1. Information We Collect
1.1 Information You Provide
When you create an account, register for events, or interact with our platform, we may collect:
- Account information: name, email address, password (hashed), profile picture, and optional bio.
- Organizer information: organization name, description, logo, social media links, and contact details.
- Event registration data: name, email, ticket selections, and any custom form fields required by the organizer.
- Payment information: processed securely by our third-party payment processor (Stripe). We do not store full payment card numbers on our servers.
- Communications: messages you send through the platform, support requests, and feedback.
1.2 Information Collected Automatically
When you access our platform, we automatically collect:
- Device and browser information: IP address, browser type, operating system, device identifiers, and screen resolution.
- Usage data: pages visited, features used, click patterns, session duration, and referral sources.
- Location data: approximate location derived from your IP address (we do not collect precise GPS location).
1.3 Information from Third Parties
We may receive information from:
- Authentication providers: if you sign in using Google or other OAuth providers, we receive your name, email, and profile picture.
- Event organizers: who may share attendee lists or registration data with the platform.
2. How We Use Your Information
We use your personal data to:
- Provide, maintain, and improve the Clubedge Events platform.
- Process event registrations and manage ticketing.
- Send transactional communications (registration confirmations, event updates, password resets).
- Send marketing communications (with your consent), including event recommendations and platform updates.
- Detect, investigate, and prevent fraudulent or unauthorized activity.
- Generate aggregated, anonymized analytics to improve our services.
- Comply with legal obligations and enforce our Terms of Service.
3. Legal Basis for Processing
Under the GDPR and similar regulations, we process your data based on:
- Contract performance: processing necessary to provide our services (account management, event registration).
- Legitimate interests: analytics, fraud prevention, and platform improvement.
- Consent: marketing communications, non-essential cookies, and optional data collection.
- Legal obligation: tax records, regulatory compliance, and law enforcement requests.
4. Data Sharing & Third Parties
We share your data only in these circumstances:
- Event organizers: when you register for an event, the organizer receives your registration details to manage the event.
- Service providers: trusted vendors who help operate our platform (hosting by Vercel, database by Supabase, payments by Stripe, email delivery services).
- Legal requirements: when required by law, court order, or government request.
- Business transfers: in connection with a merger, acquisition, or sale of assets.
We never sell your personal data to third parties for advertising purposes.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Specifically:
- Account data: retained until you delete your account, then permanently removed within 30 days (except as required by law).
- Event registration data: retained for 3 years after the event date for record-keeping and dispute resolution.
- Usage logs: retained for up to 12 months, then anonymized.
- Financial records: retained for 7 years as required by tax regulations.
6. Your Rights
Depending on your jurisdiction (GDPR, CCPA, etc.), you have the right to:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete personal data.
- Erasure: request deletion of your personal data ("right to be forgotten").
- Portability: receive your data in a structured, machine-readable format.
- Restriction: limit processing of your personal data in certain circumstances.
- Objection: object to processing based on legitimate interests or direct marketing.
- Withdraw consent: at any time, where processing is based on consent.
To exercise these rights, contact us at privacy@clubedge.live. We will respond within 30 days.
8. International Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission.
- Data processing agreements with all sub-processors requiring equivalent levels of data protection.
9. Children's Privacy
Clubedge Events is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the platform or sending you an email. The "Last updated" date at the top of this page indicates when the policy was last revised.
11. Contact Us
If you have questions about this Privacy Policy or your personal data, reach out using the contact details below.
Get in Touch
We're here to help with any questions