Privacy Policy.

Information You Provide

• Newsletter & guest list signups: first and last name, email address, city, and any message content you include.
• Private booking inquiries: name, email, phone number, event type, event date, venue, estimated guest count, budget range, and any other details you provide.
• Client Portal accounts: authentication credentials, contact details, event intake information (venue contacts, timeline, must-play and do-not-play song lists, special requests), messages exchanged with us, and uploaded files where applicable.
• Contracts & electronic signatures: full legal name, signing timestamp, IP address, browser user-agent, and the executed signature record, retained as part of the signed agreement under the Electronic Signatures in Global and National Commerce Act (ESIGN) and applicable state equivalents.
• Payments: payment processing is handled by our third-party payment processor. We do not store full card numbers on our systems; we may retain transaction identifiers, last-four digits, and billing metadata for accounting and dispute purposes.

Information Collected Automatically

• Technical data: IP address, device identifiers, browser type and version, operating system, referring URLs, pages viewed, and timestamps.
• Cookies and similar technologies: first-party cookies used for authentication, session management, and basic analytics. We do not currently set third-party advertising cookies.

Information From Third Parties

If you arrive via a third-party platform (e.g., Instagram, TikTok, SoundCloud, or a ticketing provider), we may receive limited information about the referral. We do not purchase personal data from data brokers.

• To provide the Services, respond to inquiries, and fulfill bookings.
• To send newsletters, event announcements, guest list confirmations, and transactional messages related to your bookings.
• To operate the Client Portal, manage intake forms, process contracts, and coordinate event logistics.
• To prevent fraud, enforce our Terms, and protect the rights, property, and safety of Deejay Al and our clients.
• To comply with legal obligations, tax reporting, subpoenas, and lawful requests from government authorities.
• To analyze how the Site is used and improve content, performance, and user experience.

If you are located in the European Economic Area or the United Kingdom, we process personal data on the following legal bases:

• Consent — for marketing newsletters and optional communications, which you may withdraw at any time.
• Contract — to perform a contract with you, such as a booking or Client Portal engagement.
• Legitimate interests — to run, secure, and improve our business where those interests are not overridden by your rights.
• Legal obligation — to comply with laws, including tax and accounting requirements.

We do not sell personal information. We share personal information only as described below:

• Service providers: hosting, database, authentication, email delivery, analytics, and payment processors that process data on our behalf under written agreements.
• Venues and event partners: for bookings and guest list submissions, we may share the minimum information needed with the venue or event operator to confirm entry or coordinate the event.
• Professional advisors: accountants, lawyers, and insurers bound by confidentiality obligations.
• Legal & safety: when required by law, legal process, or to protect the rights, property, or safety of any person.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.

We use a small number of first-party cookies to keep you signed in to the Client Portal, to remember form state, and to measure basic site usage. You can control cookies through your browser settings; disabling them may impair certain Site features (including the Client Portal).

We honor “Global Privacy Control” signals transmitted by your browser as an opt-out of any sale or sharing of personal information under the California Consumer Privacy Act (as amended by the CPRA). We do not sell personal information as that term is defined under the CCPA.

• Newsletter subscribers: until you unsubscribe, after which we retain a suppression record to honor your opt-out.
• Booking inquiries & guest lists: up to 24 months from last activity, unless retention is required for a longer period by law or an active engagement.
• Client accounts, contracts, and intake records: at least 7 years following the event date, or longer where required for tax, legal, or dispute purposes.
• Log data: typically 90 days, longer if necessary to investigate security incidents.

All Users

You can update your profile information within the Client Portal (if you have an account), unsubscribe from marketing emails using the link in any newsletter, or contact us using the details below.

California (CCPA / CPRA)

If you are a California resident, you have the right to: (a) know the categories and specific pieces of personal information we have collected about you; (b) request deletion of your personal information; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information (we do not sell or share as those terms are defined by the CCPA); (e) limit the use of sensitive personal information; and (f) not be discriminated against for exercising these rights. You may designate an authorized agent to make requests on your behalf.

EEA & UK (GDPR)

If you are located in the EEA or UK, you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, and the right to data portability. You also have the right to lodge a complaint with your local supervisory authority.

Nevada

Nevada residents may opt out of the future sale of covered personal information. We do not currently sell personal information.

The Services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it promptly.

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, encrypted databases, access controls, and authentication on the Client Portal. No system is perfectly secure, and we cannot guarantee the absolute security of information you transmit to us.

Our service providers may process personal data in the United States and other countries. Where required, we rely on appropriate safeguards (such as the Standard Contractual Clauses) for transfers of personal data out of the EEA or UK.

The Site may link to third-party websites, including ticketing, social media, and streaming platforms. Those sites operate under their own privacy policies, and we are not responsible for their practices.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Effective” date at the top of this page and, where appropriate, provide additional notice (such as by email or a Site banner). Your continued use of the Services after the changes take effect constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or our data practices, contact us at privacy@deejayal.com.