Legal

Privacy Policy

Last updated: June 1, 2026

This Privacy Policy explains how 8PG, including its website located at 8pgevents.com and any related websites, event pages, membership portals, checkout pages, forms, applications, RSVP pages, ticketing pages, digital properties, communications, and event-related services that link to this Privacy Policy, collects, uses, discloses, stores, protects, and otherwise processes Personal Information.

For purposes of this Privacy Policy, “8PG,” “Company,” “we,” “us,” and “our” mean 8PG and its owners, officers, managers, employees, contractors, representatives, event staff, service providers, and authorized agents, as applicable. “You” and “your” mean any website visitor, applicant, member, prospective member, ticket purchaser, guest, attendee, invitee, customer, vendor contact, sponsor contact, exhibitor contact, creator, influencer, contractor, or other person who interacts with us, our website, our events, our membership process, our forms, our communications, or our services.

This Privacy Policy applies only to our privacy practices. It does not replace, limit, or modify our separate Terms of Service, Membership Agreement, Event Terms, Waivers, Purchase Terms, Ticket Terms, or other binding agreements that may apply to your use of our website, membership, event access, purchases, attendance, participation, or interactions with 8PG. Those documents may contain additional terms regarding event entry, refunds, chargebacks, conduct, media rights, releases, dispute resolution, membership access, and other contractual matters.

By accessing our website, submitting information to us, applying for membership, purchasing access, registering for an event, communicating with us, attending an event, or otherwise interacting with 8PG, you acknowledge that you have read and understand this Privacy Policy.

1. Notice at Collection

At or before the point we collect Personal Information, we collect or may collect the categories of Personal Information described in this Privacy Policy, including identifiers, contact information, transaction information, commercial information, event access information, membership information, communications information, internet and device information, approximate location information, audio, visual, electronic, or similar information, professional or business contact information, inferences, and certain Sensitive Personal Information where necessary for age verification, access control, payment processing, security, fraud prevention, event operations, or legal compliance.

We collect Personal Information for the business and commercial purposes described in this Privacy Policy, including to operate our website, process transactions, administer memberships, manage private and access-controlled events, verify age and eligibility, communicate with you, provide customer support, send event and marketing communications, manage security, prevent fraud, process payments, maintain records, enforce agreements, comply with law, and protect our rights.

We retain Personal Information for as long as reasonably necessary to fulfill the purposes for which it was collected, including legal, accounting, tax, fraud-prevention, security, dispute-resolution, chargeback-defense, event-safety, membership, and agreement-enforcement purposes, unless a longer period is required or permitted by law.

8PG may use analytics, advertising pixels, retargeting tools, social media integrations, sponsor activation tools, conversion tracking, and similar technologies. Some privacy laws may define these practices as “sale,” “sharing,” “targeted advertising,” or cross-context behavioral advertising even when no money is exchanged. Where applicable law gives you the right to opt out of sale, sharing, targeted advertising, or cross-context behavioral advertising, you may exercise that right by contacting us at info@8pgevents.com with the subject line “Privacy Choices Request,” or by using any privacy choices, cookie preference, or consent management tool made available on our website.

2. Personal Information We Collect

For purposes of this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person or household, as defined by applicable law.

Depending on how you interact with 8PG, we may collect the following categories of Personal Information.

3. Contact Information

We may collect identifiers and contact information, including:

Full name.
Email address.
Phone number.
Billing address.
Shipping address.
City, state, ZIP code, and country.
Social media handles, where provided by you.
Business name, brand name, sponsor name, vendor name, or exhibitor name, where applicable.
Emergency contact information, if collected for a specific event, vendor, staff, or operational purpose.

We use this information to communicate with you, process requests, administer memberships, manage event access, provide customer support, send event updates, operate guest lists, process purchases, verify identity, maintain records, and enforce applicable agreements.

4. Membership, Access, Ticketing, and Event Information

We may collect information relating to membership, event access, ticketing, RSVP, and attendance, including:

Membership application information.
Membership status.
Membership tier.
Access level.
Ticket type.
VIP status.
Judge, vendor, sponsor, exhibitor, creator, media, staff, or guest designation.
RSVP records.
Check-in and check-out records.
Credential, wristband, badge, QR code, RFID, guest list, or access pass information.
Event attendance history.
Event preferences.
Event participation records.
Benefit redemption records.
Waitlist information.
Guest names and guest relationships.
Denied entry, removal, suspension, ban, or access restriction records.
Communications relating to event access, attendance, rules, safety, or membership.

We use this information to operate private and access-controlled events, confirm eligibility, verify access rights, manage capacity, administer guest lists, provide benefits, improve event operations, maintain event security, prevent fraud, enforce our Terms of Service and Membership Agreement, and comply with legal obligations.

5. Age Verification and Eligibility Information

Because certain 8PG events, experiences, communications, sponsors, vendors, products, or subject matter may be cannabis-adjacent, hemp-related, cannabis-related, age-restricted, or intended only for adults, our website, membership, events, and related services are intended only for individuals who are at least 21 years of age, unless a specific event or service expressly states otherwise in writing.

We may collect information to verify age, identity, and eligibility, including:

Date of birth.
Age confirmation.
Government-issued identification information.
Photographs or scans of identification documents, if required.
Identity verification records.
Access screening records.
Credential verification records.
Attestation that you are 21 years of age or older.
Records showing that age or identity verification was completed, failed, declined, or disputed.

We use this information to verify eligibility, comply with applicable laws and event rules, prevent underage access, maintain event safety, enforce access controls, and document compliance.

We do not knowingly collect Personal Information from individuals under 21 for age-restricted services, events, memberships, or communications. If we learn that we have collected Personal Information from an individual who is not eligible to use our services or attend our events, we may delete, restrict, or retain limited information as reasonably necessary to document the issue, prevent future unauthorized access, comply with law, or protect our legal rights.

6. Biometric, Facial Recognition, and Automated Verification Information

8PG does not knowingly use facial recognition, biometric identification, fingerprinting, retinal scanning, voiceprint identification, or automated biometric identity verification unless expressly disclosed before collection and permitted by applicable law.

If 8PG uses an identity verification, age verification, security screening, ticketing, credentialing, fraud-prevention, or access-control vendor that processes photographs, government identification, facial images, document scans, liveness checks, or similar information, that information will be used only for verification, fraud prevention, security, access control, legal compliance, event safety, or enforcement purposes, unless otherwise disclosed or required by law.

8PG does not use biometric information to create a permanent biometric profile for advertising, behavioral targeting, or unrelated commercial sale. Any biometric or automated verification information, if collected, will be retained only as long as reasonably necessary for the disclosed purpose, legal compliance, security, fraud prevention, dispute resolution, event safety, agreement enforcement, or as otherwise permitted by applicable law.

If applicable law requires specific consent, notice, retention schedules, deletion rights, or vendor controls for biometric, facial recognition, or automated identity verification practices, 8PG will follow those requirements before using those technologies.

7. Purchase, Payment, Billing, and Transaction Information

When you make a purchase, reserve access, pay a deposit, buy merchandise, purchase a ticket, obtain a membership, purchase an upgrade, or complete any other transaction, we may collect or receive transaction-related information, including:

Purchase history.
Order number.
Transaction date.
Product, ticket, pass, membership, upgrade, merchandise, or service purchased.
Amount paid.
Billing and shipping information.
Payment method type.
Last four digits of a payment card, where provided by a processor.
Payment processor transaction IDs.
Receipts.
Refund, cancellation, dispute, chargeback, reversal, or fraud-prevention records.
Tax, accounting, and compliance records.

We use third-party payment processors and commerce platforms to process payments. We do not intentionally store full payment card numbers on our own servers. Payment information may be collected, processed, stored, and secured by third-party payment processors according to their own terms and privacy policies. We may receive and retain transaction metadata, payment confirmation records, receipts, processor communications, fraud alerts, dispute records, and other information necessary for accounting, customer service, legal compliance, fraud prevention, chargeback defense, collections, and enforcement of our agreements.

8PG operates premium private events and experiences that may involve cannabis culture, cannabis adjacent products, hemp derived products, accessories, sponsors, vendors, exhibitors, hospitality areas, lounges, demonstrations, product education, lifestyle activations, and age restricted subject matter.

Depending on the event or interaction, we may collect information relating to:

Event interests.
Vendor, sponsor, exhibitor, or brand interactions.
Product interests.
Sample, gift, giveaway, or promotional redemption records, where lawful and applicable.
Lounge, VIP, judge, or access-tier participation.
Cannabis-adjacent or hemp-related event preferences.
Responses to surveys, forms, polls, or feedback requests.
Communications with event staff, vendors, sponsors, or 8PG representatives.

We use this information to operate events, manage access, improve programming, personalize communications, administer promotions, comply with applicable law, maintain safety, prevent misuse, and document event operations.

We do not use this Privacy Policy to provide medical, legal, therapeutic, or consumption advice. Any contractual disclaimers, participant obligations, product disclaimers, or event-specific rules are governed by our separate Terms of Service, Membership Agreement, Event Terms, Waivers, or other applicable agreements.

9. Communications Information

We may collect information when you communicate with us, including:

Emails.
Text messages.
Phone calls.
Voicemails.
Direct messages.
Website form submissions.
Customer service requests.
Support tickets.
Dispute communications.
Membership communications.
Event communications.
Survey responses.
Feedback.
Reviews.
Testimonials.
Social media messages or comments directed to us.

We use this information to respond to inquiries, provide support, administer memberships and events, send updates, maintain business records, resolve disputes, enforce agreements, investigate fraud or misuse, improve services, and protect our legal rights.

10. Email, SMS, Phone, and Marketing Communications

We may use your contact information to send transactional, operational, informational, promotional, and marketing communications, including:

Membership updates.
Event announcements.
Ticketing and access updates.
Guest list confirmations.
Security, safety, weather, parking, transportation, schedule, venue, or access notices.
Purchase confirmations.
Customer service messages.
Newsletter communications.
Sponsor, vendor, partner, or promotional announcements.
Abandoned checkout reminders.
VIP, member, or access-related communications.

8PG does not currently send SMS marketing or transactional text messages. If you opt in to SMS communications in the future, you will be able to manage that preference via the methods provided at opt-in, including reply STOP to cancel and reply HELP for help. Where SMS becomes available, message frequency may vary, message and data rates may apply, and consent to receive marketing text messages will not be a condition of purchase.

You may opt out of marketing emails by using the unsubscribe link provided in marketing emails or by contacting us at info@8pgevents.com.

Even if you opt out of marketing communications, we may still send transactional, legal, operational, safety, event access, purchase, membership, security, or account-related communications where permitted by law.

11. Website, Device, Internet, and Usage Information

When you access our website or digital properties, we may automatically collect internet, device, and usage information, including:

IP address.
Device type.
Browser type.
Operating system.
Mobile device identifiers.
Pages viewed.
Links clicked.
Referring URLs.
Search terms.
Approximate location derived from IP address.
Session duration.
Date and time of access.
Error logs.
Interaction data.
Checkout behavior.
Form activity.
Cookie identifiers.
Analytics identifiers.
Advertising identifiers.

We use this information to operate the website, improve performance, measure engagement, detect fraud, prevent abuse, troubleshoot errors, understand traffic sources, improve user experience, measure marketing campaigns, secure our systems, and support business analytics.

12. Cookies, Pixels, Analytics, Retargeting, and Tracking Technologies

We and our service providers may use cookies, pixels, tags, beacons, scripts, SDKs, local storage, session replay tools, analytics tools, advertising tools, retargeting tools, conversion tracking technologies, social media plugins, embedded content, and similar technologies to collect information about your interactions with our website, communications, advertisements, event pages, checkout flows, and digital properties.

These technologies may be used to:

Operate the website.
Remember preferences.
Maintain sessions.
Improve site performance.
Analyze traffic.
Measure campaign effectiveness.
Understand audience behavior.
Detect fraud or misuse.
Personalize content.
Retarget advertising.
Deliver or measure targeted advertising.
Measure conversions.
Support social media integrations.
Improve event and membership marketing.

We use the following third-party services. Each is operated under our processor or service-provider agreement; categories of Personal Information shared are described in §17. Full vendor list, purposes, and privacy-policy links are in §17a.

Vendor	Purpose	Data shared	Set cookies
Cloudflare (Pages, Workers, Turnstile, edge security)	Hosting, bot protection, edge logging	IP, User-Agent, country, request URL, response code	Short-lived first-party cookies on `challenges.cloudflare.com` for the Turnstile challenge widget; Cloudflare `cf_*` security/anti-bot cookies may be set at the edge
Google LLC (Google Analytics 4)	Aggregate site analytics with anonymized IP	Anonymized IP, page URL, referrer, screen size, language, client ID	`_ga` (2 years, first-party), `_ga_<container>` (2 years, first-party)
Meta Platforms, Inc. (Meta Pixel)	Browser-side advertising attribution	Pixel ID, page URL, custom conversion events	`_fbp` (90 days, first-party), `_fbc` (90 days, set when arriving via fbclid), `fr` (third-party, set by facebook.com if you are logged in there)
Meta Platforms, Inc. (Conversions API / CAPI)	Server-side advertising attribution and ad measurement. This is a server-side data flow that sends hashed contact identifiers to Meta from our servers, in addition to or instead of the browser Pixel.	Hashed (SHA-256) email, hashed phone digits, IP, User-Agent, browser cookies `_fbp` / `_fbc` if present, event metadata	None (server-to-server)
Airtable, Inc.	Primary records store for form submissions and KOJ event data	Full form payload including IP and User-Agent per record	None
Resend, Inc.	Transactional email delivery and managed marketing audience	Recipient email, first/last name, message content, unsubscribed flag	None

12b. Cookies and Local Storage

The following cookies and browser-storage items may be set on a typical visit. First-party items are set under the 8pgevents.com domain; third-party items are set by another domain operating in your browser.

Name	Purpose	Duration	First / third party
`_ga`	GA4 client identifier (analytics)	2 years	First-party
`_ga_<container>`	GA4 session stitching	2 years	First-party
`_fbp`	Meta browser identifier for advertising attribution	90 days	First-party
`_fbc`	Meta click identifier, set when you arrive via an `fbclid` URL parameter	90 days	First-party
`fr`	Meta cross-site advertising identifier, only if you are logged in to facebook.com	~90 days	Third-party (facebook.com)
`cf_*` (e.g., `__cf_bm`, `cf_clearance`)	Cloudflare security, bot management, and rate-limit cookies set at the edge	Session to 30 days	First-party
`challenges.cloudflare.com` iframe cookies	Cloudflare Turnstile challenge state during anti-bot verification	Session	Third-party (challenges.cloudflare.com)
`oauth_state`	CSRF protection for the internal Google OAuth setup flow (only on `/api/oauth/`)	10 minutes, HttpOnly	First-party
`8pg_cart_v1` (localStorage)	Shopping cart contents while you browse; no Personal Information stored	Until cleared or order submitted	First-party local storage
`8pg_last_order_v1` (sessionStorage)	Order reference + first name + email used to render the confirmation page after a reservation	Until you close the browser tab	First-party session storage
`koj_judge_id` (localStorage)	8-character Judge ID credential for the KOJ Judges Portal (invited judges only)	Until cleared	First-party local storage

You may clear cookies or block third-party cookies through your browser settings. Blocking Turnstile or Cloudflare cookies may prevent forms from submitting; blocking GA4 or Meta cookies will prevent analytics and advertising measurement only.

You may be able to control cookies through your browser settings. Some browsers or extensions allow you to send privacy preference signals, including Global Privacy Control or similar signals. Where applicable law requires us to recognize such signals, we will process them in accordance with applicable law.

If applicable law gives you the right to opt out of sale, sharing, targeted advertising, cross-context behavioral advertising, or similar data practices, you may exercise that right by contacting us at info@8pgevents.com with the subject line “Privacy Choices Request,” or by using any privacy choices, cookie preference, or consent management tool made available on our website.

12a. Do Not Track Signals

Do Not Track signals. Our website does not respond to “Do Not Track” (DNT) browser signals because no industry consensus exists on how to interpret them. We DO honor the Global Privacy Control (Sec-GPC) signal as described in §18 and CCPA Reg §7025.

13. Photos, Video, Audio, Surveillance, and Event Media

8PG events, private venues, activations, hospitality areas, lounges, entrances, parking areas, check-in areas, vendor areas, performance areas, and related spaces may be photographed, filmed, livestreamed, recorded, monitored, or otherwise captured by 8PG, venue operators, sponsors, vendors, media teams, security providers, attendees, creators, or third parties.

As part of event operations, we may collect or process:

Photographs.
Video recordings.
Audio recordings.
Livestream footage.
Security camera footage.
Event recap footage.
Social media content.
Crowd images.
Check-in images.
Credential or badge images.
Incident-related footage.
Venue access footage.

We may use event media and related information for event operations, security, safety, access control, incident investigation, marketing, publicity, social media, archival records, sponsor reporting, business development, and enforcement of applicable agreements.

This Privacy Policy discloses our privacy practices relating to event media. Separate rights, releases, permissions, commercial use rights, and restrictions relating to your name, image, likeness, voice, content, recordings, or attendance may be governed by our Terms of Service, Membership Agreement, Event Terms, Waivers, posted event notices, ticket terms, or other agreements.

14. Security, Incident, and Safety Information

We may collect information related to event safety, access control, security, and incident response, including:

Bag check records.
Screening records.
Access denial records.
Removal or ejection records.
Incident reports.
Accident reports.
Guest conduct reports.
Security communications.
Law enforcement communications.
Medical or emergency response information, if voluntarily provided or reasonably necessary during an incident.
Lost property reports.
Theft reports.
Venue damage reports.
Transportation, parking, valet, or shuttle-related reports.

We use this information to maintain safety, investigate incidents, enforce event rules and agreements, respond to emergencies, cooperate with venue operators or law enforcement where appropriate, document claims, prevent future incidents, and protect our legal rights.

15. Information From Third Parties

We may collect Personal Information from third parties, including: ticketing platforms, payment processors, event platforms, membership platforms, marketing platforms, email service providers, SMS providers, analytics providers, advertising platforms, retargeting platforms, social media platforms, sponsors, vendors, exhibitors, co-hosts, promoters, venue operators, security providers, ID verification providers, fraud-prevention providers, shipping and fulfillment providers, professional advisors, public databases, publicly available social media profiles, and people who refer, invite, purchase for, or register guests.

We may combine information received from third parties with information we collect directly from you.

16. How We Use Personal Information

We may use Personal Information for the following business and operational purposes:

To operate our website.
To process membership applications.
To administer memberships.
To manage access-controlled events.
To process purchases and transactions.
To provide tickets, passes, credentials, RSVPs, guest list access, VIP access, judge access, vendor access, sponsor access, or other event-related access.
To verify age, identity, eligibility, and access rights.
To communicate with you.
To send transactional, operational, legal, safety, and marketing communications.
To provide customer support.
To operate private events and venues.
To coordinate security, check-in, credentialing, parking, transportation, and event logistics.
To administer promotions, giveaways, surveys, feedback requests, and event benefits.
To personalize website, event, membership, and communication experiences.
To analyze website traffic and campaign performance.
To retarget advertising, deliver advertising, measure advertising effectiveness, and improve marketing.
To improve services, events, and user experience.
To maintain accounting, tax, and transaction records.
To detect, investigate, prevent, or respond to fraud, chargebacks, unauthorized access, misuse, security incidents, misconduct, or violations of our agreements.
To enforce our Terms of Service, Membership Agreement, Event Terms, purchase terms, policies, waivers, and other agreements.
To protect our rights, property, safety, members, guests, staff, vendors, venues, sponsors, and the public.
To comply with legal obligations.
To respond to lawful requests from courts, regulators, law enforcement, or government authorities.
To establish, exercise, or defend legal claims.
To complete a business transaction, such as a merger, acquisition, financing, restructuring, sale of assets, or transfer of business operations.
To use information for any other purpose disclosed at the time of collection or with your consent.

17. How We Disclose Personal Information

We may disclose Personal Information to the following categories of recipients.

17.1 Service Providers and Contractors

We may disclose Personal Information to service providers and contractors that perform services for us, including: website hosting providers, cloud storage providers, payment processors, ticketing platforms, membership platforms, email service providers, SMS providers, CRM providers, analytics providers, advertising and marketing providers, retargeting providers, security providers, ID verification providers, event production providers, credentialing providers, customer support providers, shipping and fulfillment providers, fraud-prevention providers, professional advisors, IT providers, and data storage and backup providers.

These parties may access Personal Information as needed to provide services to us and are expected to process such information in accordance with applicable contractual and legal obligations.

We may disclose Personal Information to event-related partners where reasonably necessary for event operations, safety, access, fulfillment, programming, marketing measurement, sponsor activation, or benefit administration, including: venue operators, security teams, check-in teams, production teams, parking, valet, shuttle, or transportation providers, caterers, sponsors, vendors, exhibitors, co-hosts, promoters, media teams, hospitality teams, and emergency response personnel.

We may disclose only the information reasonably necessary for the relevant operational purpose, such as guest list management, credentialing, event access, VIP access, sponsor activation, vendor coordination, safety, incident response, fulfillment of event-related benefits, or lawful marketing measurement.

17.3 Legal, Compliance, Safety, and Enforcement Disclosures

We may disclose Personal Information when we believe disclosure is necessary or appropriate to:

Comply with applicable law.
Respond to subpoenas, court orders, legal process, or government requests.
Cooperate with law enforcement, regulators, or public authorities.
Protect the safety of guests, members, staff, vendors, sponsors, venues, or the public.
Investigate fraud, chargebacks, misuse, unauthorized access, illegal activity, misconduct, or violations of our agreements.
Enforce our Terms of Service, Membership Agreement, Event Terms, purchase terms, waivers, or other agreements.
Protect our rights, property, business, reputation, operations, and legal interests.
Establish, exercise, or defend legal claims.

17.4 Business Transactions

We may disclose or transfer Personal Information in connection with an actual or proposed merger, acquisition, financing, investment, sale, transfer, restructuring, bankruptcy, dissolution, or other business transaction involving all or part of our business, assets, membership operations, event operations, brand assets, or digital properties.

We may disclose Personal Information when you direct us to do so, consent to the disclosure, participate in a co-branded event or sponsor activation, register through a third-party platform, interact with a vendor or sponsor, submit information through a partner form, or otherwise authorize the disclosure.

17a. Vendors and Sub-processors

The following third parties receive Personal Information from 8PG in their capacity as service providers, processors, or advertising partners. Each link goes to the vendor’s own privacy policy, which governs how they process the data we share with them.

Vendor	Purpose	Categories of Personal Information shared	Vendor privacy policy
Cloudflare, Inc.	Website hosting, edge security, Cloudflare Pages Functions, Cloudflare Turnstile invisible bot challenge	IP address, User-Agent, country code, request URL, response code, TLS metadata; Turnstile behavioral signals during anti-bot challenge	cloudflare.com/privacypolicy
Google LLC	Google Analytics 4 (aggregate site analytics with anonymized IP)	Anonymized IP, page URL, referrer, screen size, language, GA4 client identifier, custom event metadata	policies.google.com/privacy
Meta Platforms, Inc.	Meta Pixel (browser-side advertising attribution) and Meta Conversions API / CAPI (server-side advertising measurement)	Pixel identifier, PageView and conversion events; for CAPI, SHA-256 hashed email, SHA-256 hashed phone digits, IP, User-Agent, `_fbp`/`_fbc` browser cookies, event metadata	meta.com/privacy/policy
Airtable, Inc.	Primary CRM and form-submission records store (membership, contact, competitor application, reservation, KOJ judging)	Full form payload submitted by you, including name, email, phone (where collected), shipping address (reservations), IP address, and User-Agent	airtable.com/privacy
Resend, Inc.	Transactional email delivery (welcome, confirmation, reservation receipts, internal notifications) and managed marketing audience (unsubscribe handling)	Recipient email, first name, last name, message content, tags, unsubscribed flag	resend.com/legal/privacy-policy

Do we sell your Personal Information for money? No. 8PG does not sell Personal Information for money or other monetary consideration.

Do we share your Personal Information for cross context behavioral advertising? Yes. 8PG engages in cross context behavioral advertising. Specifically, 8PG loads the Meta Pixel and Google Analytics 4 in your browser, and 8PG sends limited hashed identifiers (SHA-256 hashes of your email address and, where collected, your phone number) together with your IP address and User Agent to Meta Platforms, Inc. through the Meta Conversions API for advertising measurement and attribution. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, these activities constitute “sharing” for “cross context behavioral advertising,” even though no money changes hands.

Your right to opt out

You have the right to opt out of this sharing. You may exercise that right in any of the following ways, and 8PG will honor your opt out for the device, browser, or identity to which it applies:

Submit a request through the Do Not Sell or Share My Personal Information page. This is the primary opt out path for members and visitors.
Send a Global Privacy Control signal. 8PG honors the Global Privacy Control signal (Sec-GPC HTTP header and navigator.globalPrivacyControl JavaScript property) as a valid opt out of sale and sharing for California residents under CCPA Reg §7025. Browsers and extensions including Brave, DuckDuckGo, Firefox, and the GPC browser extension can send this signal automatically.
Email 8PG. Send a request to info@8pgevents.com with the subject line “Do Not Sell or Share My Personal Information.” Include the email address you submitted to 8PG so 8PG can apply your opt out.
Use in browser controls. You may also block third party trackers using your browser’s privacy settings or a tracker blocking extension.

8PG will honor legally required opt out preference signals as required by applicable law. 8PG does not knowingly sell or share Personal Information of individuals under 16.

19. Sensitive Personal Information

Depending on your interaction with us, we may collect information that may be considered sensitive under certain privacy laws, including:

Government-issued identification information.
Age verification information.
Account login credentials, if accounts are provided.
Payment-related information processed by payment providers.
Approximate location (country level) derived from your IP address by our hosting provider, Cloudflare. We do not collect precise geolocation (street-level GPS or similar) from any form, page, or service in the current site.
Security or incident-related information.
Information relating to event access at age-restricted, cannabis-adjacent, hemp-related, or cannabis-related experiences.

We use Sensitive Personal Information only for purposes reasonably necessary to provide requested services, verify eligibility, maintain safety and security, process transactions, comply with law, prevent fraud, administer events, enforce agreements, and protect our legal rights, unless otherwise disclosed or permitted by law.

We do not use or disclose Sensitive Personal Information for purposes that would require a separate “Limit the Use of My Sensitive Personal Information” link under California law unless we provide that link or another legally required method for exercising that right.

Where applicable law gives you the right to limit the use or disclosure of Sensitive Personal Information, you may exercise that right by contacting us at info@8pgevents.com with the subject line “Sensitive Information Request.”

20. Data Retention

We retain Personal Information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods are based on the nature of the information, the purpose for which it was collected, operational need, legal risk, applicable law, and our legitimate business requirements. In general:

Contact, membership, access, ticketing, and event attendance records may be retained for as long as needed to administer membership, manage access, document attendance, enforce agreements, resolve disputes, and maintain accurate business records.
Transaction, payment metadata, accounting, tax, refund, chargeback, and dispute records may be retained for as long as needed for accounting, tax, fraud-prevention, chargeback-defense, collections, audit, and legal purposes.
Age verification, ID verification, security screening, incident, removal, banned guest, and access-control records may be retained for as long as needed to verify compliance, protect event safety, prevent unauthorized access, document incidents, enforce agreements, and defend legal claims.
Marketing and communications records may be retained until you opt out, request deletion where applicable, or until retention is no longer reasonably necessary for our business, legal, or compliance purposes.
Website, analytics, cookie, advertising, retargeting, and device data may be retained according to our analytics, security, marketing, advertising, and platform settings, unless a shorter or longer period is required or permitted by law.

We may retain certain records after your relationship with us ends where reasonably necessary for legal compliance, accounting, fraud prevention, dispute resolution, enforcement of agreements, safety, security, archival, or legitimate business purposes.

20a. Specific Retention Periods

The following table sets out our current retention practice for the principal categories of Personal Information we hold. Where a specific number is not stated, retention is governed by the vendor’s own policy and the criteria described above.

Data category	Retention period
Form submissions stored in Airtable (membership signups, contact form, competitor applications, reservations, KOJ judging)	Retained indefinitely, until you request deletion at info@8pgevents.com or our business purpose for retention ends, whichever is sooner. Records are reviewed periodically and pruned per operational and legal need.
Email marketing audience records in Resend	Retained until you unsubscribe (one-click unsubscribe or email request); after unsubscribe, an “unsubscribed” flag is retained to honor your opt-out.
Transactional email send logs in Resend	Approximately 90 days for delivery metadata, per Resend’s own retention policy.
Google Analytics 4 user-level data	14 months (the GA4 default user-data retention setting). Aggregate reporting may persist beyond that window.
Meta Conversions API event data	Per Meta’s published retention for hashed advertising events (currently up to approximately 7 days for ad optimization, with aggregate measurement retained longer).
Cloudflare edge access logs (IP, country, request URL, response code)	Approximately 7 to 30 days, per the active Cloudflare plan retention.
Cloudflare Pages Functions runtime logs	Approximately 24 hours of live tail, unless extended via Workers Logpush.
Tax, accounting, transaction, and chargeback records	Up to 7 years to satisfy California and federal tax-records retention requirements and chargeback-defense windows.
Security, incident, and access-control records	As long as reasonably necessary for safety, incident investigation, agreement enforcement, and defense of legal claims; typically 3 years post-incident.
Age verification and ID verification records	As long as reasonably necessary to document compliance and defend access-control decisions.

Where applicable law requires a shorter or longer period, the legally required period controls. You may request deletion of Personal Information by contacting info@8pgevents.com; we may retain information that is necessary for legal compliance, fraud prevention, dispute resolution, chargeback defense, accounting, security, agreement enforcement, or legal claims.

21. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, acquisition, loss, misuse, disclosure, alteration, and destruction.

Our safeguards may include, where appropriate, internal access controls, vendor review, risk assessment, employee or contractor controls, data minimization, secure storage practices, incident response procedures, and reasonable technical protections.

No website, system, database, payment platform, transmission method, or storage technology can be guaranteed to be completely secure. You are responsible for using secure networks, maintaining the confidentiality of your login credentials where applicable, and promptly notifying us if you believe your information or account has been compromised.

If we become aware of a data security incident involving Personal Information, we will evaluate the incident and provide notices where required by applicable law.

22. New York Privacy and Security Notice

If you are a New York resident, this Privacy Policy applies to Personal Information and private information we collect, use, disclose, retain, or protect in connection with your interactions with 8PG.

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information and private information against unauthorized access, acquisition, loss, misuse, disclosure, alteration, and destruction.

Where required by New York law, we will provide notice of a qualifying security breach involving private information to affected New York residents and applicable New York authorities.

8PG does not knowingly use facial recognition, biometric identification, fingerprinting, retinal scanning, voiceprint identification, or automated biometric identity verification for New York residents unless expressly disclosed before collection and permitted by applicable law.

If 8PG uses a vendor that processes photographs, government identification, facial images, document scans, liveness checks, or similar information for New York residents, that information will be used only for verification, fraud prevention, security, access control, legal compliance, event safety, or enforcement purposes, unless otherwise disclosed or required by law.

8PG does not use biometric information of New York residents to create a permanent biometric profile for advertising, behavioral targeting, or unrelated commercial sale. Any biometric or automated verification information, if collected, will be retained only as long as reasonably necessary for the disclosed purpose, legal compliance, security, fraud prevention, dispute resolution, event safety, agreement enforcement, or as otherwise permitted by applicable law.

New York residents may contact us at info@8pgevents.com to request information about our privacy practices or to submit a privacy-related request. We may verify your identity before processing your request and may deny or limit requests where permitted by law, including where retention is reasonably necessary for security, fraud prevention, accounting, dispute resolution, legal compliance, event safety, agreement enforcement, or legal claims.

Our website, membership, events, and related services are intended for individuals who are at least 21 years of age, unless a specific non-age-restricted offering expressly states otherwise. We do not knowingly direct age-restricted services to minors, and we do not knowingly collect, sell, or share Personal Information of minors in connection with age-restricted services.

23. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your Personal Information. These rights may include:

The right to know what Personal Information we collect, use, disclose, sell, or share.
The right to access Personal Information.
The right to request deletion of Personal Information.
The right to request correction of inaccurate Personal Information.
The right to receive a copy of Personal Information in a portable format.
The right to opt out of sale, sharing, targeted advertising, or cross-context behavioral advertising.
The right to limit use and disclosure of Sensitive Personal Information, where applicable.
The right to withdraw certain consents, where applicable.
The right to opt out of marketing communications.
The right to appeal a denied privacy request, where applicable.
The right not to receive discriminatory treatment for exercising privacy rights.

To exercise privacy rights, contact us at: info@8pgevents.com. Please include “Privacy Request” in the subject line and describe the right you are requesting to exercise.

We may need to verify your identity before processing certain requests. Verification may require you to provide information sufficient for us to reasonably confirm that you are the person about whom we collected Personal Information or that you are authorized to act on that person’s behalf.

We may deny, limit, or refuse a request where permitted by law, including where we cannot verify the request, where retention is required or permitted by law, where deletion would interfere with legal obligations, fraud prevention, dispute resolution, chargeback defense, security, event safety, accounting, enforcement of agreements, or legal claims.

24. Authorized Agents

Where applicable law permits you to use an authorized agent to submit a privacy request, we may require the authorized agent to provide proof that you gave the agent signed permission to submit the request on your behalf.

We may also require you to verify your identity directly with us or confirm directly with us that you authorized the agent to submit the request.

We may deny a request from an agent who does not provide adequate proof of authorization or where we cannot verify the request as required or permitted by applicable law.

25. Appeals

If applicable law gives you the right to appeal our decision on a privacy request, you may submit an appeal by contacting us at info@8pgevents.com with the subject line “Privacy Appeal.”

Your appeal should include your name, contact information, the original request, the reason you believe our decision should be reconsidered, and any additional information you want us to review.

We will review and respond to appeals within the time required by applicable law. If your appeal is denied, you may have the right to contact your state attorney general or applicable privacy regulator.

26. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act and implementing regulations.

Subject to applicable limitations, California residents may have the right to:

Know the categories of Personal Information we collect.
Know the categories of sources from which Personal Information is collected.
Know the business or commercial purposes for collecting, using, disclosing, selling, or sharing Personal Information.
Know the categories of third parties to whom Personal Information is disclosed.
Access specific pieces of Personal Information.
Delete Personal Information.
Correct inaccurate Personal Information.
Opt out of sale or sharing of Personal Information.
Limit the use and disclosure of Sensitive Personal Information, where applicable.
Receive equal service and price and not be discriminated against for exercising privacy rights.
Use an authorized agent to submit requests, subject to verification.

To exercise California privacy rights, contact us at:

Email: info@8pgevents.com
Mail: 8PG, 2218 E Anaheim Street, Long Beach, CA 90804

Where applicable law gives you the right to opt out of sale, sharing, targeted advertising, or cross-context behavioral advertising, you may exercise that right by contacting us at info@8pgevents.com with the subject line “Privacy Choices Request,” or by using any privacy choices, cookie preference, or consent management tool made available on our website.

27. California Categories of Personal Information Collected

During the preceding 12 months, we may have collected the following categories of Personal Information:

Identifiers: name, email address, phone number, billing address, shipping address, IP address, account identifiers, ticket identifiers, membership identifiers, cookie identifiers, advertising identifiers, device identifiers, and similar information.
Personal information described in California Civil Code Section 1798.80: contact information, payment-related information, transaction records, and customer records.
Protected classification characteristics under California or federal law: age or date of birth where required for eligibility, access, compliance, or age verification.
Commercial information: purchase history, membership history, ticket history, merchandise purchases, event attendance records, benefit redemption records, transaction records, and customer service records.
Internet or other electronic network activity information: website usage, browser information, device information, cookies, analytics data, advertising interaction data, referring URLs, interaction data, and similar information.
Geolocation data: approximate location (country level) derived from IP address by our hosting provider Cloudflare. We do not collect precise geolocation.
Audio, electronic, visual, or similar information: photos, videos, audio recordings, event footage, livestreams, security footage, customer service communications, and voicemail.
Professional or employment-related information: business, vendor, sponsor, exhibitor, creator, influencer, contractor, media, or professional contact information where relevant.
Inferences: preferences, interests, event interests, membership interests, marketing segments, and similar information derived from interactions with us.
Sensitive Personal Information: government ID information, account credentials, payment-related information handled by processors, and age verification information, where applicable.

We collect these categories for the purposes described in this Privacy Policy.

28. State Privacy Rights Outside California

Residents of certain U.S. states may have privacy rights under state consumer privacy laws. Depending on your state of residence and subject to applicable legal limitations, these rights may include the right to access, confirm processing, correct, delete, obtain a portable copy, opt out of targeted advertising, opt out of sale of Personal Information, opt out of certain profiling, appeal a denied request, or exercise other rights provided by applicable law.

We will process state privacy requests in accordance with the law that applies to the requesting consumer and to 8PG. If a state privacy law does not apply to 8PG, or if an exception applies, we may deny or limit the request as permitted by law.

To submit a state privacy request, contact us at info@8pgevents.com with the subject line “State Privacy Request.”

29. Notice of Financial Incentives, Membership Benefits, and Event Perks

8PG may offer memberships, event access, VIP opportunities, giveaways, promotional benefits, loyalty-style perks, member communications, early access, private invitations, sponsor activations, or other benefits that may require the collection of Personal Information such as name, email address, phone number, membership status, purchase history, event attendance, preference information, or engagement information.

We use this information to administer the applicable membership, access, promotion, benefit, invitation, giveaway, or event-related opportunity. The value of any benefit may vary depending on the nature of the offer, the event, the membership tier, the sponsor activation, operational costs, and the relationship between the benefit and the information needed to provide it.

Participation in such benefits is voluntary. You may withdraw from marketing communications at any time, but withdrawal may limit our ability to provide certain optional communications, invitations, promotional opportunities, or benefits that depend on communication or eligibility verification.

This section is intended to provide notice where a membership benefit, promotional program, loyalty-style offer, giveaway, or event perk may be considered a financial incentive or price or service difference under applicable privacy law.

30. Sources of Personal Information

We may collect Personal Information from: you directly, your device or browser, your purchases, your membership application, your event registrations, your event attendance, your communications with us, payment processors, ticketing platforms, membership platforms, marketing platforms, email and SMS providers, analytics providers, advertising and retargeting platforms, social media platforms, sponsors, vendors, exhibitors, co-hosts, event partners, venue operators, security providers, ID verification providers, fraud-prevention providers, publicly available sources, and people who register, invite, refer, purchase for, or attend with you.

31. Categories of Recipients

We may disclose Personal Information to: service providers, contractors, payment processors, ticketing platforms, membership platforms, email and SMS providers, analytics providers, advertising and retargeting providers, hosting and cloud service providers, fraud-prevention providers, ID verification providers, security providers, event production providers, venue operators, sponsors, vendors, exhibitors, co-hosts, event partners, shipping and fulfillment providers, professional advisors, law enforcement, regulators, courts, or public authorities where legally appropriate, and successors or parties involved in a business transaction.

31a. Hemp Derived Cannabinoid Products

8PG operates as a members only private club. Certain member benefit kits (including the Judges Kit and the High Roller kit for King of Jars events) include hemp derived cannabinoid products that are distributed to members in accordance with applicable California law. This section describes the additional Personal Information 8PG collects to support member age verification, lawful delivery, and chargeback defense for kits that include hemp derived products.

Categories of Personal Information collected for kit orders. When you reserve, redeem, or accept delivery of a member benefit kit that includes a hemp derived product, 8PG may collect: your full legal name; member identifier and tier; date of birth and an attestation that you are 21 years of age or older; an attestation that you acknowledge the certificate of analysis (COA) and third party lab test results made available by 8PG on request; shipping or delivery address; phone number for delivery coordination; government issued photo identification reviewed at the point of delivery (visual confirmation by the courier or carrier, not retained in image form unless required by law); and delivery confirmation records, which include a photograph of the delivered kit at the doorstep or in the member’s hands and an electronic signature captured at delivery.

Why 8PG retains photograph and signature. The delivery photograph and signature are retained as compelling evidence to defend against payment card chargebacks under the card network rules (Visa, Mastercard, American Express, Discover) and to document that the member was 21 or older and received the kit. Without this record, 8PG cannot effectively dispute friendly fraud or “item not received” claims on member benefit kits.

Retention. 8PG retains delivery confirmation records (including the photograph and signature) for up to seven years from the date of delivery, consistent with payment card chargeback defense windows and California tax records retention. Age attestation, COA acknowledgment, and member identifier records are retained for the life of the membership plus seven years.

Third party recipients. 8PG does not share kit order Personal Information with any third party other than (a) the licensed common carrier used for shipments to far northern California, where Farm Bill compliance documentation (COA, lab tests, member age attestation, shipping address) is provided to the carrier as required by the carrier’s tender requirements, and (b) 8PG’s own private courier for local California deliveries, who receives only the member name, delivery address, phone number, and kit contents. Kit order Personal Information is not used for advertising or shared with Meta, Google, or any analytics vendor.

Lawful basis. 8PG distributes hemp derived cannabinoid products to members in accordance with applicable California law. The 2018 Farm Bill (Public Law 115-334) governs the hemp derived posture of the products. Members acknowledge this framework at the point of joining 8PG and again at the point of reserving any kit that includes a hemp derived product. See the Membership Agreement and the Terms of Service for the full contractual framework.

32. Notice Regarding Minors and Underage Users

Our website, membership, events, and services are intended for individuals who are at least 21 years of age, unless a specific non-age-restricted offering expressly states otherwise.

We do not knowingly direct age-restricted services to individuals under 21. We do not knowingly sell or share Personal Information of individuals under 16.

If you believe we have collected Personal Information from an individual who is not eligible to use our services or attend our events, contact us at info@8pgevents.com.

32a. Children Under 13 (COPPA)

Our website, membership, events, and services are not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13. Under the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§6501 et seq., parental consent is required before collecting Personal Information from a child under 13.

If you are a parent or legal guardian and you believe that a child under 13 has provided Personal Information to 8PG, please contact us at info@8pgevents.com with the subject line “COPPA Request” and we will delete that information from our active records and instruct our processors to do the same, subject to any record-retention obligations imposed by law.

33. Third-Party Websites, Platforms, and Links

Our website, communications, event pages, ticketing flows, checkout pages, social media accounts, sponsor activations, and digital properties may link to or integrate with third-party websites, platforms, processors, plugins, embedded media, ticketing providers, payment processors, delivery providers, social media platforms, analytics tools, advertising platforms, retargeting platforms, or sponsor/vendor websites.

We are not responsible for the privacy practices, security, content, policies, representations, or conduct of third parties. Your interactions with third parties are governed by their own terms and privacy policies.

We encourage you to review the privacy policies of any third-party platform before submitting information through that platform.

If you interact with us on social media, tag us, message us, comment on our posts, share content involving our events, submit public content, or interact with public features, your information may be visible to others and may be processed by the applicable social media platform according to its own terms and privacy policy.

We may collect and use social media handles, public posts, comments, tags, messages, and related content to respond to you, manage our brand, improve events, communicate with members and guests, investigate issues, enforce policies, and promote 8PG, subject to applicable law and any separate agreements governing media and content rights.

35. International Users

8PG is operated from the United States. Our website, memberships, events, and services are primarily intended for users located in the United States.

If you access our website or submit information from outside the United States, you understand that your information may be transferred to, stored in, and processed in the United States or other jurisdictions where our service providers operate. Privacy laws in those jurisdictions may differ from the laws in your location.

36. Accessibility

We are committed to making this Privacy Policy reasonably accessible. If you need this Privacy Policy in an alternative format, contact us at info@8pgevents.com.

37. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we update the Privacy Policy, we will revise the “Last Updated” date above.

Changes are effective when posted unless otherwise stated. Your continued use of our website, submission of information, membership activity, purchase activity, event registration, or interaction with us after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.

Where required by law, we will provide additional notice or obtain consent for material changes.

This Privacy Policy is one component of the 8PG legal framework. The following documents apply to your interactions with 8PG and are incorporated by reference where applicable:

38. Contact Information

For privacy related questions, requests, appeals, or concerns, contact us at:

Email: info@8pgevents.com
Mail: 8PG, 2218 E Anaheim Street, Long Beach, CA 90804
Website: 8pgevents.com

Please include enough information for us to understand and process your request. For privacy rights requests, we may require verification before taking action.