Privacy Policy

Last updated: February 18, 2026

Southwinds ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights in relation to your personal data. It applies to all users of the Southwinds website and attendees of South Winds Events.

1. Data Controller

Southwinds is the data controller responsible for your personal information. For any privacy-related inquiries, please contact us at support@southwinds.art.

2. Information We Collect

We collect the following categories of personal information:

2.1 Account & Registration Data

  • Full name
  • Email address
  • Profile picture (if provided)
  • Date of account creation
  • Account role and permissions

2.2 Transaction & Purchase Data

  • Ticket purchase history and order details
  • Event registration records
  • Wristband purchase records (items purchased at Events)
  • Payment method details (processed by PayPal — we do not store full card numbers)
  • Transaction identifiers and payment status

2.3 Event Attendance Data

  • Terms acceptance records (timestamp, IP address, user agent)
  • Ticket activation and QR code scan records
  • Wristband assignment and usage data
  • Event check-in and check-out records

2.4 Technical & Usage Data

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on the platform
  • Referral source
  • Cookies and similar tracking technologies (see our Cookie Policy)

2.5 Communications Data

  • Messages sent to our support team
  • Newsletter subscription status and preferences
  • Email open and click data (if you receive marketing emails)

3. How We Use Your Information

We use your personal data for the following purposes:

  • Account management: To create and manage your account, authenticate your identity, and allow you to access your tickets and order history.
  • Ticket & order fulfillment: To process your purchases, issue tickets, manage QR codes, and facilitate payment.
  • Event operations: To manage Event attendance, operate the Wristband payment system, and track in-Event purchases.
  • Legal compliance:To record your acceptance of our Event Terms & Liability Waiver, including timestamp, IP address, and device information, for legal and compliance purposes.
  • Customer support: To respond to your inquiries and resolve issues.
  • Communications: To send you booking confirmations, Event reminders, and (with your consent) promotional communications.
  • Security & fraud prevention: To detect, investigate, and prevent fraudulent activity and abuse of our platform.
  • Legal obligations: To comply with applicable laws, regulations, and legal processes.
  • Platform improvement: To analyze usage patterns and improve our website and services.

4. Legal Basis for Processing

Where applicable data protection law requires a legal basis for processing personal data, we rely on the following:

  • Contract performance: Processing necessary to fulfill our contractual obligations to you (e.g., providing tickets, processing payments).
  • Legitimate interests: Processing for our legitimate business interests, such as improving our platform, preventing fraud, and ensuring Event safety.
  • Legal obligation: Processing required to comply with applicable laws and regulations.
  • Consent: For marketing communications and cookies, where we rely on your explicit consent.

5. Sharing Your Information

We do not sell your personal data to third parties. We may share your information with:

  • PayPal: Our payment processing partner. PayPal processes payment transactions on our behalf and has its own privacy policy governing your payment data.
  • Supabase: Our database and authentication infrastructure provider, which stores your account data and transactional records securely.
  • Service providers: Trusted third-party service providers that assist with hosting, email delivery, analytics, and platform operations, subject to contractual data protection obligations.
  • Law enforcement & legal authorities: Where required by law, court order, or to protect our legal rights or the safety of others.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. International Data Transfers

Southwinds welcomes attendees from all over the world. Your personal data may be processed and stored in countries other than your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place (such as standard contractual clauses or adequacy decisions) to protect your data in accordance with applicable privacy laws, including the GDPR where applicable.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including:

  • Account data: Retained for as long as your account is active, and for a reasonable period thereafter to resolve disputes or comply with legal obligations.
  • Transaction records: Retained for the period required by applicable tax and accounting laws (typically 5–10 years).
  • Liability waiver acceptance records: Retained indefinitely or for the period required by applicable law, as these records may be necessary to defend legal claims.
  • Technical logs: Generally retained for up to 12 months.

8. Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Request correction of inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to legal retention requirements.
  • Right to restriction: Request that we limit processing of your data in certain circumstances.
  • Right to data portability: Request your data in a structured, machine-readable format.
  • Right to object: Object to processing of your data based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
  • Right to lodge a complaint: You have the right to lodge a complaint with the relevant data protection authority in your country.

To exercise any of these rights, please contact us at support@southwinds.art. We will respond to your request within 30 days.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our platform is not directed at individuals under the age of 18. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete that data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised date. Your continued use of the platform after changes are posted constitutes your acceptance of the updated policy.

12. Contact

For any privacy-related questions or to exercise your rights, please contact us at: support@southwinds.art