Privacy Policy

1. Information We Collect

We may collect the following categories of personal information:

a. Information You Provide Directly

• Full name, email address, phone number, and mailing address
• Payment and billing information (processed by our third-party payment processor; see Section 4)
• T-shirt size and dietary preferences (where applicable)
• Professional background, company affiliation, and areas of interest
• Volunteer availability and preferences
• Instructor or vendor application details
• Any other information you voluntarily submit through forms, surveys, or correspondence

b. Information Collected Automatically

• Device type, browser type, operating system, and IP address
• Pages visited, time spent on pages, and navigation patterns
• Referring URL and search terms used to reach the Site
• Cookies and similar tracking technologies (see Section 6)

2. How We Use Your Information

We use the information collected for the following purposes:

• To process event registrations, ticket purchases, and related transactions
• To facilitate check-in, badge printing, and on-site attendee services
• To communicate event confirmations, schedule updates, reminders, and logistical information
• To manage vendor booth assignments, contracts, and logistics
• To coordinate volunteer scheduling and assignments
• To send push notifications related to event sessions and announcements (with your opt-in consent)
• To administer raffles, contests, and promotional activities
• To communicate about future events, promotions, and related offerings (with your consent, where required by law)
• To improve our website, event experience, and services through analytics and feedback
• To comply with legal obligations, enforce our terms, and protect our rights

3. Legal Basis for Processing

We process your personal information on the following legal bases: (a) performance of a contract (e.g., processing your event registration); (b) your consent (e.g., marketing communications and push notifications); (c) our legitimate interests (e.g., improving our services, fraud prevention); and (d) compliance with legal obligations.

4. Payment Processing

All payment transactions are processed by Stripe, Inc., a PCI DSS Level 1 certified payment processor. We do not store, process, or have access to your full credit card number, CVV, or other sensitive payment credentials on our servers. Your payment information is transmitted directly to Stripe via encrypted connections. Stripe's collection and use of your information is governed by Stripe's Privacy Policy.

5. Disclosure of Information

We do not sell, rent, or trade your personal information. We may disclose your information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf (e.g., payment processing, email delivery, hosting, analytics). These providers are contractually obligated to use your information solely for the purpose of providing services to us and to maintain appropriate security measures.
• Event Vendors: We may share limited information (e.g., your name and registration details) with event vendors solely for the purpose of fulfilling build class materials, meal orders, or other purchased services.
• Legal Requirements: We may disclose information when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Cookies and Tracking Technologies

The Site uses cookies and similar technologies for the following purposes:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics Cookies:Used to understand how visitors interact with the Site in aggregate, helping us improve functionality and content. These load only if you choose “Accept” on our cookie banner; declining keeps them off. You may also block them through your browser settings.

We do not use cookies for targeted advertising, we do not combine what you do on the Site with data obtained from other companies, and we do not sell or share your information with data brokers or advertising networks. Most web browsers allow you to manage cookie preferences through browser settings.

Our iOS app.The Florida MegaMini app uses only essential cookies (your sign-in session and bot protection) plus your push-notification registration. It runs no analytics and shows no cookie banner. Because we collect no data used to track you across other companies' apps or websites, the app does not request permission through Apple's App Tracking Transparency framework.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Registration and transaction records are retained for a minimum of three (3) years following the applicable event. You may request deletion of your data at any time, subject to our legal retention obligations.

8. Data Security

We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), secure authentication mechanisms, and access controls. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate or incomplete data
• The right to request deletion of your personal data
• The right to withdraw consent for marketing communications at any time
• The right to opt out of push notifications through your device settings
• The right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at info@floridamegamini.com. We will respond to your request within thirty (30) days.

10. California Residents (CCPA / CPRA)

If you reside in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), provides additional rights regarding your personal information.

Categories of personal information we collect

In the preceding twelve (12) months, we have collected the following categories of personal information described in Cal. Civ. Code § 1798.140: identifiers (name, email, postal address, IP address, account credentials); commercial information (registration and purchase records); internet or other electronic network activity (pages viewed, referring URL); geolocation data at the city/region level inferred from IP; professional or employment information voluntarily provided by vendors and instructors; and inferences drawn from the foregoing (e.g., session interest based on registrations). We do not knowingly collect sensitive personal information beyond authentication credentials and any dietary or accessibility information you choose to share.

Your CCPA rights

• Right to know the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the categories of third parties with whom we share it.
• Right to delete personal information we have collected, subject to permitted exceptions (e.g., to complete a transaction, comply with a legal obligation).
• Right to correct inaccurate personal information we maintain about you.
• Right to opt out of sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising.
• Right to limit use of sensitive personal information. We use authentication credentials only to authenticate you; we do not use sensitive personal information to infer characteristics about you.
• Right to non-discrimination for exercising any of the above.

To submit a verifiable consumer request, email privacy@floridamegamini.com (or info@floridamegamini.com). We will verify your identity using the information already on file and respond within forty-five (45) days, with one extension of up to forty-five (45) additional days where reasonably necessary. You may designate an authorized agent to make a request on your behalf in accordance with the CCPA.

11. EU and UK Residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, this section explains your rights under the EU General Data Protection Regulation and the UK GDPR.

Lawful basis for processing

We process your personal data on one or more of the following lawful bases under Article 6 GDPR: (a) performance of a contract with you, including processing your registration, fulfilling ticket and merchandise orders, and providing on-site services; (b) consent, for marketing communications, push notifications, and any optional data you choose to share, which you may withdraw at any time without affecting the lawfulness of prior processing; (c) legitimate interests, including operating and securing the Site, preventing fraud, improving our services, and communicating with attendees about their existing registrations; and (d) compliance with legal obligations (tax, accounting, lawful requests).

Your data subject rights

• Access the personal data we hold about you and obtain a copy.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data (“right to be forgotten”), where applicable.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests, including for direct marketing.
• Data portability: receive your data in a structured, commonly used, machine-readable format and transmit it to another controller where technically feasible.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority in the EU or UK member state of your habitual residence, place of work, or place of the alleged infringement.

To exercise these rights, contact our data protection contact at privacy@floridamegamini.com. We respond within thirty (30) days and may extend by an additional sixty (60) days where reasonably necessary, in which case we will inform you of the reason.

Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses (and the UK Addendum, where applicable) with our service providers.

12. Children's Privacy

Our services are not directed to individuals under the age of thirteen (13). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

13. Third-Party Links

The Site may contain links to third-party websites, including vendor websites, sponsor pages, and social media platforms. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time by posting the revised version on the Site. The “Effective Date” at the top of this page indicates the date of the most recent revision. Your continued use of the Site or our services following any changes constitutes your acceptance of the updated policy.

15. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of laws principles.

16. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact: