PRIVACY POLICY

1. What Information We Collect via Our Website

When you visit our Website you may provide us with your full name, email address, social media handles, and other information. You may provide us with information in the following ways:

• Voluntarily submitting your full name, email, social media handles, and other details in any of our application forms
• By voluntarily corresponding with us by email, in which case we may retain the content of your email messages together with your email address and our responses
• By voluntarily corresponding with us via our WhatsApp, where you may need to provide your name and contact details for us to get in touch with you
• By voluntarily corresponding with us via social media, in which case we may retain the contents of your messages on the social media platform, together with your social media handle and our responses

Any information other than those mentioned above will be requested from you if necessary to provide a service.

2. How We Store That Information

Our website is hosted on Vercel (vercel.com). Vercel may collect certain technical data such as IP addresses, browser type, and access logs for the purpose of serving the website and ensuring its security. More information can be found at: vercel.com/legal/privacy-policy

Form submissions (such as promoter applications) are stored in a database hosted by Supabase (supabase.com). Supabase stores your data on secure servers with encryption at rest and in transit. More information can be found at: supabase.com/privacy

When you submit a form on our website, a notification containing the information you provided is sent to our team via Telegram (a messaging platform) to ensure we can respond to your enquiry promptly. This notification includes your name, email, social media, and any additional information you provided in the form.

We do not store any of your data outside of the above platforms, other than if you have corresponded with us via email in which case your email and the contents of the emails will be on our email servers.

3. How We Use Your Information

We use your information to:

• Process your promoter applications and respond to your enquiries
• Keep you up-to-date about updates to our products
• Direct-market our new products we think will be valuable to you (with your opt-in consent and the option to stop receiving at any moment)
• Answer your queries and respond to your requests
• Release Information to regulatory or law enforcement agencies, if we are required or permitted to do so

Your information may need to be used for similar purposes to those listed above, but never in a way materially different. We do not sell or share your information without your consent unless required by a regulatory or law enforcement agency.

4. The Legal Basis for Processing Your Information

Under GDPR, the main grounds that we rely upon in order to process your Information are the following:

• Necessary for the purposes of legitimate interests - either we, or a third party, will need to process your Information for the purposes of our (or a third party's) legitimate interests, provided we have established that those interests are not overridden by your rights and freedoms, including your right to have your Information protected. Our legitimate interests include responding to requests and enquiries from you, optimising our website and customer experience, and informing you about our products and services
• Consent - in some circumstances, we may ask for your consent to process your Information in a particular way

5. How We Share Your Information

Your information is never shared with a third party without your consent and/or prior knowledge. Only exception being if we receive a request from a regulatory body or law enforcement agency, and if permitted under GDPR and other laws, we may disclose certain personal information to such bodies or agencies.

We will share your Information with third parties only to complete a service you have requested (such as being added to a guestlist or making a booking). We will seek consent to share the information and/or you will have prior knowledge of the information being shared. Where information needs to be shared to a third party to complete a service you have requested, we are unable to control the manner in which the third party handles your information.

Our third-party service providers include:

• Vercel — website hosting and delivery
• Supabase — secure database storage for form submissions
• Telegram — internal team notifications for form submissions
• WhatsApp — direct communication with applicants (user-initiated)

6. How Long We Hold Your Information

We will only retain your Information for as long as is necessary for the purpose or purposes for which we have received it. The criteria that we use to determine retention periods will be determined by the nature of the data and the purposes for which it is kept.

For example, if we receive your information through our application form on our website, we will maintain this on our Supabase database until you request to have your information permanently removed.

7. Your Rights Relating to Your Information

You have certain rights in relation to personal information we hold about you. Details of these rights and how to exercise them are set out below. We may require evidence of your identity before we are able to act on your request.

• Right of Access - You have the right at any time to ask us for a copy of the Information about you that we hold, and to confirm the nature of the Information and how it is used
• Right of Correction or Completion - If Information we hold about you is not accurate, or is out of date or incomplete, you have a right to have the data rectified, updated or completed
• Right of Erasure - In certain circumstances, you have the right to request that Information we hold about you is erased e.g. if the Information is no longer necessary for the purposes for which it was collected or processed
• Right to Object to or Restrict Processing - In certain circumstances, you have the right to object to our processing of your Information. You also have the right to object to use of your Information for direct marketing purposes
• Right of Data Portability - In certain instances, you have a right to receive any Information that we hold about you in a structured, commonly used and machine-readable format
• Right to Withdraw Consent - You have the right to withdraw consent for the processing and/or control of your personal data, which shall not affect the lawfulness of processing based on consent before the withdrawal

You can exercise any of the above rights by contacting us at the email address in our footer. You can exercise your rights free of charge.

8. Use of Cookies

Cookies are small text files that are placed on your computer's hard drive by your web browser when you visit any website. They allow information gathered on one web page to be stored until it is needed for use on another, allowing a website to provide you with a personalised experience and the website owner with statistics about how you use the website so that it can be improved.

Our website uses essential cookies required for the website to function correctly. Our hosting provider (Vercel) may also set cookies for performance and analytics purposes.

If you want to delete or block any cookies, please refer to the help and support area on your internet browser for instructions on how to locate the file or directory that stores cookies. Please note that deleting our cookies or disabling future cookies may prevent you from accessing certain areas or features of our site.

9. Consent

To the extent that we are processing your Information based on your consent, you have the right to withdraw your consent at any time.

10. Changes to Our Privacy Policy

This privacy policy can be changed by us at any time. If we change our privacy policy in the future, we will advise you of material changes or updates via email.

11. Complaints

If you are unhappy about our use of your information, you can contact us at hello@mfnights.com