BACK2NAPA - Privacy policy

Back2Napa – Privacy Policy

Effective Date: 27 October 2025

1. Who We Are

Boofie LTD (“we”, “us”, “our”) is the data controller for all personal data collected through back2napa.com.

• Company Number: HE476444

• Registered Office: Karpenisou 6, Nicosia, Cyprus

• Email: hello@back2napa.com

Our website operates on the Easol platform, provided by Easol Trading Limited, which acts as our data processor for ticketing and payment operations. Easol may also process some personal data as an independent data controller for its own legitimate business purposes—such as account management, analytics, and fraud prevention—in accordance with its own Privacy Policy.

2. Information We Collect

We may collect and process the following types of personal data:

• Name, email address, phone number, and date of birth

• Billing details and payment information (processed securely via Easol or Stripe – we never store card details)

• Booking details, including tickets, packages, and upgrades

• Device and usage data such as IP address, browser type, operating system, and cookie identifiers

Our events are strictly for adults aged 18 and over. We do not knowingly collect or process personal data relating to minors.

3. How We Use Your Information

We process your personal data to:

• Manage bookings, payments, and customer communications

• Verify identity and facilitate entry to events

• Send event-related updates and optional marketing (only if you have given consent)

• Maintain event security and prevent fraud

• Meet our legal and regulatory obligations

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us directly at hello@back2napa.com.

4. Legal Basis for Processing

We rely on the following lawful bases under the EU GDPR and Cyprus data protection law:

• Contractual necessity – to process and fulfil your booking

• Legitimate interests – for activities such as fraud prevention, security, and customer service

• Consent – for marketing and non-essential cookies

• Legal obligation – to comply with tax, accounting, and regulatory requirements

5. Sharing Your Information

We share personal data only where necessary to provide our services or comply with legal requirements. This may include sharing with:

• Easol Trading Limited – for platform hosting, ticketing, and booking management

• Stripe – for secure payment processing

• Event partners and venues – for access control, ticket validation, and upgrades

• Professional advisers or authorities – where required by law or regulation

All third parties are required to process data in accordance with the EU GDPR and maintain appropriate technical and organisational safeguards.

6. International Data Transfers

Some of our service providers (including Easol, Stripe, and Google) may transfer personal data outside the European Economic Area. When such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on the EU–US Data Privacy Framework, to maintain data protection standards equivalent to those within the EEA.

7. Cookies

We use cookies and similar technologies to enhance user experience and website functionality.

• Essential cookies – required for core site features such as checkout and account login

• Analytics cookies – used to understand visitor behaviour and improve our services

• Marketing cookies – used for optional personalised marketing, only with your consent

You can manage or withdraw your cookie preferences at any time via our on-site cookie banner.

8. Your Rights

Under applicable data protection laws, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate or incomplete data

• Request deletion of your personal data (where legally permissible)

• Restrict or object to certain types of processing

• Withdraw consent for marketing communications at any time

To exercise these rights, contact us at hello@back2napa.com. If you believe your data has been mishandled, you may also contact the Office of the Commissioner for Personal Data Protection (Cyprus).

9. Data Retention & Security

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law. When data is no longer needed, it is securely deleted or anonymised.

All booking and payment data are stored on secure servers managed by Easol Trading Limited and its sub-processors, using industry-standard encryption and access controls. All data transmitted through our website uses HTTPS encryption, and access to administrative systems is restricted to authorised personnel only.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in law, platform operations, or business practices. Any updates will be posted on this page with a new Effective Date, and material changes will be clearly communicated where required.

11. Contact

For any questions, requests, or complaints regarding this Privacy Policy or our data-handling practices, please contact:

Data Protection Officer Boofie LTD Karpenisou 6, Nicosia, Cyprus Email: hello@back2napa.com