Privacy Policy

This Privacy Policy explains what personal information we collect through the Sundance Festival 2027 pre-launch website, how we use it, who we share it with, and the rights you have over it. If you have questions, contact us at info@sundancefestival.co.

1. Data we collect

The only personal data we actively collect on this Site is:

• Your email address, when you sign up to the 2027 early-access list.
• The source of the sign-up (e.g. the landing page) and the timestamp at which it happened.

We do not ask for your name, address, phone number, or payment information, and we do not use tracking cookies for advertising.

Automatically collected

Our infrastructure providers (see §4) log standard technical data every time you visit — such as IP address, browser type, and the pages you request — to keep the Site running and secure. We do not read these logs to profile you.

2. How we use your data

• To send you email updates about the 2027 festival edition — pass on-sale windows, lineup reveals, lodging details, and other announcements.
• To measure the total size of the early-access list (aggregated number only) and display it on the Site.
• To respond to you if you reply to one of our emails or write to us directly.
• To detect and prevent abuse of the sign-up form (e.g. spam, mass submissions).

3. Legal basis (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following bases:

• Consent, when you submit your email — you can withdraw it at any time by unsubscribing.
• Legitimate interests, for basic security logging and abuse prevention.

4. Who processes your data on our behalf

We use trusted third-party processors to run the Service. We share only what each provider needs to do their job:

• Vercel — hosting and edge network (privacy policy).
• Neon — managed Postgres database that stores your sign-up (privacy policy).
• Google (Gmail SMTP) — outbound email delivery for confirmation and update emails (privacy policy).
• Cloudflare R2 — asset storage for imagery on the Site (privacy policy).

We do not sell your data, and we do not share it with advertisers or data brokers.

5. International transfers

Our processors may store or process data in the United States or other countries outside the EEA/UK. Where required, they rely on Standard Contractual Clauses or an adequacy decision to safeguard the transfer.

6. Retention

We keep your email on the early-access list until you unsubscribe or the 2027 festival cycle ends, whichever comes first. When you unsubscribe or request deletion, we remove your address from active systems within 30 days.

7. Your rights

Depending on where you live, you may have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data
• Withdraw consent to marketing emails
• Object to processing based on legitimate interests
• Request a copy of your data in a portable format
• Lodge a complaint with your local data protection authority (EEA/UK) or attorney general (US states with privacy laws)

Send any of these requests to info@sundancefestival.co and we’ll respond within 30 days.

8. Security

Data is transmitted over TLS, and stored in encrypted-at-rest databases operated by our processors. Access to the admin panel is limited to authorised team members and gated by strong authentication. No system is perfectly secure, though — if we ever detect a breach that affects your data, we’ll notify you as required by applicable law.

9. Children

The Service is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has submitted their email, contact us and we will delete it.

10. Cookies

The public site does not use marketing or analytics cookies. Our infrastructure providers may set essential cookies needed for security or session management on their own subdomains. The admin panel (/admin) uses a session cookie to authenticate team members.

11. Changes to this policy

We may update this policy over time. When we do, we update the “Last updated” date at the top. For material changes, we’ll email everyone on the list with a summary of what changed.

12. Contact

Privacy questions or requests? Email info@sundancefestival.co.

This document is a working draft for the pre-launch site and does not constitute legal advice. Have counsel review it before you rely on it for anything material — particularly if you operate across jurisdictions with strict data-protection regimes.