Privacy Policy

Effective Date: April 20, 2025 · Last Updated: April 20, 2025

Pink Fete ("we," "us," or "our") is committed to protecting the privacy and personal data of all members and guests who use our platform. This Privacy Policy explains what information we collect, how we use it, and the strict controls we have in place to keep your data safe.

1. Information We Collect

We collect the following categories of personal information when you use our platform:

Account Information: Your name, email address, and member ID when you register or are invited to the platform.
Profile Information: Optional profile photo and bio that you choose to provide.
Event Participation: RSVPs, event attendance history, and photos associated with events you attend.
Payment Information: When purchasing a ticket, payment data is collected and processed securely through Stripe. We do not store your full card number, CVV, or raw payment credentials on our servers at any time.
Communications: Messages you send to administrators through our direct messaging feature.

2. Payment Data & Stripe — Identity Fraud Protection

All ticket purchases are processed through Stripe, a PCI-DSS Level 1 certified payment processor. Pink Fete uses Stripe's payment infrastructure exclusively for the following purpose:

Stripe payment data — including billing name, email, and card metadata — is used strictly for identity fraud prevention and transaction verification. This information is never used for marketing, profiling, or sold to any third party.

Specifically:

Payment data is processed end-to-end by Stripe using encrypted secure channels.
Pink Fete receives only a transaction confirmation and session ID — not your full card details.
Stripe's fraud detection tools may analyze behavioral and device signals to protect you from unauthorized charges.
Stripe's full privacy policy is available at stripe.com/privacy.

3. How We Use Your Information

We use your personal data only for the following purposes:

To verify your membership and grant access to the platform.
To process event RSVPs and ticket purchases.
To display your name on event attendee lists (visible to logged-in members only).
To facilitate direct communication between members and administrators.
To protect the integrity and security of the platform against fraud and unauthorized access.
To comply with applicable legal obligations.

We do not use your data for advertising, behavioral tracking, or sale to third-party marketers.

4. Who Has Access to Your Data

Access to personal data is strictly limited and controlled:

Internal Engineering Group (Website Admins): Only designated Website Admins have access to full member data, audit logs, and system records. This group is bound by internal confidentiality obligations.
Hosts (Event Admins): Event hosts can see the names and RSVP statuses of attendees for their own events only. They do not have access to payment data or other members' private information.
Members: Can see a first-name-only list of confirmed attendees on events they are also attending.
No external sharing: No personal data is shared with any third party outside our internal Engineering group, except as required by law or as strictly necessary for payment processing through Stripe.

5. Data Security

We take robust measures to protect your data:

All data is transmitted over encrypted HTTPS connections.
Access to the platform and administrative tools requires authenticated login with role-based permissions.
Photo uploads include watermarking linked to your member ID to deter unauthorized redistribution.
Audit logs record all significant administrative actions for accountability and security review.
Payment processing is fully delegated to Stripe, which maintains PCI-DSS Level 1 compliance.

6. Data Retention

We retain your personal information for as long as your membership is active or as needed to provide you services. If you would like your data deleted, please contact an administrator through the platform's messaging feature. We will process removal requests within 30 days.

Transaction records may be retained longer as required by applicable financial and legal regulations.

7. Your Rights

You have the right to:

Access the personal data we hold about you.
Correct any inaccurate information in your profile.
Request deletion of your personal data, subject to legal retention requirements.
Withdraw consent to any data processing where consent is the legal basis.

To exercise any of these rights, please contact your platform administrator via the direct message feature within the app.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

Questions about this policy? Contact your platform administrator through the member portal.