may collect the following categories of information:
a) Identity & Contact Information
• Full name
• Email address
• Phone number
• Country of residence
• Emergency contact details
b) Booking & Travel Information
• Trip preferences
• Dietary or medical information (when required for safety)
• Passport details (only when necessary for travel arrangements)
• Insurance information
c) Payment Information
Payments are processed via secure third-party providers.
Escape Society does not store full credit card numbers on its servers.
d) Technical & Usage Data
• IP address
• Browser type
• Device information
• Website interactions, cookies and analytics data
e) Marketing Preferences
• Newsletter subscriptions
• Waitlists
• Travel interest forms
• Survey responses
f) Sensitive Health Data
• Certain trips may require limited health-related information (allergies, dietary restrictions, altitude conditions)
• Collected only when necessary, processed on explicit consent, used exclusively for participant safety, and deleted when no longer required
4. How We Collect Your Data
We collect information when you:
• Fill out a form on escape-society.com
• Subscribe to our newsletter or travel catalogues
• Make a booking or enquiry
• Contact us via email or messaging platforms
• Participate in surveys or marketing campaigns
• Browse our website (via cookies and analytics tools)
5. How We Use Your Data
We use your personal information to:
• Process and manage bookings
• Communicate important trip information
• Provide customer support
• Personalise travel recommendations
• Improve our services and website experience
• Send newsletters or promotional updates (only with consent)
• Ensure participant safety during trips
• Meet legal and regulatory obligations
Escape Society does not sell personal data.
6. Legal Basis for Processing (GDPR)
Where applicable, we rely on:
• Contractual necessity — to deliver booked trips
• Legitimate interest — to improve services and operations
• Consent — for marketing communications
• Legal obligation — for compliance and safety requirements
For special categories of data, such as health information collected for participation in activities, we rely solely on your explicit consent. This data is used exclusively for participant safety and will be deleted when no longer required.
You may withdraw consent at any time by contacting:
📧 contact@escape-society.com
7. Sharing of Personal Data
We may share limited information with trusted partners only when necessary to deliver your experience, including:
• Local guides and trip leaders
• Accommodation providers
• Transport operators
• Insurance partners (when applicable)
• Payment processors
• Marketing and CRM platforms
All partners are required to maintain high data protection standards. Some partners may act as independent controllers, in which case their privacy policies apply.
8. International Data Transfers
Escape Society operates globally; personal data may be processed outside the EEA. In such cases:
- We rely on European Commission adequacy decisions where applicable
- Where no adequacy exists, we implement Standard Contractual Clauses (SCCs)
- Data Processing Agreements (DPAs) are in place with third-party processors
- Technical and organisational safeguards are implemented
- EU–US Data Privacy Framework applies for transfers to the U.S. when relevant
Our primary hosting provider is OVH, located in the EU
9. Data Retention
- Booking and contractual data: up to 10 years (accounting/legal compliance)
- Payment records: per financial/anti-fraud regulations
- Medical/safety data: only during the trip unless legally required
- Marketing data: until withdrawal of consent
- Technical/analytics data: per cookie and analytics retention settings
Data may be kept longer to establish, exercise, or defend legal claims.
10. Cookies & Tracking Technologies
escape-society.com uses cookies to:
• Improve functionality
• Analyse website performance and user interactions
• Personalise user experience
• Support marketing campaigns
You can manage or disable cookies via your browser settings. Non-essential cookies are deployed only after consent via a banner. Consent may be withdrawn at any time.
View our Cookie Policy for more details.
11. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
• Secure hosting infrastructure (OVH)
• Encrypted communications (HTTPS/SSL)
• Access control and password management
• Trusted third-party platform
While we strive to protect your data, no system can guarantee absolute security. Escape Society is not liable for breaches caused by third parties, sophisticated cyberattacks, or participant negligence.
12. Your Rights
Depending on your location, you may have the right to:
• Access your personal data
• Correct inaccurate information
• Request deletion
• Restrict processing
• Object to marketing communications
• Request data portability
For U.S. residents, additional rights may apply under state laws, including the right to opt out of sale or sharing for targeted advertising. Escape Society does not sell personal data.
How to exercise your rights:
- To make a request, please contact us at contact@escape-society.com.
- Requests must be submitted directly by you; we may ask for proof of identity to ensure your data is protected.
- We will respond without undue delay and no later than 3 months from receipt of your request.
- If your request is complex or multiple requests are received at the same time, we may extend this period, but you will be informed.
- We may refuse requests that are excessive, repetitive, or unfounded.
You may lodge complaints with the competent supervisory authority.
Questions may be addressed to contact@escape-society.com.
13. Marketing Communications
You will only receive marketing emails if:
• You have opted in, or
• You are an existing customer receiving relevant updates (where legally permitted).
You can unsubscribe at any time via the link included in our emails.
14. Third-Party Links
Our website may contain links to external websites or partners.
Escape Society is not responsible for the privacy practices of third-party services.
15. Children’s Privacy
Our services are not directed toward children under 16 without parental consent.
We do not knowingly collect personal data from minors without appropriate authorisation.
16. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our services or legal requirements.
The latest version will always be available on:
🌐 https://escape-society.com
17. Contact Us
If you have questions regarding this Privacy Policy or your data:
Escape Society
🌐 https://escape-society.com
📧 contact@escape-society.com