Privacy Policy

This Privacy Policy explains how Kickdoor Comedy Ltd., doing business as Kickdoor Comedy (“Kickdoor,” “we,” “us,” or “our”), collects, uses, discloses, and protects personal information through our website, Comedy Passport, ticketing services, communications, and events.

1. Privacy contact

2. Information we collect

Depending on how you interact with Kickdoor, we may collect:

Account and Passport information

• Email address;
• First and last name;
• Supabase user and Passport identifiers;
• Account creation date;
• Authentication, session, and security information;
• QR check-in credentials and expiration information.

We do not intentionally place names, email addresses, authentication tokens, or permanent user identifiers directly in Passport QR codes. QR codes may contain temporary opaque credentials used to locate a Passport securely.

Ticket and event information

• Events associated with your account;
• Ticket quantities, reservation details, and purchase status;
• Ticket creation and check-in status;
• Event attendance history;
• Communications concerning event times, locations, changes, or cancellations.

Purchase information

Squarespace and its payment-processing partners may process:

• Billing and contact information;
• Payment method details;
• Transaction identifiers;
• Purchase and refund information.

Kickdoor generally does not receive or store complete payment-card numbers.

Communications and marketing information

We may collect:

• Email subscription preferences;
• Date, time, source, and wording of marketing consent;
• Unsubscribe requests;
• Messages, questions, and support requests you send us;
• Email-delivery information necessary to operate our communications.

Technical information

When you use our website, service providers may automatically process:

• IP address;
• Browser and device information;
• Pages viewed and interactions;
• Approximate location derived from IP address;
• Cookies, local storage, and similar technologies;
• Error, security, and diagnostic logs.

3. How we use information

We use personal information to:

• Create and manage Comedy Passports;
• Authenticate users through secure magic links;
• Process purchases, reservations, refunds, and event admission;
• Display tickets, attendance history, and event information;
• Generate and validate temporary QR check-in credentials;
• Reveal venue details to eligible ticket holders;
• Send receipts, login links, security notices, venue information, and event changes;
• Send promotional event announcements where consent or another lawful basis exists;
• Provide customer support;
• Detect abuse, fraud, duplicate use, and security threats;
• Maintain, troubleshoot, and improve our services;
• Comply with legal, accounting, tax, and regulatory obligations.

We do not use user-editable profile information as proof of administrative authorization.

4. Consent and communication preferences

Where required, we request consent before collecting, using, or disclosing personal information.

Creating a Comedy Passport does not automatically require consent to receive promotional messages. Where promotional consent is requested, it will be presented separately and will not be preselected.

You may unsubscribe from promotional email using the link provided in the message or by contacting hello@kickdoorcomedy.com. Unsubscribing from promotional messages does not prevent transactional communications required to provide tickets, account access, event details, security notices, or purchased services.

We maintain records reasonably necessary to document consent and unsubscribe requests.

5. How we disclose information

We may disclose information to service providers that help us operate, including:

• Squarespace for website hosting, commerce, customer, order, and webhook services;
• Supabase for authentication, database, Edge Functions, and application infrastructure;
• Payment processors used through Squarespace;
• Email delivery and Google Workspace providers;
• Mapping services when you request directions;
• Analytics, security, logging, and technical-support providers;
• Event venues and operational partners when reasonably necessary to provide admission or event services.

Service providers may process information only for the services they provide to us, subject to their agreements and applicable law.

We may also disclose information:

• With your consent;
• To comply with law, court orders, or lawful government requests;
• To investigate fraud, security incidents, or threats to safety;
• In connection with a business sale, restructuring, or transfer, subject to appropriate safeguards;
• To establish, exercise, or defend legal rights.

We do not sell personal information for money.

6. Squarespace integration and webhooks

Kickdoor may use Squarespace APIs, OAuth authorization, and webhooks to receive and process information concerning orders, products, transactions, inventory, customers, or other resources authorized by the connected Squarespace account.

OAuth credentials and access tokens are stored in secured backend systems and are not placed in public browser code.

Webhook information is used to synchronize ticketing, fulfilment, attendance, customer, and related operational records. We limit the requested OAuth permissions to those reasonably necessary for the integration.

7. International processing

Some service providers may process or store information outside British Columbia or Canada, including in the United States.

Information processed in another jurisdiction may be accessible to courts, law-enforcement authorities, or governments under that jurisdiction’s laws.

Contact us if you would like additional information about our service providers or cross-border processing.

8. Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy, including:

• Providing active accounts, Passports, tickets, and event history;
• Fulfilling legal, tax, accounting, and dispute-resolution requirements;
• Maintaining consent and unsubscribe records;
• Preventing fraud and investigating security incidents.

Temporary QR credentials expire after a limited period and may be replaced whenever a new credential is generated. Expired credentials may be deleted or overwritten.

When information is no longer required, we delete, anonymize, or securely dispose of it, subject to technical and legal limitations.

9. Security

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the information.

These may include encrypted connections, access controls, short-lived authentication tokens, hashed QR credentials, server-side authorization, Row Level Security, activity logging, and restricted administrative credentials.

No method of storage or transmission is completely secure. You should protect access to your email account and avoid sharing magic links, session tokens, or QR credentials.

10. Cookies and local storage

Our website and service providers may use cookies, browser local storage, and similar technologies for:

• Authentication and session persistence;
• Shopping-cart and checkout operation;
• Security and fraud prevention;
• Preferences and functionality;
• Analytics and performance.

You may be able to control cookies through your browser. Disabling required storage may prevent login, Passport, checkout, or other features from functioning correctly.

11. Access and correction

Subject to applicable law, you may request access to personal information we hold about you and ask us to correct inaccurate information.

You may edit certain Passport information directly through your account.

To make a request, contact hello@kickdoorcomedy.com. We may need to verify your identity before responding.

12. Withdrawal of consent and deletion

You may withdraw consent where our processing depends on consent, subject to legal or contractual restrictions and reasonable notice.

You may request closure of your Passport or deletion of eligible information by contacting hello@kickdoorcomedy.com. We may retain information where required for legal, financial, fraud-prevention, security, or dispute-resolution purposes.

Withdrawing consent may affect our ability to provide certain optional services.

13. Children and minors

Our services are not directed to children under 18. We do not knowingly collect personal information from children below that age without appropriate authorization.

Event-specific age requirements may differ and will be stated in event information.

14. Privacy incidents

We investigate suspected privacy and security incidents and take appropriate containment and remediation measures.

Where required by applicable law, we will notify affected individuals and privacy regulators.

15. Third-party links

Our website may link to external websites, mapping services, social platforms, venues, or payment services. Their privacy practices are governed by their own policies.

16. Changes to this Policy

We may update this Privacy Policy to reflect changes to our services, providers, or legal obligations.

The current version will be posted with its effective date. We will provide additional notice where a change is material and notice is reasonably required.

17. Contact us

You may also have the right to contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.