Privacy Policy

Effective Date: April 29, 2026

 

1. Scope and Overview

This Privacy Policy describes how Authentic Craft, LLC (“Authentic Craft,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards personal information when you visit or interact with any of our websites (including authenticcraftentertainment.com, consulting.authenticcraftentertainment.com, and InTheMix at in‑the‑mix‑alpha.vercel.app), mobile applications (collectively, the “Services”), participate in Authentic Craft events, request tickets, or otherwise communicate with us.

This policy reflects the evolving U.S. privacy landscape—twenty states now have comprehensive privacy laws and several new laws took effect in 2026. It also accounts for expanded data broker registration and consumer health‑data protections and new age‑appropriate design codes restricting the sale and use of minors’ personal data.

By using our Services, you consent to the practices described below. If you do not agree with these practices, please do not use the Services.

2. Information We Collect

We collect information from a variety of sources. The specific types of information we collect depend on how you interact with us.

2.1 Information You Provide

• Contact and registration information – name, email address, postal address, phone number, date of birth, social media handles, and other information you provide when you create an account, subscribe to mailing lists, register for an event, request a song, or contact us.

• Demographic and preference information – when you fill out surveys or provide preferences for personalized experiences.

• Content and communications – messages you send us, content you upload (such as song requests, reviews, or comments), and any other information you choose to provide.

• Payment and ticketing information – details required to process purchases (e.g., payment card token, billing address) when purchasing event tickets, merchandise, or other services. We rely on third‑party payment processors and do not store full payment card numbers.

• Volunteer or partner information – if you apply to volunteer or partner with us, we may collect information about your experience, preferences, and affiliation.

2.2 Information We Collect Automatically

When you access the Services, we automatically collect certain information using cookies and other tracking technologies. This includes:

• Device and usage data – IP address, device identifier, browser type, operating system, device settings, language, and pages visited; the time and date of requests; referral URL; search terms; and other statistics.

• Location information – we may infer your general location (e.g., city or state) from your IP address or collect precise geolocation if you allow your device to share it. New state privacy laws emphasize that precise geolocation and minors’ data are sensitive and require heightened protections; we only collect precise geolocation when necessary for providing a feature (such as event discovery) and with your consent.

• Cookies and similar technologies – we use cookies, pixels, web beacons and local storage to remember your preferences, keep you logged in, understand usage of the Services, and personalize content. Emerging litigation has highlighted that third‑party analytics and social‑media pixels may implicate privacy laws; we periodically review our cookie practices and update our cookie banner accordingly.

2.3 Information from Other Sources

We may obtain information about you from:

• Social networks if you choose to register or log in using a third‑party service (e.g., Apple, Google, or Facebook). These services may share basic profile information with us.

• Event partners, venues, ticketing platforms and payment processors for the purpose of fulfilling orders, confirming attendance, or providing support.

• Marketing and advertising partners who provide us with analytics or help deliver targeted advertising.

• Publicly available sources and data aggregators.

​

3. How We Use Information

We use your information for the following purposes:

• Provide Services – deliver the websites and apps you request, process transactions, allow you to request songs, discover DJs, attend events, and use consulting services.

• Personalization and recommendations – tailor content, offers, and features to your interests; develop new features; and analyze usage to improve our Services.

• Communications – send transactional messages (e.g., confirmations, receipts, event updates) and marketing communications. You can opt out of marketing emails at any time by using the unsubscribe link.

• Research and analytics – perform analytics, surveys, and research to better understand our community and improve experiences.

• Security and enforcement – protect against fraud, unauthorized transactions, and misuse; enforce our Terms & Conditions; and ensure the safety of our staff, performers, and users.

• Legal compliance – comply with applicable laws and regulations (including new state privacy requirements) and respond to lawful requests or orders.

• AI‑assisted services – we may use artificial intelligence tools to assist with data analysis or content generation. Our use of AI is subject to this Privacy Policy; we do not use AI to make decisions that have legal or similarly significant effects without human involvement. We are mindful that AI tools can implicate privacy controls and are subject to laws such as the CCPA’s automated decision‑making rules. We evaluate AI providers’ data‑use policies and ensure that they do not retain or use your personal information for training purposes without our direction.

We do not “sell” personal information as defined under the California Consumer Privacy Act (as amended by the CPRA) and applicable state laws.

​

4. Legal Bases for Processing (Where Applicable)

If you reside in the European Economic Area, the United Kingdom or another jurisdiction that requires a legal basis, we process your personal information based on: (1) Contract (to provide you with Services); (2) Consent (for marketing communications, certain cookies or precise geolocation); (3) Legitimate interests (understanding usage and ensuring security); (4) Compliance with legal obligations; or (5) Protection of vital interests.

​

5. How We Share Information

We share your information only as necessary and in accordance with this policy:

• Service providers – we engage third‑party vendors (hosting providers, analytics services, email providers, payment processors, ticketing vendors, event venues, marketing partners, and consultants) to perform functions on our behalf. They are contractually obligated to protect your information and may use it only to provide services to us.

• Event partners and venues – if you register for an event, we may share your name and contact details with venue operators or partners for admission and safety purposes. We may also provide limited attendee lists to sponsors or performers, as permitted by law. Our event‑related data practices align with our Event Terms & Conditions, including provisions for assumption of risk and media use.

• Affiliates and business transfers – we may share with subsidiaries or affiliates. If Authentic Craft is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

• Legal and regulatory requirements – to comply with a subpoena, court order or similar legal process, or to protect our rights and property.

• With your consent – when you instruct us to share information or direct us to integrate with a third‑party service.

• Aggregated or de‑identified information – we may use and share information that has been aggregated or de‑identified so that it cannot reasonably identify you, including for marketing or research purposes.

We do not allow event sponsors to independently sell or use your personal information beyond the purposes described here.

6. Cookies and Tracking Choices

You can manage cookies through your browser or device settings and via our cookie banner. Depending on your location, you may have the right to opt out of targeted advertising and the sale or sharing of personal information. We honour Global Privacy Control signals where required.

7. Data Retention

We keep personal information for as long as reasonably necessary to fulfil the purposes described in this policy, resolve disputes, enforce our agreements, and comply with legal obligations. When data is no longer required, we will anonymize or delete it in accordance with our data retention schedules.

8. Your Privacy Rights and Choices

Depending on where you live, you may have the following rights:

• Access and portability – request a copy of the personal information we hold about you.

• Correction – request that we correct inaccurate information.

• Deletion – request that we delete your personal information, subject to certain exceptions (such as completing a transaction, detecting security incidents, or complying with law). New privacy laws require us to process deletion and opt‑out requests within specified periods.

• Opt‑out of targeted advertising and profiling – object to our use of your data for targeted advertising or automated decision‑making.

• Limit use of sensitive personal information – limit our use and disclosure of sensitive data such as precise geolocation, health data, or minors’ data.

• Non‑discrimination – exercise your rights without discrimination.

To exercise these rights, please email team@authenticcraftentertainment.com or mail us at the address below. We may need to verify your identity before responding. Where permitted by law, you may also appoint an authorized agent.

​​

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). These rights give you more control over how businesses collect and use your personal information. In summary:

• Right to know – You may request information about the categories of personal information we collect, the purposes for which it is collected, the sources from which it is collected, and the categories of third parties with whom it is shared, as well as request specific pieces of personal information we have collected.

• Right to deletion – With limited exceptions, you may request that we delete personal information we have collected about you.

• Right to correct – You may request that we correct inaccurate personal information.

• Right to opt out of the sale or sharing of personal information – You may direct us not to sell or share your personal information for cross‑context behavioural advertising. Authentic Craft does not sell personal information, but we honour opt‑out requests and provide a “Do Not Sell or Share My Personal Information” link when required.

• Right to limit use of sensitive personal information – You may limit our use and disclosure of sensitive personal information (such as precise geolocation, racial or ethnic origin, or data about minors) to purposes necessary to provide our Services.

• Right to non‑discrimination – You may exercise your CCPA/CPRA rights without being discriminated against for doing so.

• Right to opt out of automated decision‑making – You may opt out of the use of automated decision‑making technology, including profiling, when such decisions have legal or similarly significant effects.

You may exercise these California‑specific rights by emailing team@authenticcraftentertainment.com or writing to us at the address listed below. We will respond in accordance with California law and may need to verify your identity or authority. Authorized agents may submit requests on your behalf by providing proof of authorization.

In addition, California’s “Shine the Light” law (Civil Code § 1798.83) allows California customers to request, once per calendar year, a list of categories of personal information disclosed to third parties for those parties’ direct marketing purposes and the names of such third parties. To make a Shine the Light request, please email or write to us with “California Shine the Light Request” in the subject line. Businesses that provide opt‑out or opt‑in mechanisms for sharing may satisfy the law by directing you to those policies.

Although Authentic Craft is not a data broker, we support California’s Delete Act and its Delete Request and Opt‑out Platform (DROP), which permit consumers to submit one deletion or opt‑out request to all registered data brokers. Data brokers must check for new requests every 45 days and must treat unverified requests as opt‑outs. If we ever engage in data‑broker activities, we will register as required and honour DROP requests.

Finally, we comply with the California Age‑Appropriate Design Code Act (AADC). This law requires online services likely to be accessed by children under 18 to implement high‑privacy default settings, provide age‑appropriate notices, and offer clear signals when monitoring or tracking minors. Authentic Craft does not target children, but we implement high‑privacy defaults and age‑assurance mechanisms where appropriate and will notify you if our practices change.

​

9. Security

We implement reasonable administrative, technical and physical safeguards, including encryption of information in transit (e.g., SSL/TLS) and access controls. While we strive to protect your information, no system is completely secure; you acknowledge the inherent risks of internet communications.

​

10. International Data Transfers

Our Services are hosted in the United States. If you access our Services from outside the U.S., your information may be transferred to, stored, and processed in the United States or other jurisdictions. Recent federal rules restrict transfers of certain sensitive data to foreign adversary countries and impose contractual requirements. When we transfer personal information internationally, we use appropriate safeguards (such as standard contractual clauses) and comply with applicable laws.

​

11. Children’s Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal information from children. If we learn that a child under 13 has provided personal information, we will delete it. Users between 13 and 18 should obtain parental permission before using the Services. We also comply with age‑appropriate design codes that restrict the sale and use of minors’ personal data and may implement age‑assurance mechanisms as required by law.

​

12. AI and Automated Decision‑Making

We may use AI or automated systems to support internal analyses, content moderation, or recommend music and events. We will provide notice and the ability to opt out of any automated decision that produces legal or similarly significant effects on you. AI tools will be subject to contractual terms ensuring that data is not used for training without authorization.

​

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, legal requirements, or for other reasons. When updates are significant, we will post a notice on our Services or send you a communication. Your continued use of the Services after any update constitutes acceptance of the revised policy.

 

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Authentic Craft, LLC
San Jose, California
Email: team@authenticcraftentertainment.com
Phone: 408‑337‑2156