Terms & Privacy Policy

RiddleWalk is a trading name of Tandm Labs, a sole trader business operated by Ziyang Gong, based in London, United Kingdom. You can contact us at hello@riddlewalk.com.

RiddleWalk provides self-guided walking puzzle experiences delivered entirely through WhatsApp. Players purchase access to a route, receive clues and riddles via WhatsApp messages, solve them at real-world locations, and are timed from start to finish. The experience is designed to be completed on foot in public spaces.

You must be at least 18 years old to purchase a RiddleWalk experience. Participants under 18 may take part under the supervision of a responsible adult who has agreed to these terms. You must have a working WhatsApp account to participate.

Payments are processed securely through Stripe. All prices are displayed in GBP and are inclusive of VAT where applicable. Some routes may be offered free of charge for testing or promotional purposes. Payment is required before you can begin a paid walking puzzle.

Because RiddleWalk is a digital service that begins immediately upon your first interaction via WhatsApp, you acknowledge that you lose your right to cancel under the Consumer Contracts Regulations 2013 once the experience has started (i.e., once you receive your first clue). If you have purchased a route but have not yet started it, you may request a full refund by contacting us at hello@riddlewalk.com within 14 days of purchase. Refunds for technical issues that prevented you from completing a route will be assessed on a case-by-case basis.

After payment, you will receive a greeting message on WhatsApp explaining the rules. When you message “Ready to begin,” the timer starts and your first clue is delivered. Clues are delivered one at a time. You have 3 hint lifelines for the entire game — once used, they cannot be recovered. You may forfeit at any time, in which case you will receive walking directions to complete the remaining route and your result will be recorded as DNF (Did Not Finish).

RiddleWalk is a walking activity conducted in public spaces. You participate entirely at your own risk. You are responsible for your own safety and the safety of anyone in your group at all times. You must obey all traffic laws, pedestrian signals, and local regulations while participating.

To the fullest extent permitted by law, Tandm Labs shall not be liable for any injury, loss, damage, or expense arising from or in connection with your participation in a RiddleWalk experience, including but not limited to: personal injury, property damage, theft, adverse weather conditions, or any incident occurring at or near the locations featured in the route.

Nothing in these terms excludes or limits our liability for death or personal injury caused by our negligence, fraud, or any other liability that cannot be excluded by law.

All clues, riddles, route designs, branding, website content, and associated materials are the intellectual property of Tandm Labs. You may not reproduce, distribute, or commercially exploit any RiddleWalk content without our prior written consent.

We aim to keep our service available at all times but do not guarantee uninterrupted access. WhatsApp, Stripe, and other third-party services may experience downtime outside our control. Routes are designed around public locations that may occasionally be closed for maintenance, events, or other reasons. We are not liable for any disruption caused by third-party services or location closures.

RiddleWalk may display public leaderboards showing player scores and completion times. By completing a walking puzzle, you consent to your chosen display name (or an anonymised identifier) and score appearing on our leaderboard. You can request removal at any time by contacting us.

We reserve the right to update these terms at any time. Changes will be posted on our website with the updated date. Continued use of the service after changes constitutes acceptance of the new terms.

These terms are governed by the laws of England and Wales. Any disputes shall be subject to the exclusive jurisdiction of the courts of England and Wales.

RiddleWalk is a trading name of Tandm Labs, operated by Ziyang Gong as a sole trader. We are the data controller responsible for your personal data.

• Email: hello@riddlewalk.com
• Website: riddlewalk.com

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We would appreciate the chance to address your concerns first, so please contact us in the first instance.

We collect and process the following categories of personal data:

We do not collect any Special Categories of Personal Data (race, ethnicity, religious beliefs, health, sexual orientation, political opinions, or trade union membership). We do not knowingly collect data from children under 18.

We collect data through three channels:

• Direct interactions: When you purchase a walking puzzle via Stripe, message us on WhatsApp during gameplay, or contact us by email.
• Automated technologies: When you visit our website, we may automatically collect technical data about your device using cookies and similar technologies.
• Third-party sources: We receive transaction confirmation from Stripe when you complete a payment.

Under UK GDPR, we rely on the following lawful bases:

We share data only with the following third-party service providers, who act as data processors on our behalf:

We do not sell your personal data. We do not share your data with any third party for their own marketing purposes.

Some of our service providers are based outside the UK. Where your data is transferred outside the UK, we ensure it is protected by appropriate safeguards, including the UK-US Data Bridge, Standard Contractual Clauses approved by the ICO, or transfers to countries with an adequacy decision from the UK government.

We have implemented appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS) for all data in transit, access controls limiting data to authorised personnel only, and secure API authentication for all third-party integrations. We will notify you and the ICO of any personal data breach where we are legally required to do so.

• Game session data (scores, answers, completion times): retained indefinitely for leaderboards, or until you request deletion.
• WhatsApp message content: retained for up to 12 months after your last session, then deleted.
• Transaction data: retained for 6 years for tax/accounting purposes as required by HMRC.
• Website technical data: retained for up to 12 months.

Under UK data protection law, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data where there is no good reason for us to continue processing it.
• Object — object to processing where we rely on legitimate interest.
• Restrict processing — ask us to suspend processing in certain circumstances.
• Data portability — request your data in a structured, machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time.

To exercise any of these rights, email us at hello@riddlewalk.com. We will respond within one month.

RiddleWalk operates through the official Meta WhatsApp Business Platform (Cloud API). When you interact with us on WhatsApp, your messages are processed by Meta in accordance with WhatsApp's own privacy policy. We receive and store the content of messages you send to our game number for the purpose of running the game.

We will only send you WhatsApp messages in connection with an active game session or in direct response to a message you have sent us. We will not send unsolicited marketing messages via WhatsApp without your prior consent.

Our website may use cookies and similar technologies to analyse site traffic and improve your experience. You can set your browser to refuse all or some cookies. If you disable cookies, some parts of our website may not function properly. We will update this section with specific cookie details as our website develops.

Our website or WhatsApp messages may include links to third-party websites (such as Google Maps for walking directions). We do not control these websites and are not responsible for their privacy practices.

We may update this privacy policy from time to time. Changes will be posted on this page with the updated date shown at the top.

If you have any questions about this privacy policy or wish to exercise any of your rights:

• Email: hello@riddlewalk.com
• Website: riddlewalk.com

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.