Privacy policy
What the desk keeps.

P.A.T.H. Investigators is a paranormal investigation outfit and event operator. We run expeditions, private investigations and public events, and we sell field equipment and merchandise through this site. In this policy, “we” and “the desk” mean P.A.T.H. Investigators; “you” means anyone visiting the site, filing a request, booking an expedition or holding an account.

For any question about this policy or your records, write to the desk through the contact page.

We only collect what a booking, an order or an account needs:

• Booking requests — your name, email, phone if you give one, preferred dates, party size and any notes about your group.
• Accounts — your name and email, a password handled by our authentication provider, and your date of birth where we need it to confirm you meet the 18+ requirement.
• Payments — card details are entered on our payment provider’s checkout page, never on ours. We receive confirmation that a payment succeeded, the amount, the currency and an order reference.
• Merchandise orders — the items you bought. Your name and delivery address are collected at checkout by our print and fulfilment partner.
• Messages — anything you send through the contact form, by email or by phone.
• Public posts — reviews and guest logs you choose to publish under a display name.
• Technical data — the usual server records: the address you connect from, your browser and device type, and which pages you opened.

Card payments are processed by Base44 Payments. Our printing partner, Printful, produces and ships merchandise and receives only the order details and delivery address needed to get it to you. Both act as independent processors under their own privacy terms. We do not see, store or have access to your full card number at any point.

• To answer an enquiry and hold a place on an expedition.
• To confirm you are eligible for an overnight and to contact you before arrival.
• To take payment, issue refunds and keep the financial records the law requires.
• To run the evening safely — guest lists, next of kin where you supply it, incident logs.
• To produce and send merchandise orders.
• To publish reviews and guest logs you have chosen to submit.
• To keep the site working, spot abuse and understand which pages are used.
• To meet legal, tax and insurance obligations.

We do not sell your personal information, and we do not send marketing to an address that has not asked for it.

Expedition nights are recorded: static cameras, audio recorders and guest-shot photographs. Capture made by our crew belongs to the case file and may be published, credited or anonymised, on this site and in our programme material. If you would rather not appear in published footage, tell the lead investigator before the session begins and we will keep you out of frame.

Access at the desk is limited to the people who need it. Outside the outfit, your details reach only the services that carry out a step you asked for — payment processing, print and shipping, email delivery, hosting, and analytics — each bound to use the data only for that purpose. We may also disclose records where the law requires it, or where it is needed to protect someone’s safety.

The site keeps a small amount of information in your browser: the session that keeps you signed in, your tab and page preferences, and analytics that count visits without profiling you. You can clear it from your browser settings at any time; signing out clears the session.

• Enquiries that never became a booking — 24 months.
• Booking and payment records — seven years, for tax and insurance.
• Account details — until you delete the account.
• Contact messages and reviews — until the matter is closed, or until you ask us to remove them.
• Server logs — a short rolling window, then discarded.

You can ask to see the records we hold about you, correct anything wrong, or have your account and its data deleted. Signed-in members can delete their account from the member page; anything else, ask the desk and we will action it. Where you have given consent — for a guest log, a review or a photograph — you can withdraw it at any time.

If you are writing from a state with its own privacy statute, you also have the right to know what we hold, to a portable copy, and to be treated the same whether or not you exercise those rights. We never charge for a request and we answer within 30 days.

Data travels encrypted, passwords are stored hashed by our authentication provider, and payment details never reach our servers. Access to booking and member records is limited to staff accounts with two-factor sign-in where available. No system is perfectly secure, so if you believe a record of yours has been exposed, tell the desk immediately.

Overnights are 18+ and we do not knowingly collect personal information from anyone under 18. If you believe a minor has sent us details, contact the desk and we will delete the record.

Our systems and those of our processors are operated in the United States. If you contact us from elsewhere, your details will be transferred to and handled in the US under this policy.

When our practice changes we revise this page and move the date at the top. Material changes that affect existing bookings are also sent to the email address on the booking.