Privacy Policy

This Privacy Policy explains how Haven Wine & Beer Fest (“Festival,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information through havenwinebeerfest.com, online ticket sales, and related communications. It does not govern the independent practices of participating vendors, sponsors, social-media platforms, or other websites that we do not control.

Depending on how you interact with us, we may collect:

• Ticket and transaction information: your name, email address, billing or contact details, ticket quantity, transaction identifiers, payment status, and related purchase information. Payment-card details are collected directly by Stripe; we do not directly receive or store your full card number.
• Communications: your email address and the contents of messages you send when you contact us by email or through a linked social-media service.
• Technical information: IP address, browser and device type, operating system, requested pages, referring page, and access date and time. Our hosting and security providers may collect this information in routine server logs.
• Authorized administrator information: for Festival personnel who use the private content-management area, we process login email, authentication information, and session data.

The public website does not currently use advertising cookies or analytics cookies. The private administrator area uses strictly necessary, HTTP-only authentication cookies to keep authorized personnel signed in and protect the content-management system. An administrator refresh-session cookie may remain for up to 30 days unless the administrator signs out or clears browser data.

The Event Info page includes an embedded Google Map. When you load that map, Google may receive technical information and use cookies or similar technologies under its own privacy terms. You can avoid that collection by not loading the Event Info page.

We use personal information to:

• process ticket purchases, provide confirmations, and administer admission;
• respond to questions, requests, disputes, and support needs;
• operate, maintain, secure, and improve the website and Festival;
• detect fraud, abuse, security incidents, and violations of our terms;
• maintain business, tax, and transaction records; and
• comply with law and protect the rights, safety, and property of guests and others.

We do not currently use information collected through the website to send marketing email or perform targeted advertising.

We may disclose information to:

• Service providers that support ticket payment, hosting, database, authentication, website security, email, and technical operations. These include Stripe for payment processing and Supabase for database and administrator authentication services.
• Festival operations partners when reasonably necessary to validate tickets, operate the event, provide guest support, or protect safety.
• Authorities or other parties when we believe disclosure is required by law, legal process, or a valid government request, or is reasonably necessary to prevent harm, fraud, abuse, or a security incident.
• A successor organization in connection with a merger, reorganization, financing, sale of assets, or similar organizational transaction, subject to applicable law.

We do not sell personal information for money or share it for cross-context behavioral advertising. We do not permit service providers to use Festival information for their own purposes except as allowed by their terms, your settings, and applicable law.

Stripe, Supabase, Google Maps, and linked social-media or third-party websites process information under their own privacy policies. A link to another site does not mean we control or endorse its privacy practices. We encourage you to review those policies before providing information. In particular, Stripe acts as an independent provider of its hosted checkout and payment services.

We retain personal information only as long as reasonably necessary for the purposes described above, including ticket administration, support, security, legal compliance, dispute resolution, and tax or accounting requirements. Retention periods vary by the type of record and applicable obligations. We then delete, anonymize, or securely dispose of information when reasonably practicable. Third-party providers apply their own retention schedules to information they control.

You may ask to access, correct, or delete personal information we maintain about you, or ask a question about our practices, by emailing us. We may need to verify your identity before responding. We may retain information when reasonably necessary to complete a transaction, comply with law, resolve disputes, enforce agreements, or protect security and legal rights.

Depending on where you live, applicable law may provide additional rights, including the right to appeal a denied request or complain to a regulator. We will not discriminate against you for exercising a privacy right. Because we do not currently sell personal information or use it for targeted advertising, there is no sale or targeted-advertising opt-out required for the website's current practices.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. For example, administrator session cookies are marked HTTP-only and secure in production, and payment-card details are handled through Stripe's hosted checkout. No internet transmission or storage system is completely secure, so we cannot guarantee absolute security.

If you believe you found a vulnerability in this website, please review our security reporting guidance before contacting us.

The website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information online from children under 13. If you believe a child has provided us personal information, contact us so we can review and delete it as appropriate. Guests must be 21 or older to taste, possess, or purchase alcohol at the Festival.

We may revise this Privacy Policy as our services or legal obligations change. We will post the revised version here and update the effective date. If changes are material, we may provide additional notice where appropriate or required by law.

To submit a privacy request or ask a question about this policy, email info@havenwinebeerfest.com. Please include enough detail for us to understand and respond to your request.