2. Information we collect

We may collect information that you provide directly to us, including:

• your name, email address and telephone number;
• billing and booking information, including event date and ticket type;
• information you include in a booking, enquiry or message;
• the name of another guest or the person who invited you, where this is requested for a group offer or booking administration;
• order information such as amount paid, payment status, transaction reference, refund status and booking history;
• account details and order history if you create an account;
• correspondence sent through the website, email, WhatsApp, Messenger or another communication channel;
• review content, ratings and any photographs or videos you choose to upload; and
• your name, email address, subscription status and marketing preferences if you join a mailing list.

When you use the website, we may also collect technical information such as your IP address, browser and device information, approximate location derived from your IP address, referring website, pages viewed and interactions with the website, subject to your cookie choices and applicable law.

Payment card details are processed by the payment provider offered at checkout. We do not intentionally store your full card number or card security code.

3. LGBTQ+ and sensitive information

Sensitive context

Bottoms Up promotes LGBTQ+ events. A visit to or booking from an LGBTQ+-specific website can, in some circumstances, reveal or strongly suggest information about sexual orientation. We therefore treat information associated with use of this website with particular care.

We do not ask customers to state their sexual orientation and we do not create profiles that categorise customers by sexual orientation. We do not use booking information to build advertising profiles about a person’s sexuality.

Where information is treated as special-category personal data under applicable data protection law, we will only process it where an appropriate legal condition and safeguards apply.

4. How we use your information

We may use personal information to:

• operate and secure the website;
• process and administer bookings and payments;
• send booking confirmations and important event information;
• provide customer support and respond to enquiries;
• deal with cancellations, transfers, credits and refunds;
• share necessary booking information with the Event Provider so your booking can be fulfilled;
• manage attendance, transport and operational communications relating to an event;
• prevent fraud and maintain security;
• keep accounting, tax and business records;
• comply with legal obligations and establish or defend legal claims;
• send marketing where you have consented or where otherwise permitted by applicable law; and
• understand and improve website performance using analytics where permitted by law and your cookie choices.

We do not sell personal information or customer mailing lists.

5. Legal bases for processing

Where the EU GDPR, UK GDPR or similar legislation applies, we process personal information under one or more appropriate legal bases.

Booking and customer information is primarily processed because it is necessary to take steps at your request and perform our contractual and booking obligations. Some information is processed because we have legal obligations, including accounting, tax and fraud-prevention requirements.

We may process limited information for legitimate business interests, such as maintaining website security, responding to enquiries, improving services and defending legal claims, provided those interests are not overridden by your rights and interests.

Marketing emails and non-essential cookies or tracking technologies are used on the basis of consent where consent is required. You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

6. Who receives your information

We may share personal information only where reasonably necessary with organisations that help us operate the website or provide the service you requested. These may include:
the Event Provider;

• website hosting, security, WordPress and WooCommerce service providers;
• payment processors;
  email, mailing-list and communication providers;
• analytics and advertising providers where permitted by your consent choices;
• accountants, professional advisers and other business service providers; and
• courts, regulators, law-enforcement bodies or other authorities where disclosure is required by law.

Our Pride mailing list currently uses a Mailchimp-hosted subscription service. Depending on the configuration active on the website, analytics and advertising technologies may include services provided by Google and Meta.

7. The Event Provider

CMC is an authorised seller and booking agent. It does not operate the vessel itself.

Where necessary to provide your booked event, relevant customer details may be provided to Tarkan Tuna Korumaz, Event Provider, Gran Canaria, Spain. The Event Provider may use this information to verify reservations, communicate about your event, manage attendance and transport, administer operational changes and deliver the booked experience.

Information processed directly by the Event Provider outside CMC’s systems may be subject to his own responsibilities under applicable data protection law.

8. Payments

Payments made through the website are handled by third-party payment providers offered at checkout. Payment providers process payment information under their own privacy and security terms.

We normally receive confirmation of payment, the amount, transaction information and limited identifying information rather than your complete payment-card details.

9. Email marketing

You will not automatically be added to our promotional mailing list merely because you purchase a ticket unless applicable law permits this and the required information and opt-out are provided.

Where we rely on consent, you will only receive marketing after choosing to subscribe. Marketing emails include an unsubscribe facility and you can unsubscribe at any time.

We may retain a minimal suppression record after you unsubscribe so that we can ensure marketing is not sent to you again unintentionally.

10. Cookies and tracking

The website uses cookies and similar technologies for website functionality, security, shopping and booking functions and, subject to your choices, analytics and advertising. Further details are provided in Part 3, our Cookie Policy.

Where consent is required, non-essential analytics and advertising technologies should not be activated until the appropriate consent has been provided. You can change your cookie choices through the website’s cookie settings where available.

11. External websites and services

The website contains links to third-party services such as WhatsApp, Facebook Messenger, Google Maps and other websites. When you follow one of these links or use the third-party service, that provider may collect information independently under its own privacy policy.

A reservation made directly through WhatsApp or Messenger with the Event Provider may therefore also involve processing by the communication platform and the Event Provider independently from this website.

12. International transfers

CMC is a United States company and some service providers may process information in the United States or other countries outside the European Economic Area or United Kingdom.

Where EU or UK data protection legislation requires safeguards for an international transfer, we seek to use an appropriate recognised transfer mechanism. Depending on the recipient, this may include an adequacy decision, participation in an approved data protection framework, Standard Contractual Clauses or another legally recognised safeguard.

13. How long we keep information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, tax, accounting and dispute-resolution requirements.

Booking and transaction records may generally be retained for up to seven years where needed for accounting, legal or tax purposes.

Routine customer correspondence may be deleted earlier where it is no longer required.

Marketing information is retained until you unsubscribe or the mailing list is discontinued, subject to retaining a minimal suppression record where necessary.

Cookie and analytics information is retained according to the relevant technology and your cookie settings.

14. Security

We use reasonable technical and organisational safeguards designed to protect personal information against unauthorised access, alteration, disclosure or loss. These safeguards may include encrypted website connections, access restrictions, security services, software updates and third-party payment processing.

No internet-based service can guarantee absolute security.

15. Your rights

Depending on where you live and the law that applies, you may have rights to request access to your personal information, correct inaccurate information, request deletion, restrict certain processing, object to certain processing and receive certain information in a portable format.

Where processing is based on consent, you may withdraw that consent. You also have the right to object to direct marketing at any time.

We may need to verify your identity before responding to a rights request. Certain information may need to be retained despite a deletion request where we have a legal obligation or another lawful reason to retain it.

16. Complaints

If you believe that your personal information has been handled incorrectly, please contact us first so that we can investigate.

Where the EU GDPR applies, you may also complain to the competent data protection authority, including the Spanish Data Protection Agency (AEPD) where appropriate, or the supervisory authority in your EU or EEA country. UK residents may also have the right to complain to the UK Information Commissioner’s Office where UK data protection legislation applies.

17. Children

Bottoms Up boat party events are intended for adults aged 18 and over. We do not knowingly accept event bookings from children. If we become aware that personal information has been provided by a child in circumstances where it should not have been collected, we will take reasonable steps to remove it.

18. Changes to this Privacy Policy

We may update this Privacy Policy when our services, suppliers, website technology or legal obligations change. The latest version will be published on the website with an updated revision date. Material changes may also be highlighted on the website or communicated directly where appropriate.

19. Contact us

Bottoms Up Gay Boat Party / Casey Marketing Creations
Sophie Nicole Casey LLC DBA Casey Marketing Creations
8 The Green, Suite B
Dover, Delaware 19901
United States
Email: [email protected]
Website: bottomsupgayboatparty.com