PRIVACY POLICY

Effective date: 2025-11-02

1. Introduction

Welcome to Nacelle (also referred to as Sandbox Festival, “we”, “us”, or “our”).

This Privacy Policy explains how we collect, use, share, and protect personal data when you use any of our services, including our websites, mobile applications, event registration, and ticketing systems, as well as on-site access control systems such as wristbands, QR codes, or facial verification (collectively, the“Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy and our Terms & Conditions (“Terms”). If you do not agree, please do not use the Service.

Our Terms & Conditions and this Privacy Policy together form your agreement with us (“agreement”).

2. Definitions

SERVICE – Our websites, apps, ticketing systems, and access control systems operated for Sandbox Festival, Nacelle, and our events.
PERSONAL DATA – Any information that identifies you or can be used to identify you (e.g. your name, email, phone number, ticket code, or biometric data if you consent).
USAGE DATA – Data automatically collected when you interact with the Service (e.g. IP address, device type, pages viewed, or access logs).
DATA CONTROLLER – The entity that determines how and why Personal Data is processed. For this policy, Nacelle is the Data Controller.
DATA PROCESSOR – Third parties that process data on our behalf (e.g. payment processors, analytics, ticketing vendors).
USER – Anyone who uses our Service, purchases tickets, or interacts with us digitally or on site.

3. Information We Collect

We collect several types of information to provide a safe, reliable, and personalized event experience and to improve our Service.

4. Types of Data Collected

4.1. Personal Data you provide

First and last name
Email address
Phone number / WhatsApp number
Billing or delivery address (Country, City, ZIP/Postal)
ID / age verification info (where required)
Profile photo or facial scan (only if you consent)
Gender / pronouns (optional)
Emergency contact info (for certain experiences)

We may use this data to send operational messages (e.g., entry info or updates) and, unless you opt out, marketing about future events or experiences.

4.2. Usage Data (collected automatically)

Includes IP address, device type, OS, browser, pages viewed, actions taken, and timestamps. On-site data may also include RFID/QR scans or gate entry logs for safety and fraud prevention.

4.3. Cookies & Similar Technologies

We use cookies, analytics, and similar tools to enhance user experience and track performance. You can disable them, but some features may not work properly.

4.4. Information from Partners

We may receive data from ticketing/payment partners, venues, or security partners as needed to deliver services or comply with law.

5. Use of Data

Operate ticketing, registration, and entry systems
Verify identity and prevent fraud
Provide customer support
Improve event operations and digital services
Send event updates and (if opted-in) marketing
Comply with legal, tax, or safety obligations

6. Retention of Data

We retain data only as long as needed for operations, legal compliance, and safety. Transaction, ticketing, and regulatory data may be retained for audit and tax purposes.

7. International Transfers

Your data may be processed in other countries (e.g. Egypt or the EU). We ensure appropriate safeguards are in place and, by using the Service, you consent to this transfer and processing.

8. Disclosure of Data

We do not sell Personal Data. We may share it with:

Trusted service providers (payment, hosting, ticketing, analytics)
Event and venue partners (for guest lists, access, safety)
Business transfers (e.g., mergers or acquisitions)
Authorities when required by law or to protect safety

9. Security of Data

We use reasonable measures to protect data, but no system is 100% secure. If a breach poses a real risk, we will take legally required steps, including notification.

10. Your Privacy Rights

Access your data
Request correction or deletion
Restrict or object to certain uses
Request data portability
Withdraw consent (for marketing or biometrics)

To exercise these rights, contact info@nacellegrooves.com. We may verify identity before fulfilling requests.

11. Payments

We use third-party providers for payments. We do not store card data. Payment providers process information under their own privacy policies to prevent fraud and comply with law.

12. Children’s Privacy

Our Service is not intended for individuals under 18. If we discover data from a minor without parental consent, it will be deleted.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes take effect when posted. Continued use means you accept the new version.

14. Contact Us

For questions or privacy concerns, please contact info@nacellegrooves.com (Subject: Privacy).