Privacy Policy

1. Data We Collect

1.1 Waitlist & Early Access Email

When you join our waitlist or early access programme, we collect your email address. This is the only personal identifier we require for waitlist participation.

1.2 Event Captures (Photos & Videos)

When a guest uses Revel Gallery at an event, the photos, short videos ("Cameos"), and photobooth strips they capture ("Captures") are processed and stored on our servers for the duration of that event's gallery retention period. Captures may contain the faces and likenesses of individuals.

We do not require guests to create an account or provide any personal information to take a Capture. Captures are associated with the event, not with an individual identity.

1.3 Event Passcodes

Event passcodes entered by guests are stored only in the browser's sessionStorage for the duration of that browser session. They are never transmitted to or stored on our servers.

1.4 Usage Data

We may collect anonymised technical data such as browser type, device type, and general usage patterns (e.g. pages visited, errors encountered) to help us improve the Service. This data is not linked to any individual identity.

1.5 Kickstarter

If you back our Kickstarter campaign, the pledge transaction and associated personal data (including your name, email, and payment information) are collected and processed by Kickstarter, not by us. Please review Kickstarter's Privacy Policy for details. We may receive your name and email from Kickstarter solely for the purpose of fulfilling backer rewards and communicating campaign updates.

2. How We Use Your Data

We will never use your data for purposes beyond those listed above without first obtaining your explicit consent.

3. Data Sharing

We do not sell your personal data. We may share data with:

• Infrastructure providers (e.g. cloud hosting, email delivery) acting as data processors on our behalf, under contractual data processing agreements.
• Law enforcement or regulatory authorities, where required by applicable law.

We require all third-party processors to maintain appropriate security standards and to use your data only as directed by us.

4. Data Retention

During the Beta period, data retention periods may be shorter. We will endeavour to provide reasonable notice before any early deletion of Beta data.

5. Cookies & Local Storage

Revel Gallery uses browser sessionStorage to temporarily remember event passcode unlocks within a single browser session. This data is cleared automatically when the browser session ends and is never transmitted to our servers.

We may use minimal first-party cookies or local storage for session management and service functionality. We do not use third-party advertising or tracking cookies.

6. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Under GDPR (EEA / UK residents)

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — request that we limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent (e.g. waitlist email), you may withdraw at any time by unsubscribing or contacting us.

Under CCPA (California residents)

• The right to know what personal information we collect and how it is used.
• The right to delete personal information we have collected from you.
• The right to opt out of the sale of personal information. We do not sell personal information.
• The right to non-discrimination for exercising your CCPA rights.

To exercise any of these rights, please contact us at privacy@revel.gallery. We will respond within 30 days.

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

Event Captures taken at events may incidentally include minors. Event hosts are responsible for ensuring appropriate consents are obtained from parents or guardians for any minors captured at their event.

9. International Transfers

Your data may be processed in countries outside your own, including countries that may not provide the same level of data protection as your home jurisdiction. Where we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses for transfers outside the UK/EEA.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a revised effective date. For significant changes that affect how we use your personal data, we will provide more prominent notice (e.g. by email to waitlist subscribers).

11. Contact & Complaints

For any privacy-related questions or to exercise your rights, contact us at privacy@revel.gallery.

If you are an EEA or UK resident and believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority (e.g. the ICO in the UK).