Pancakes & Booze Privacy Policy

We believe creativity should be shared — not your personal information. This Privacy Policy explains what we collect, why we collect it, and how we protect it — whether you're grabbing a ticket, signing up as an artist or vendor, visiting our website, or checking out our online marketplace.

We've written this to meet (and in some cases exceed) privacy laws in California and other U.S. states, the UK and Europe (GDPR), Canada (PIPEDA), Mexico, and key Asia-Pacific regions. That means you get the strictest standards, no matter where you live.

1. Information We Collect

We collect personal information when you:

• Attend our events – buying tickets, RSVPing, or checking in.
• Sign up or submit as an artist or vendor – completing online forms, submitting art, or joining our marketplace.
• Interact online – visiting pancakesandbooze.com, joining our mailing list, using our chatbot, or engaging with us on social media.
• Purchase from our marketplace – placing orders, creating accounts, or saving favorites.

This can include:

• Name, email address, phone number, mailing/billing address
• Payment information (processed securely via Eventbrite, Stripe, or PayPal — we never store your full card details)
• Social media handles or usernames
• Location data (if enabled on your device)
• IP address, browser type, and usage patterns via analytics and cookies

We do not knowingly collect information from anyone under 16 years old without verified parental consent.

2. How We Use Your Information

We use your data to:

• Process ticket sales, vendor/artist sign-ups, and purchases
• Send you event updates, announcements, and marketing (if you opt in)
• Improve our website, events, and online marketplace
• Measure and improve ad performance through analytics and pixels
• Meet legal, tax, and regulatory requirements

Our legal bases for processing include consent, contract performance, legitimate interest, and compliance with legal obligations.

3. Cookies, Pixels, and Tracking

We use:

• Google Analytics to understand website traffic and improve content
• Meta (Facebook/Instagram) Pixel for targeted and retargeted advertising
• Essential cookies to make the site function

Where required by law (e.g., UK/EU), we'll ask for your cookie consent before setting non-essential cookies. You can adjust your browser settings to block cookies anytime.

4. Third-Party Services

We work with trusted third-party providers to help run our events, website, and marketplace. These include:

• Eventbrite – ticket sales and attendee registration
• Stripe and PayPal – payment processing
• Google Analytics – website analytics
• Meta (Facebook/Instagram) Pixel – advertising and retargeting
• Mailgun/Sinch – sending event updates and marketing emails
• OpenPhone and Google Voice – phone/SMS communications
• ManyChat – automated chatbot messaging
• Squarespace – (primary hosting & data storage)
• Cloudways – (partial site hosting & form submissions)

We may also use other service providers for hosting, customer support, marketing, and operational needs. These providers are only given the data necessary to perform their services and are contractually required to protect it.

5. Your Privacy Rights

Depending on where you live, you may have the right to:

• Request a copy of your personal data
• Correct or update your data
• Delete your data
• Opt out of marketing communications
• Opt out of targeted advertising or data "sales" (as defined by applicable laws)
• Withdraw consent where we process your data based on consent
• Request data portability (a copy in a portable format)

To exercise your rights, email privacy@pancakesandbooze.com. We'll respond within the timeframe required by your local law.

6. International Data Transfers

If you live outside the US, your data may be transferred to and stored in the United States. When we do this, we follow legal safeguards like Standard Contractual Clauses (GDPR), and where required (e.g., China, Mexico), obtain your consent for cross-border transfers.

7. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission over the internet is 100% secure, so while we work hard to protect your data, we can't guarantee absolute security.

8. Data Retention

We keep your personal information only as long as necessary for the purposes outlined in this policy, unless a longer period is required by law.

9. Governing Law

This policy and any disputes related to it are governed by the laws of the State of California, USA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" above will always show when it was last revised. Updates will be posted here on our website — we encourage you to check periodically.

United States – State-Specific Privacy Notices

In addition to the rights above, residents of California, Virginia, Colorado, Connecticut, Utah, Texas, and Nevada have specific rights under state law:

• Right to opt out of targeted advertising and the sale or sharing of personal data
• Right to request corrections to inaccurate personal data
• Right to limit use of sensitive personal information (California)

We honor universal opt-out mechanisms where required.

Canada

We comply with PIPEDA and applicable provincial laws. You have the right to:

• Access and correct your personal information
• Withdraw consent for marketing
• Be informed if your information is involved in a security breach

Mexico

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP):

• You may access, rectify, cancel, or oppose (ARCO rights) the processing of your data by contacting privacy@pancakesandbooze.com.
• Consent will be obtained before transferring your data to third parties, except where allowed by law.

Aviso de Privacidad en Español:

"Usted tiene derecho a acceder, rectificar y cancelar sus datos personales, oponerse al tratamiento de los mismos o revocar el consentimiento que nos haya otorgado. Para ejercer estos derechos, envíe un correo electrónico a privacy@pancakesandbooze.com."

UK & European Economic Area

We comply with the General Data Protection Regulation (GDPR). Our legal bases for processing are: consent, contract performance, legitimate interest, and legal obligation. You have the right to lodge a complaint with your local supervisory authority.

Asia-Pacific

• Singapore (PDPA): We will obtain your consent before collecting, using, or disclosing your personal data.
• Japan (APPI): We will notify you of the purpose of use at or before the time of collection.
• Australia Privacy Act: You may request access to or correction of your personal data at any time.
• China (PIPL): Your consent is required for cross-border data transfers; we will store your data locally when required by law.