Privacy Policy

Last updated: September 22, 2026

Great Vibe Events (“GVE,” “we,” “us,” or “our”) is a 501(c)(3) nonprofit organization (EIN 93-4241529) that provides inclusive social experiences and life skills programming for adults 18 and older. This Privacy Policy explains what personal information we collect through greatvibeevents.org and our programs, how we use it, who we share it with, and the choices and rights you have.

This policy applies to our website, event registration and ticketing, newsletters, volunteer sign-ups, donations, and related communications. If you are registering on behalf of another person — for example as a parent, caretaker, or guardian — this policy also covers the information you provide about that participant, and by submitting it you confirm you are authorized to do so.

1. Who we are and how to reach us

• Organization: Great Vibe Events, a 501(c)(3) nonprofit, EIN 93-4241529
• Website: greatvibeevents.org
• Email: info@greatvibeevents.org
• Phone: 703-774-6869
• Mailing address: available on request — email or call us and we will provide it.

For the purposes of the EU and UK General Data Protection Regulation, Great Vibe Events is the “controller” of the personal information described in this policy.

2. Information we collect

Information you provide to us directly:

• Account and contact information: name, email address, password, phone number, and mailing address.
• Event registration and ticketing: participant name, date of birth, phone, email, and address; whether the participant is self-registering or a parent, caretaker, or guardian is registering on their behalf; whether the participant will attend with a guardian or caretaker; and guardian or caretaker name, relationship, phone, and email.
• Emergency contact information: name, relationship to participant, phone, and email.
• Health and safety information: epilepsy or seizure history and related details, whether the participant requires a 1:1 attendant, whether the participant follows directions independently, allergies and details, dietary restrictions and details, and medical consent capacity.
• Releases and signatures: your acknowledgment and electronic signature on our Event Registration & Release, including your photo and likeness release choices.
• Payment information: ticket purchases and donations are processed by third-party payment providers. We receive confirmation of payment and limited billing details such as name, billing address, and the last digits and card type. We do not store full payment card numbers on our servers.
• Volunteer, sponsorship, and donor information you submit through our forms.
• Correspondence you send us by email or through contact forms.

Information collected automatically when you use our website:

• IP address, approximate location derived from it, browser and device type, operating system, language, referring page, pages viewed, links clicked, and time spent on the site.
• Information collected through cookies, pixels, local storage, and similar technologies, including technologies operated by Google Analytics and Google AdSense.

3. Health and safety information — special handling

We ask for health and safety information for one reason: to keep participants safe and properly supported at our events. We treat it with heightened care.

• We collect only what we need to staff and run an event safely, and we ask you to share only what is relevant.
• Access is limited to the staff and trained volunteers who need it to support that participant at that event, and to emergency responders if a medical emergency occurs.
• Health and safety information is never used for advertising, never used to build advertising or marketing profiles, never sold, and never shared with advertising partners or data brokers.
• We do not permit our advertising partners to target ads on our site based on health, disability, or any other sensitive characteristic.
• Under the GDPR, this is “special category” data. We process it on the basis of your explicit consent (Article 9(2)(a)) and, in an emergency, to protect vital interests (Article 9(2)(c)).
• Under US state privacy laws, this is “sensitive personal information.” We use and disclose it only for the purposes those laws permit without a separate opt-in — principally to provide the program you requested and to protect participant safety.

You may withdraw your consent to our use of health and safety information at any time by contacting us. If you do, we may be unable to safely accommodate the participant at future events, and we will tell you if that is the case.

4. How we use information, and our legal bases

• Delivering our programs — processing registrations, issuing tickets, managing attendance, and communicating about events you signed up for. Legal basis: performance of a contract.
• Participant safety and accommodations — preparing staff, arranging support, and responding to emergencies. Legal basis: explicit consent; vital interests in an emergency.
• Payments, receipts, donation acknowledgments, and nonprofit recordkeeping. Legal basis: contract and legal obligation.
• Newsletters and program announcements. Legal basis: consent. You can unsubscribe at any time using the link in any email.
• Operating, securing, and improving the website — including analytics, troubleshooting, and fraud prevention. Legal basis: legitimate interests.
• Displaying advertising on the public pages of our site. Legal basis: consent where consent is required; otherwise legitimate interests subject to your right to opt out.
• Legal compliance, insurance, and resolving disputes. Legal basis: legal obligation and legitimate interests.

5. Cookies, advertising, and your choices

We use cookies and similar technologies in four broad categories:

• Strictly necessary — sign-in, shopping cart, checkout, and security. These cannot be switched off.
• Functional — remembering preferences such as language or saved form entries.
• Analytics — understanding how visitors use the site so we can improve it.
• Advertising — delivering and measuring ads, and in some cases personalizing them.

We display advertising from Google AdSense on the public pages of our website. Google and its advertising partners use cookies and similar technologies to serve ads based on your prior visits to this and other websites. You can review how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites and how Google uses advertising cookies at policies.google.com/technologies/ads.

Your advertising choices:

• Opt out of personalized Google advertising at adssettings.google.com.
• Opt out of many participating advertising vendors at optout.aboutads.info (US) or youronlinechoices.eu (Europe).
• Use the consent or privacy settings link available on our website to change your choices at any time.
• Block or delete cookies through your browser settings. Some site features may stop working if you block strictly necessary cookies.

Visitors in the EEA, the UK, and Switzerland: we present a consent banner before any non-essential cookie is set. You may consent, refuse, or manage your choices in detail, and you can change or withdraw your choices at any time through the privacy settings link on our site.

Global Privacy Control: where required by law, we treat a Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale or sharing of personal information for that browser.

6. How we share information

• Service providers who work on our behalf: website hosting, payment processing, email delivery and contact management, event ticketing and registration, form processing, analytics, and advertising. They are permitted to use the information only to provide services to us.
• Advertising partners: when you consent, or where otherwise permitted by law, advertising identifiers, cookie data, and your activity on the public pages of our site may be shared with Google and its advertising partners to deliver, measure, and personalize advertising. Registration details, health and safety information, and emergency contact information are never included in this sharing.
• Legal and safety: when we believe disclosure is required by law or legal process, or is necessary to enforce our terms or protect the rights, property, or safety of participants, volunteers, staff, or the public.
• Organizational changes: if Great Vibe Events merges with, is acquired by, or transfers assets to another organization, or dissolves, personal information may transfer as part of that process, subject to this policy.

We do not sell participant, donor, or volunteer information for money.

7. Your rights under US state privacy laws

Depending on where you live — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws — you may have the right to:

• Know what personal information we collect, use, and disclose, and access a copy of it.
• Correct inaccurate personal information.
• Delete personal information we hold about you.
• Obtain a portable copy of information you provided to us.
• Opt out of the “sale” or “sharing” of personal information, and of targeted or cross-context behavioral advertising.
• Limit our use and disclosure of sensitive personal information.
• Not be discriminated against for exercising any of these rights. We will not deny you a program, charge you a different price, or provide a lesser experience because you exercised a privacy right.
• Appeal a decision if we decline your request.

An important note about “sale” and “sharing”: we do not exchange personal information for money. However, the advertising cookies used on the public pages of our site may qualify as “sharing” for cross-context behavioral advertising under the California Consumer Privacy Act as amended, or as “targeted advertising” under other state laws. You can opt out at any time using the privacy settings link on our site, by sending a Global Privacy Control signal from your browser, or by emailing us.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

8. Your rights in the EEA, the UK, and Switzerland

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to request access to your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to our processing; to receive your data in a portable format; and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with your local data protection supervisory authority. In the UK this is the Information Commissioner’s Office.

9. How to exercise your rights

Email us at info@greatvibeevents.org with the subject line “Privacy Request,” and tell us what you would like us to do. We may need to verify your identity before acting, and we will only use the information you provide for verification for that purpose. An authorized agent may submit a request on your behalf with written proof of authorization.

We aim to respond within 45 days for US state privacy requests and within one month for GDPR requests. If we need more time, we will tell you why and how much longer we need, within those original periods.

10. How long we keep information

• Account information: while your account is active, and for a reasonable period afterward.
• Registration, release, and health and safety information: for the program season it relates to, and then for the period our insurance and applicable law require. Health and safety details are deleted or reduced to the minimum once they are no longer needed.
• Financial, donation, and nonprofit records: for the period required by IRS and state recordkeeping rules.
• Newsletter and marketing information: until you unsubscribe, plus a suppression record so we do not email you again.
• Website and advertising cookie data: according to the retention periods set by each technology, which you can control through the choices described in Section 5.

11. How we protect information

We use encrypted connections (HTTPS) across our website, restrict access to personal information to people who need it, use reputable service providers for payments and data storage, and review access periodically. No website or method of transmission is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the appropriate authorities as required by law.

12. Children’s privacy

Our programs serve adults aged 18 and older, and our website is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. International transfers

We are based in the United States and our service providers generally store information in the United States. If you access our site from the EEA, the UK, or Switzerland, your information will be transferred to the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with additional measures, to protect that information.

14. Links to other websites

Our site and our advertising may link to websites we do not operate. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy policies.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. If the changes are material, we will provide a more prominent notice, such as an email or a notice on our homepage.

16. Contact us

Questions, concerns, or privacy requests: email info@greatvibeevents.org or call 703-774-6869. If you would prefer to write to us by mail, contact us and we will provide our mailing address.