Last Updated: November 1, 2025

Who We Are

Sunfish Events LLC ("we," "us," or "our") operates an event registration platform at www.sunfishevents.com. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

Information We Collect

Information You Provide Directly

For Event Organizers:

  • Account information (name, email, company details)

  • Payment and billing information (processed through Stripe)

  • Event details and settings you create

  • Team member information you add

For Event Attendees:

  • Registration information (name, email)

  • Payment information (processed through Stripe—we never see full card numbers)

  • Custom form responses as defined by event organizers

  • Order and transaction history

Information We Collect Automatically

  • Usage Data: How you interact with our platform (pages viewed, features used, time spent)

  • Device Information: Browser type, operating system, IP address, device identifiers

Cookies and Similar Technologies: We use essential cookies for platform functionality and optional analytics cookies (which you can disable)


Information We Receive from Third Parties

  • Payment Processing: Stripe provides transaction confirmations and basic payment method information

  • Analytics Services: Anonymized usage patterns from third-party analytics tools (when enabled)

How We Use Your Information

For Event Organizers:

  • Provide and maintain your event registration service

  • Process payments and payouts through Stripe

  • Send service-related emails (confirmations, notifications, account updates)

  • Provide customer support

  • Improve our platform and develop new features

  • Comply with legal obligations

For Event Attendees:

  • Process your event registration

  • Send confirmation emails and registration updates

  • Facilitate communication from event organizers

  • Process refunds if applicable

For Both:

  • Detect and prevent fraud and security threats

  • Analyze platform usage to improve performance

  • Comply with legal requirements

Legal Basis for Processing (GDPR)

We process personal data under these legal bases:

  • Contract Performance: To provide the registration services you've requested

  • Legitimate Interests: To improve our platform, prevent fraud, and maintain security

  • Consent: For optional analytics and marketing communications

  • Legal Obligations: To comply with tax, accounting, and regulatory requirements

How We Share Your Information

We Share Information:

With Service Providers:

  • Stripe: Payment processing (see Stripe's privacy policy)

  • Email Service Providers: To send transactional emails

  • Cloud Hosting: AWS or similar for data storage

  • Analytics Tools: Third-party analytics services (if enabled)

With Event Organizers: Attendee registration data is shared with the organizer of the event you registered for. They control how this data is used for their event.

As Required by Law: We may disclose information to comply with legal obligations, court orders, or government requests.

In Business Transfers: If we're acquired or merged, your information may transfer to the new entity.

We Never:

  • Sell your personal information to third parties

  • Share attendee data with anyone other than their event organizer

  • Use attendee information to market our platform

  • Share organizer information for third-party marketing purposes

For Event Organizers: We may send you service updates, feature announcements, and promotional communications about our platform. You can unsubscribe from marketing emails at any time while continuing to receive critical service notifications.

Data Retention

Event Organizer Data: We retain your account data while your account is active, plus 3 years after closure for financial/tax compliance.

Attendee Data: Registration data is retained for 3 years after the event date for organizer compliance and legal requirements. You can request earlier deletion (see Your Rights below).

Transaction Records: Payment records are retained for 3 years for tax and accounting compliance.

Your Rights

All Users:

  • Access: Request a copy of your personal data

  • Correction: Update inaccurate information

  • Deletion: Request deletion of your data (subject to legal retention requirements)

  • Portability: Receive your data in a machine-readable format

  • Objection: Object to processing based on legitimate interests

Event Organizers:

  • Export Data: Download all attendee data for your events

  • Delete Events: Request removal of events and associated data

Event Attendees:

  • Unsubscribe: Opt out of event organizer communications (organizers control this)

  • Update Information: Edit your registration through the confirmation link (organizers control this)

How to Exercise Your Rights:

Email us at privacy@sunfishevents.com. We'll respond within 30 days.

Data Security

We implement industry-standard security measures:

  • Encryption in transit (TLS/SSL) and at rest

  • Secure authentication for platform access

  • Limited employee access to personal data

  • Secure payment processing through PCI-compliant Stripe

No system is 100% secure. We cannot guarantee absolute security but work continuously to protect your data.

International Data Transfers

Our platform primarily serves US-based event organizers. Data is stored on servers located in United States of America. For European users, we implement appropriate safeguards for cross-border data transfers.

Children's Privacy

Our platform is not intended for children under 13. We do not knowingly collect information from children under 13. Event organizers must not collect data from children under 13 without parental consent.

California Privacy Rights (CCPA)

California residents have additional rights:

  • Know what personal information we collect and how it's used

  • Request deletion of personal information

  • Opt out of sale of personal information (we don't sell data)

  • Non-discrimination for exercising privacy rights

Changes to This Policy

We may update this Privacy Policy. Changes will be posted here with an updated "Last Updated" date. Material changes will be communicated via email to registered users.

Contact Us

Privacy Questions: privacy@sunfishevents.com
General Support: support@sunfishevents.com
Mailing Address:
Sunfish Events LLC

1447 Palm Lane

Jacksonville FL 32216

Additional Information for EU/UK Users

Data Controller: Sunfish Events LLC is the data controller for event organizer data. For attendee data, the event organizer is the controller; we act as a processor.

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.