Privacy Policy

1. Overview

This Privacy Policy explains how Just Smash That (“Just Smash That,” “we,” “us,” or “our”), operator of the rage room, axe throwing, and VR gaming locations in Orange Park and Daytona Beach, Florida, and the website located at justsmashthat.com (the “Site”), collects, uses, discloses, and safeguards information when you visit the Site, book an activity, contact support, or otherwise interact with us. By using the Site or booking with us, you acknowledge the practices described in this Policy.

2. Information We Collect

a. Information you provide directly

• Booking & contact details: first name, last name, email address, and phone number, collected when you book an activity or gift certificate.
• Gift purchases: recipient name, recipient email address, and any personal message you include with a gift.
• Payment information: when you pay online, your card details are entered directly into a secure, encrypted form hosted by our payment processor, Stripe. We do not receive or store your full card number, expiration date, or CVV on our own servers — see Section 5 (“Payment Processing”) below.
• Support & communications: any information you provide when you contact us by phone, email, or through the Site’s support widget.

b. Information collected automatically

• Device & usage data: IP address, browser and operating system, device type, pages viewed, referring/traffic source, and general (city/state-level) location inferred from your IP address.
• Cookies & similar technologies: we use a first-party cookie to recognize repeat visits for analytics purposes, and, where applicable, cookies set by our advertising and analytics partners. We also use your browser’s local storage to remember your shopping cart, selected location, and certain on-site preferences (such as dismissing a banner). See Section 4 (“Cookies & Tracking Technologies”) below.

3. How We Use Your Information

• Process and fulfill bookings, gift certificate purchases, and payments;
• Communicate with you about your reservation, including confirmations and support requests;
• Operate, maintain, secure, and improve the Site and our services;
• Measure and improve the effectiveness of our advertising, including through conversion tracking with our advertising partners (Section 4);
• Detect, investigate, and prevent fraud, abuse, and security incidents; and
• Comply with legal obligations and enforce our Terms & Conditions.

4. Cookies & Tracking Technologies

We and our third-party partners use cookies, pixels, and local storage for the following purposes:

• Essential: a first-party visitor-identifier cookie and, if you log in as staff, a secure session cookie required to keep you signed in.
• Functional: browser local storage used to remember your cart contents, selected location, and dismissed banners/offers. This information stays on your device and is not linked to your identity.
• Analytics & advertising: Google Analytics / Google Ads, the Meta (Facebook) Pixel, and the TikTok Pixel/Events API are used to measure Site traffic and the performance of our ad campaigns, and to report conversions (such as completed bookings) back to those platforms. Where we share information with these platforms for matching purposes (such as your email or phone number), it is cryptographically hashed before transmission.

You can control cookies through your browser settings, and you may opt out of interest-based advertising through your ad platform’s preferences (e.g., Google Ads Settings, Meta Ad Preferences, or TikTok Ad Preferences) or industry tools such as the Digital Advertising Alliance opt-out page. Blocking cookies may affect the functionality of the Site, such as your ability to keep items in your cart.

5. Payment Processing

Online payments are processed by Stripe, Inc.Card details are entered directly into Stripe’s secure hosted fields and are transmitted directly to Stripe; we do not store your full card number, expiration date, or security code. We retain only the last four digits of your card as a reference on your order record. Your booking and order record itself is managed through our reservation platform, Xola, which receives your name, email, phone number, and order details in order to process and fulfill your reservation. Stripe’s and Xola’s handling of your payment information is governed by their own privacy policies.

6. How We Share Information

We share information with the following categories of recipients, only as needed to operate our business:

• Service providers: Xola (booking & reservation management), Stripe (payment processing), and Supabase (secure database hosting and staff authentication) each process information on our behalf.
• Advertising & analytics partners: Google, Meta (Facebook), TikTok, and IP geolocation providers, as described in Section 4.
• Legal & safety: we may disclose information where required by law, legal process, or to protect the rights, property, or safety of Just Smash That, our guests, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

We do not sell your personal information.

7. Data Retention

We retain booking and contact information for as long as reasonably necessary to fulfill the purposes described in this Policy, including recordkeeping for accounting, tax, legal, and customer-service purposes, after which it is deleted or de-identified in accordance with our internal retention practices and applicable law.

8. Your Choices & Rights

Depending on your location, you may have rights to access, correct, or request deletion of your personal information, or to object to or restrict certain processing. To make a request, contact us using the details in Section 12. We will respond in accordance with applicable law. You may also decline to provide certain information, though this may prevent us from processing your booking.

9. Children's Privacy

The Site and our online booking flow are not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site. Some of our activities carry an age requirement for participants — see our Terms & Conditions for details. If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

10. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect the information we hold from unauthorized access, disclosure, alteration, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted to this page, with the “Last updated” date revised accordingly. Your continued use of the Site after a change becomes effective constitutes acceptance of the revised Policy.

12. Contact Us

Questions about this Privacy Policy or your information can be directed to support@justsmashthat.com, or by mail to either location below:

• Just Smash That — Orange Park: 1101 Blanding Blvd #101, Orange Park, FL 32065
• Just Smash That — Daytona Beach: 607 N Atlantic Ave, Daytona Beach, FL 32118