RiftHub Privacy Policy Last updated: 23 October 2025 1. Introduction RiftHub is a festival companion app operated by Poster Boy Films. We are committed to protecting your privacy and handling your data transparently. This policy explains what minimal data we collect, why we collect it, and how we protect your rights. 2. Data Controller Poster Boy Films Company Number: 671438 Outrath, Waterford Road, Kilkenny, Leinster, Ireland Website: https://posterboyfilms.com App: Rift Hub (https://rifthub.io) Contact email: privacy@posterboyfilms.com 3. Our Commitment to Minimal Data Collection RiftHub is designed with privacy in mind. We collect only the essential information needed to provide you with festival services during the event. We do not create user accounts, store passwords, process payments, generate user profiles, or track you with analytics. 4. What Data We Collect We collect only the following limited data: Ticket ID: Your unique festival ticket identifier to verify your access to the event and enable app features. Email Address: Used solely to send you essential festival updates, notifications, and support communications. Geo-location Data: Collected only when you grant permission, to provide location-based festival features such as stage maps, nearby amenities, and event navigation. You can disable location access at any time through your device settings. Notification Preferences: Your opt-in choices for receiving push notifications about festival schedules, artist alerts, and important announcements. 5. How We Use Your Data We use your data exclusively for the following purposes: Verifying your festival ticket and granting app access Providing location-based festival navigation and information Sending you notifications about festival events, schedule changes, and safety alerts (only if you opt in) Responding to your support requests Conducting aggregated, anonymized polling to improve festival experiences (no individual identification) Legal basis: We process your data based on your consent and our legitimate interest in providing festival services. You may withdraw consent at any time. 6. Aggregated Polling Data We may collect anonymized, aggregated responses to in-app polls or surveys about festival experiences. This data cannot be traced back to individual users and is used solely to improve future events. 7. Data Retention: Temporary and Time-Limited Your privacy matters. We retain your personal data only as long as necessary: During the festival: Data is active while you use the app during the event. Post-festival retention: All personal data (Ticket ID, email, geo-location history, notification preferences) is automatically deleted 3 weeks after the festival ends. Aggregated data: Anonymized polling data may be retained indefinitely for statistical purposes, but contains no personal identifiers. 8. Data Sharing and Disclosure We do not sell, rent, or share your personal data with third parties for marketing purposes. We may share data only in the following limited circumstances: Service providers: Trusted vendors who help us operate the app (e.g., cloud hosting, notification services) under strict confidentiality agreements. Legal obligations: When required by law, court order, or to protect safety and rights. No external sharing: We do not share your data with advertisers, data brokers, or social media platforms. 9. Your Rights Under GDPR, CCPA, and other privacy laws, you have the following rights: Access: Request a copy of the data we hold about you. Correction: Update or correct inaccurate information. Deletion: Request immediate deletion of your data at any time (data is automatically deleted 3 weeks post-festival). Objection: Object to data processing for specific purposes. Portability: Receive your data in a portable format. Withdraw consent: Revoke location or notification permissions at any time through your device settings. To exercise any of these rights, contact us at privacy@posterboyfilms.com. We will respond within 30 days. 10. Data Security We implement industry-standard security measures to protect your data, including: Encryption of data in transit (HTTPS/TLS) Secure cloud storage with access controls Regular security audits and updates Minimal data retention to reduce risk While no system is 100% secure, we take all reasonable precautions to safeguard your information. 11. Children's Privacy RiftHub is intended for festival attendees of all ages. We do not knowingly collect personal data from children under 13 (or applicable age in your jurisdiction) without parental consent. If you believe we have inadvertently collected such data, please contact us immediately for deletion. 12. International Data Transfers Your data may be processed on servers located outside your country of residence, including within the European Economic Area (EEA) and other jurisdictions. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data in compliance with GDPR and other applicable laws. 13. Compliance with Global Privacy Laws This privacy policy complies with: GDPR (General Data Protection Regulation – EU/EEA) CCPA (California Consumer Privacy Act – USA) Data Protection Act 2018 (Ireland/UK) Other applicable regional privacy laws If you are located in a jurisdiction with additional privacy rights, those rights apply to you. 14. Changes to This Policy We may update this policy to reflect changes in our practices or legal requirements. If we make material changes, we will notify you via email or in-app notification. The "Last updated" date at the top will reflect the most recent version. We encourage you to review this policy periodically. 15. Contact Us If you have any questions, concerns, or requests regarding this privacy policy or how we handle your data, please contact us: Email: admin@posterboyfilms.com Postal Address: Poster Boy Films, Outrath, Waterford Road, Kilkenny, Leinster, Ireland You also have the right to lodge a complaint with your local data protection authority: Ireland: Data Protection Commission – https://www.dataprotection.ie EU/EEA: Contact your national data protection authority USA (California): California Attorney General – https://oag.ca.gov/privacy RiftHub is committed to transparency, minimal data use, and respecting your privacy. Enjoy the festival!