Personal Information We Collect

• Personal Information You Give Us. We collect Personal Information when you submit it to us, including when you:
  • register for, attend, or participate in an Event, including through Event credentials, badge scans, RFID-enabled badges, mobile applications, or similar Event technologies;
  • register for an account, in applicable;
  • sign up for our emails or newsletters;
  • contact us;
  • provide information to us voluntarily;
  • participate in a promotion or survey;
  • use any of the Sites to interact with us; or
  • use social media to interact with us.
• Personal Information Collected Automatically. Each time you visit any of the Sites, we may automatically collect certain types of Personal Information. Some examples of automatic Personal Information we may collect are as follows:
  • your IP address, MAC address, browser type, operating system, device-identifying information, type of computer, and browser type, the specific webpages visited during your connection, and the domain name from which you accessed the Site.
  • information about your browsing behavior, such as the date and time you visit the Site, the areas or pages of the Site that you visit, the amount of time you spend viewing the Site, the number of times you return to the Site and other clickstream data.
  • we may use “cookies” of different types to recognize your computer. A cookie is a small text file that a website, online application, or e-mail may save to your internet browser and/or your computer’s hard drive for use in subsequent visits to the Site.

We may use web beacons, match scripts, pixel tags or similar technologies that allow us to know if a particular web page was visited, an e-mail opened, or links in the email utilized. In some instances, these technologies may allow us to match activities with particular users.

We may combine the Personal Information we collect through cookies, web beacons, or other technology tools with other Personal Information we have collected from you or Personal Information from other sources.

Use of Personal Information. We may use your Personal Information for the purposes described in this Privacy Policy, as disclosed to you on the Sites, or as otherwise permitted by law. For example, we may use your Personal Information to:

• provide, maintain, operate, and improve our Sites, Events, and services;
• administer and manage Events, including attendee identification, credentialing, access control, attendance tracking, session participation, security, and related operational purposes;
• process Event registrations, orders, and payments;
• communicate with you about your registration, payments, inquiries, or other requests;
• send confirmation emails and other transactional or administrative communications;
• conduct internal research and development and make business decisions regarding current and future Sites, services, and Event offerings;
• analyze and monitor usage of the Sites and related operations;
• protect the security, integrity, and functionality of our Sites, Events, services, and business;
• enforce our Site terms, our Event terms, and other applicable policies, and monitor compliance with applicable law; and
• send you updates, newsletters, and other informational or promotional communications.

Sharing or Disclosure of Personal Information. We may disclose your Personal Information in the following circumstances:

• to hosts, lessors, licensors, vendors, consultants, contractors, and other service providers that perform services on our behalf, including in connection with Event hosting and operations, Event registration, website hosting, shipping and delivery, payment processing, fraud prevention, customer service, analytics, marketing, and advertising;
• as necessary to protect and enforce our Site terms, our Event terms, our rights, or the rights, property, or safety of others;
• to comply with applicable law, legal process, or governmental request, including in response to a subpoena, court order, or similar legal process, or to cooperate with law enforcement or other authorities as permitted or required by law;
• in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or other corporate transaction, in which case your Personal Information may be disclosed or transferred as part of that transaction; or
• with your consent or at your direction.

We may share aggregated or de-identified information, which cannot reasonably be used to identify you.

We do not share mobile numbers or SMS opt-in data with third parties or affiliates for their own marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as necessary to provide messaging services

Cookies and Similar Tracking Technologies. Like many commercial websites, we and our service providers may use cookies, pixels, web beacons, and similar tracking technologies to collect information about your use of the Sites. A cookie is a small text file placed on your device when you visit a website that helps the website recognize your browser or device and remember certain information. We may use these technologies to:

• enable the Sites to function properly;
• remember your preferences and settings;
• personalize and improve your experience on the Sites;
• analyze usage of the Sites and measure the effectiveness of communications and content; and
• support our business operations, including security, fraud prevention, and Site administration.

You may be able to control cookies through your browser settings and other tools. If you disable or remove cookies, some parts of the Sites may not function properly or may be unavailable. Please note that browser-based controls may not be effective for all types of tracking technologies, and we cannot guarantee their effectiveness.

We may also use web beacons, pixels, or similar technologies in our Sites or emails to understand usage, measure the effectiveness of communications, determine whether emails have been opened or acted upon, and support other analytics and business purposes.

Retention of Personal Information. Personal Information that we collect, access, or process will be retained only for as long as reasonably necessary to fulfill the purposes for which it was collected, unless otherwise required or permitted by law or provided for in an agreement between you and SFA. Personal Information that is no longer required for those purposes will be deleted, destroyed, de-identified, or otherwise disposed of in accordance with applicable law.

Information Security Measures. We maintain reasonable and appropriate administrative, technical, and physical safeguards designed to protect the Personal Information we collect against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee the absolute security of your Personal Information. You are responsible for taking appropriate steps to protect your own information, including using a secure browser and safeguarding any account credentials.

Do Not Track. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers to signal a preference not to be tracked across websites and online services. Because there is currently no universally accepted standard for recognizing or honoring DNT signals, the Sites do not respond to DNT browser signals at this time.

Children. The Sites are not directed to children under 13, and we do not knowingly collect Personal Information from children under 13 through the Sites without verifiable parental consent. If we learn that we have collected Personal Information from a child under 13 without the required parental consent, we will take reasonable steps to delete that information, unless retention is required or permitted by applicable law. If you believe we may have collected Personal Information from a child under 13, please contact us at [email protected].

Social Media. We maintain a presence on social media platforms. If you interact with us through social media, including by posting content, sharing material from our Sites, or engaging with our social media pages or features, we may receive information such as your username, profile information, profile picture, photos, comments, and other content you choose to share, subject to your settings on the applicable platform. We may use this information for the purposes described in this Privacy Policy.

California Privacy Rights. If you are a California resident, you may have the following rights under California law, subject to certain exceptions and limitations:

• the right to know the categories and specific pieces of Personal Information we have collected about you, the categories of sources from which we collected it, the purposes for which we collect, use, disclose, sell, or share it, and the categories of third parties to whom we disclose it;
• the right to request deletion of Personal Information we have collected from you;
• the right to request correction of inaccurate Personal Information we maintain about you, taking into account the nature of the Personal Information and the purposes of the processing;
• the right to opt out of the sale or sharing of your Personal Information, to the extent applicable; and
• the right to limit the use and disclosure of sensitive Personal Information, to the extent applicable under California law.

For the 12-month period preceding the effective date of this Privacy Policy, we have not sold or rented Personal Information to third parties for monetary consideration. We also do not use or disclose sensitive Personal Information for purposes other than those permitted by California law.

How to Exercise Your Rights

• To exercise any of the rights described above, please contact us as set forth in Section 16.
• Only you, or a person legally authorized to act on your behalf, may submit a request relating to your Personal Information. We may need to verify your identity and/or authority before responding to your request. Your request should provide sufficient information for us to reasonably verify your identity and understand the scope of your request. You are not required to create an account with us to submit a request.
• If you submit a request, we will respond in accordance with applicable law. If we cannot comply with all or part of your request, we will explain the reasons to the extent permitted by law. Any disclosures we provide will generally cover the 12-month period preceding receipt of your request, unless a longer period is required or permitted by law.
• We generally do not charge a fee to process or respond to your request unless the request is excessive, repetitive, or manifestly unfounded. If we determine that a fee is warranted, we will inform you of the reason for that decision and provide a cost estimate before completing your request.

Non-Discrimination

• We will not discriminate against you for exercising any of your rights under California law. Unless permitted by applicable law, we will not deny you goods or services, charge you different prices or rates, provide a different level or quality of goods or services, or suggest that you may receive a different price, rate, level, or quality of goods or services for exercising your rights.
• If we offer any financial incentives permitted by California law, we will provide any required notices and obtain any consent required by law.

Additional States Privacy Rights. If you are a resident of Texas, you may have certain rights under applicable state law with respect to your Personal Information, subject to certain exceptions and limitations, including:

• the right to confirm whether we process your Personal Information and to access that Personal Information;
• the right to correct inaccuracies in your Personal Information, taking into account the nature of the Personal Information and the purposes of the processing;
• the right to delete Personal Information we have collected from or about you;
• the right to obtain a copy of certain Personal Information in a portable and, to the extent technically feasible, readily usable format;
• the right to opt out of the sale of Personal Information, targeted advertising, and certain profiling or automated decision-making activities, to the extent applicable under state law; and
• if we deny your request, the right to appeal our decision.

How to Exercise Your Rights. To exercise any of the rights described above, please contact us as set forth in Section 16. We may take steps to verify your identity before responding to your request, which may include asking you to log in to your account, if applicable, requesting certain identifying information such as your email address, or using a third-party verification provider. We will respond to your request in accordance with applicable law, subject to any lawful exceptions or limitations.

Non Discrimination. We will not discriminate against you for exercising any rights available to you under applicable state privacy law.

Appeals. If we deny your request, you may appeal our decision by contacting us as set forth in Section 16.

Visitors from Outside the United States; Cross-Border Transfers. The Sites and Events are hosted in the United States. If you access the Sites, attend an Event, or otherwise provide us with your Personal Information from outside the United States, your Personal Information may be transferred to, stored in, and processed in the United States or other jurisdictions where we or our service providers operate. Please note that the data protection, privacy, and other laws of the United States and such other jurisdictions may differ from, and in some cases may be less protective than, those of your country of residence. In addition, Personal Information transferred to the United States or other jurisdictions may be accessible to governmental authorities pursuant to lawful process. By using the Sites, attending an Event, or otherwise providing us with your Personal Information, you acknowledge and agree to the transfer, storage, and processing of your Personal Information as described in this Privacy Policy.

Event Photography and Recordings. We may photograph, film, or otherwise record our Events, and such materials may include your image, likeness, voice, name, or other identifying characteristics. We may use those materials for promotional, educational, archival, and other lawful business purposes, including on our Sites and social media channels. For additional information, please review the applicable Event terms.

Links to Other Websites. The Sites may contain links to third-party websites, applications, or online services that are not owned or controlled by SFA. SFA is not responsible for the content, privacy practices, policies, terms, or security of any third-party website, application, or service. Your access to and use of any such third-party website, application, or service is at your own risk, and we encourage you to review its applicable terms and privacy policy.

Changes to This Privacy Policy. We may change this Privacy Policy from time to time, including as required to keep current with rules and regulations, new technologies and security standards. When we do, we will let you know by appropriate means such as by posting the revised Privacy Policy with a new “Last Updated” date. Changes to this Privacy Policy will become effective when posted, unless indicated otherwise.