Trapped in the Web is operated by Coysh Digital Ltd. In this notice, "we", "our" and "us" refer to Coysh Digital Ltd, a company registered in England and Wales under company number 16868808. We trade as "Trapped in the Web".
We are the data controller responsible for your personal data, and we are registered with the Information Commissioner's Office under registration number ZC044853. This notice explains how we collect, use, store and protect that data when you use our website at trappedintheweb.com.
Last updated: 1st June 2026
We collect:
When you buy a room, our checkout is handled by Stripe, which collects your billing name, email, phone number and address to process the payment. Your order and purchase history are held in our store platform. We do not store full card or bank details; we only receive confirmation of payment and limited transaction information from Stripe.
You provide most of this data directly when you:
We may also receive limited data indirectly from Stripe (payment confirmation) and Meta/Facebook (advertising and analytics). We may also feature customer reviews and testimonials on our site, including reviews customers have posted publicly about us on Facebook.
| What we do | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Process your order, give you access to rooms and manage your account | To deliver the product you bought | Performance of a contract |
| Provide customer support and respond to enquiries | To answer you and resolve issues | Legitimate interests / contract |
| Send marketing emails about new rooms, offers and gifting | To keep you informed about our products | Consent, and (for existing customers) our legitimate interest in telling you about similar products |
| Detect and prevent fraud and abuse | To protect the business and customers | Legitimate interests / legal obligation |
| Measure and improve the site (first-party analytics) | To understand how the site is used | Legitimate interests |
| Target and measure our advertising | To reach the right audiences | Consent (advertising cookies) |
You can opt out of marketing at any time by clicking "unsubscribe" in any email or by emailing us at the address below.
Your data is stored within our website platform. Some service providers we use (for example payment, email and analytics providers) may process data outside the UK; where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
We keep your personal data for up to 7 years after your last purchase or interaction with us, after which it is deleted or anonymised. We may keep some records (for example transaction records) for longer where we are required to for legal, accounting or fraud-prevention reasons. You can ask us to delete your data sooner at any time (see your rights below).
We would like to send you information about new rooms, seasonal offers and gifting. Where we rely on your consent, you can withdraw it at any time. Where we rely on legitimate interests to email existing customers about similar products, you can object at any time. Every marketing email includes an unsubscribe link, and you can also opt out by emailing us at help@trappedintheweb.com.
Under UK GDPR you have the right to:
We will respond to any request within one month. To exercise any of these rights, email us at help@trappedintheweb.com. There is normally no charge.
Cookies are small text files placed on your device that collect standard internet log and visitor-behaviour information. We use:
You can also manage or refuse cookies through your browser settings, though some features may not work as a result. For more information, see allaboutcookies.org.
We work with selected third-party providers to run and improve the service, including Stripe (payments),Amazon Web Services (infrastructure and email delivery via Amazon SES), Google (Analytics and Search Console), Meta/Facebook (advertising and the Facebook Pixel), Microsoft (Clarity analytics) and Cloudflare (security and content delivery). These providers process data on our behalf or as independent controllers under their own privacy policies, and we encourage you to review them.
Our service is intended for a general audience and purchases should be made by someone aged 18 or over. We do not knowingly collect personal data from children under 13 without parental consent. If you believe a child has provided us with their data, please contact us and we will delete it.
We do not make any decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.
Our website may contain links to other sites. This policy applies only to our website, so if you follow a link elsewhere you should read that site's own privacy policy.
The Trapped in the Web business - including the website, customer accounts and customer database - was acquired by Coysh Digital Ltd on 31 May 2026 from Trapped in the Web Ltd (company number 12601279) as part of an asset purchase. If you registered or bought a room before that date, your personal data was transferred to Coysh Digital Ltd, which is now the sole data controller. We continue to process your data for the same purposes and in line with this notice; the way your data is handled has not materially changed. Trapped in the Web Ltd no longer holds or processes your data.
We keep this policy under regular review and publish any updates on this page.
If you have any questions about this policy, the data we hold about you, or you would like to exercise your rights, contact us at help@trappedintheweb.com.
If you are unhappy with how we have handled your data, you can contact the Information Commissioner's Office (ICO): https://ico.org.uk/make-a-comp...