1. Information We Collect

We collect the following categories of personal information:

• Account information: name, email address, phone number, and your sign-in method (including Google sign-in, where used).
• Profile information: first and last name, date of birth, gender, city, and interests, which you may optionally provide during onboarding or in your account settings.
• Consent records: the date, IP address, and policy version associated with your acceptance of our Terms and Privacy Policy, and your marketing/newsletter preferences.
• Contact form submissions: your name, email, inquiry topic, and message, along with your IP address (used for spam and rate-limit protection).
• Event registrations: registrant name and email, responses to event registration forms, and liability waiver acceptance and signature.
• Newsletter subscriptions: email, name, language preference, and consent details, which may be provided independently of creating an account.
• Vendor & order information: if you sell or buy through our marketplace, we collect business details, product listings, order contents, and payment status (Stripe handles and stores your payment card details directly — we receive only a payment reference, not your full card number).

2. How We Use Your Information

We use personal information to:

• Create and manage your account and facilitate orders and event registrations
• Send transactional emails (e.g., order confirmations, registration receipts)
• Send newsletters and event announcements you have opted into, in accordance with CASL
• Personalize content based on your stated interests and location
• Maintain records of consent for legal and compliance purposes
• Respond to contact form inquiries
• Detect, prevent, and address fraud, abuse, and technical issues
• Understand site usage through aggregated analytics

We only send marketing communications with your express or implied consent as permitted by Canada's Anti-Spam Legislation (CASL). You may withdraw your consent at any time.

3. Third-Party Service Providers

We share information with the following service providers, solely to operate our services:

• Stripe — payment processing for marketplace orders.
• Resend — delivery of transactional emails and newsletters.
• Google — optional sign-in (Google OAuth) and Google Analytics for aggregated, anonymized site usage statistics.
• Cloudflare — storage and delivery of images and media files (Cloudflare R2).

These providers are only permitted to use your information to provide services to us and are bound by their own privacy and security obligations. We do not sell your personal information to third parties.

4. Cookies & Analytics

We use cookies and similar technologies for authentication (keeping you signed in) and to collect aggregated analytics through Google Analytics. You can control cookies through your browser settings; disabling cookies may affect your ability to sign in or use certain features.

5. Event Photography & Media

Photos and videos may be taken during events for promotional, educational, and archival purposes. By attending an event, you acknowledge that you may appear in photographs or recordings used by Tai Tat Dei. If you do not wish to be photographed, please notify event staff before or during the event.

6. Data Retention

We retain personal information for as long as your account is active or as needed to provide our services, comply with legal obligations (including CASL consent records, which we retain for at least three years), resolve disputes, and enforce our agreements. You may request deletion of your account as described below.

7. Your Rights & Choices

Subject to applicable law, you may:

• Access, correct, or update your personal information in your account settings
• Withdraw consent to marketing communications at any time via the unsubscribe link in any email or your account settings
• Request a copy of, correction to, or deletion of your personal information, subject to legal, regulatory, contractual, and recordkeeping obligations
• Ask questions about how your information is processed

To exercise these rights, contact us at taitatdei@gmail.com.

8. Children's Privacy

Our services are not directed at children under 13, and we do not knowingly collect personal information from children under 13 without parental consent.

9. Security

We use reasonable technical and organizational measures to protect personal information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy with an updated “Last updated” date, and where required by law, we will notify you of material changes.

11. Contact Us

For privacy questions or requests, email taitatdei@gmail.com.