Privacy

1. Scope and accountability

This Policy applies to personal information under All Access Toronto’s control. It does not replace the privacy policies of independent venues, event organizers, payment providers, ticketing services or other third parties that may process information for their own purposes.

All Access is responsible for personal information under its control and limits access to people and service providers who need it for legitimate platform, event, membership, security or legal purposes.

2. Information we collect

Depending on how you use the platform, we may collect:

• Account and profile information: name, email, phone number, username, membership tier, account status and preferences.
• Membership and transaction information: plan, billing status, purchases, order numbers, ticket quantities, refunds and transaction history. Full payment-card credentials are generally handled by the payment processor rather than stored by All Access.
• Event and reservation information: events saved or purchased, reservation or booth requests, venue, date, time, party size, guest names, guest emails, phone numbers, attendance status, check-in status, notes and special requests you choose to provide.
• Organizer information: organization or promoter name, contact details, event submissions, venue details, ticket links, guest lists, attendee records, event performance and communications sent through organizer tools.
• Communications: messages to concierge, support, partners or organizers, form submissions, feedback and correspondence.
• Technical information: IP address, browser/device information, login and security logs, pages viewed, referral information, cookies and similar technologies used for site functionality, analytics, fraud prevention and performance.
• Marketing choices: consent records, subscription preferences and unsubscribe requests.

We may receive information directly from you, from an organizer or venue operating an event you attend, from WooCommerce/payment or ticketing services used to complete a transaction, or from service providers supporting the platform.

3. How we use information

We use personal information for purposes that are identified at or before collection, or that are otherwise permitted by law, including to:

• create and secure accounts and determine membership or organizer permissions;
• process memberships, tickets, reservations, booth requests, guest lists, check-ins, refunds and customer service;
• show members their own tickets, reservations, saved events and membership benefits;
• allow an organizer to manage only the events that organizer owns, including the guest list, ticket-buyer information and event statistics needed to operate those events;
• communicate transactional information about an order, booking, event, account or service request;
• provide concierge and support services;
• prevent fraud, abuse, unauthorized access and security incidents;
• operate, measure, troubleshoot and improve the platform; and
• send promotional messages where we have the consent or other lawful basis required to do so.

4. When we disclose information

We do not sell member contact information. We may disclose information only as reasonably necessary for the service, including:

• Event organizers and venues: information required to operate an event, reservation, table, admission list or customer-support issue. Organizer portal access is limited to events the organizer owns; platform administrators may access information across the platform for administration, support, fraud prevention and compliance.
• Payment, commerce and technology providers: providers that host the site, process payments, deliver email, provide analytics, prevent fraud or otherwise support the service.
• Professional and legal recipients: advisers, insurers, law enforcement, regulators or other parties where disclosure is required or permitted by law or reasonably necessary to protect rights, safety, security or the integrity of the service.
• Business transactions: a prospective or completed financing, reorganization, acquisition, sale or transfer, subject to appropriate confidentiality and legal requirements.

Some service providers may process information outside Ontario or Canada. Where this occurs, information may be subject to the laws of the jurisdiction in which it is processed.

5. Retention and safeguards

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to maintain transaction and consent records, resolve disputes, prevent fraud, meet legal or accounting obligations, and enforce agreements. Retention periods can differ by record type.

We use administrative, technical and organizational safeguards appropriate to the sensitivity of the information. No internet or storage system can be guaranteed to be completely secure. If a breach creates obligations under applicable law, we will take the steps required by law.

6. Access, correction and consent choices

You may request access to personal information we hold about you, ask us to correct inaccurate information, or ask questions about our privacy practices. You may also withdraw consent to optional uses, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent needed to provide a service may mean we can no longer provide that service.

For commercial email or text messages, you may unsubscribe using the mechanism in the message. Transactional messages needed to administer an account, purchase, booking or event may still be sent where permitted by law.

To make a privacy request, contact info@allaccesstoronto.com. We may need to verify your identity before fulfilling an access or correction request.

7. Cookies and analytics

We may use essential cookies for sign-in, security, saved preferences and commerce, and may use analytics or performance technologies to understand how the site is used. Where consent is required for non-essential technologies, the site should obtain that consent before activation. Browser controls may also allow you to block or delete cookies, although some platform functions may then stop working.

8. Changes to this Policy

We may update this Policy as the platform, service providers or legal requirements change. Material changes should be presented clearly and, where required, fresh consent will be requested before information is used for a materially new purpose.