Privacy Policy

1. What information do we collect?

In short: We collect the information you give us, a little information from Google if you sign in with it, and basic technical information needed to run the Services.

Information you give us

What we collect depends on how you use Happentry:

• Everyone with an account: your name, email address, profile photo, and (if you set one) the location and search distance you use to find markets. We also keep your RSVPs, the markets you follow and your notification settings.
• Hosts (market organizers and their team members): your organization’s name, logo, description, contact email, mailing address and region; your team members and the email addresses of people you invite; how vendors can pay you (for example an e-transfer email address and instructions); and, if you ask to be verified, the links, phone number and business details you provide.
• Vendors: your public business profile (name, logo, photos, description, categories, city, social links and accepted payment types); private contact details (contact name, email, phone number, legal name, address and tax or business registration number); details about your products and booth setup; any accessibility needs you choose to share; previous markets; documents you upload (such as insurance certificates or permits); and your applications, including your answers to hosts’ questions.
• Messages: the messages, announcements and attachments you send through Happentry, and when they were read.
• Mailing-list subscribers: your email address, the market whose list you joined, and when you confirmed or unsubscribed.
• Visitors to market websites: anything you send through a contact form (name, email and message) or another form the host has added.
• Anyone who contacts us or reports something: the details you send, such as a report about content or another user.

Please keep the information you give us accurate and up to date.

Sensitive information

Some information vendors provide can be sensitive: tax or business registration numbers (which, for a sole proprietor, can identify you personally) and accessibility needs. Both are optional. We collect them only when you choose to provide them, show them only to the hosts you apply to, and use them only to process your applications.

Payment information

Hosts pay for Happentry plans through Stripe. Your card number, security code and billing address are given directly to Stripe and never stored by us; we keep only references to your Stripe customer and subscription. See Stripe’s Privacy Policy.

Payments between vendors and hosts (booth fees) don’t go through Happentry. We only record what hosts and vendors enter about them, such as amounts due, whether something has been paid, and notes.

Information from Google

If you sign in with Google, we receive your name, email address and profile photo from Google. See Signing in with Google. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information hosts add about vendors

When you apply to a market, that market’s host may record information about your application, such as review tags, private notes, decisions, waitlist position, booth assignments, attendance and payment status.

Information collected automatically

• Visit counts on market websites: the page viewed and the referring website. To count unique visitors without cookies we combine your IP address and browser type into a scrambled code that changes every day. Your IP address itself is not stored, and the code can’t be used to recognize you on another day or on another site.
• Server logs: like most websites, our servers may briefly log technical information such as IP addresses and browser type to keep the Services running and secure.
• Cookies: only the ones described in Cookies and similar technologies.

2. How do we use your information?

In short: We use your information to provide and run the Services, communicate with you, keep things secure and comply with the law.

• To create and manage accounts: signing you in, verifying your email address and resetting your password.
• To provide the Services you ask for: showing markets near the location you choose, RSVPs and reminders, sending your vendor applications to the hosts you apply to, waitlists and booth assignments, payment tracking and reminders, and publishing hosts’ websites.
• To enable communication between users: delivering messages and announcements between hosts and vendors, and form submissions from market websites to their hosts.
• To send mailing-list emails for hosts: delivering a host’s newsletters to people who subscribed to that host’s list and confirmed their subscription, with an unsubscribe link in every email. We stop emailing addresses that unsubscribe, bounce or mark an email as spam.
• To manage subscriptions and billing: trials, plan changes, renewals and invoices for hosts.
• To send service messages: notifications about your account and activity, and important changes to our terms and policies. You can choose which notifications you get by email in your notification settings.
• To show hosts how their websites are used: cookie-free visit counts (see above).
• To respond to you: answering questions and support requests.
• To keep the Services safe: verifying hosts, handling reports, preventing fraud and abuse (for example, limiting how many password-reset emails can be sent), and keeping a record of changes made in each organization.
• To comply with the law: such as keeping billing records for tax purposes and responding to lawful requests.
• To protect someone’s vital interests: when necessary to prevent harm.

Marketing: we don’t currently send our own marketing emails. If we start, we’ll only send them with your consent, and every one will have an unsubscribe link.

3. What legal bases do we rely on?

In short: We only process your information when we have a valid legal reason to, such as your consent, a contract with you, our legitimate interests, or a legal obligation.

If you are in Canada

We process your information with your express consent, or where your consent can reasonably be implied from your use of the Services (for example, sending your application to the market you applied to). You can withdraw your consent at any time, though that may mean we can no longer provide some Services. In some exceptional cases, the law allows us to process information without consent, for example:

• If collection is clearly in an individual’s interests and consent can’t be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions, provided certain conditions are met
• To identify injured, ill or deceased persons and communicate with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be the victim of financial abuse
• If it’s reasonable to expect that asking for consent would compromise the information’s availability or accuracy, and collection is reasonable for investigating a breach of an agreement or a contravention of the laws of Canada or a province
• To comply with a subpoena, warrant, court order or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business or profession, and the collection is consistent with the purposes for which it was produced
• If the information is publicly available and is specified by the regulations

If you are in the EU or UK

The GDPR and UK GDPR require us to explain our legal bases. We rely on:

• Performance of a contract: to provide the Services you signed up for, including your account, applications, messages and, for hosts, your plan.
• Consent: for example, to send a host’s mailing-list emails to you after you subscribe and confirm. You can withdraw consent at any time.
• Legitimate interests: to keep the Services secure and prevent abuse, and to give hosts cookie-free visit counts for their websites, where these interests aren’t outweighed by your rights.
• Legal obligations: to keep records the law requires, cooperate with lawful requests, and establish or defend legal claims.
• Vital interests: to protect someone’s safety.

4. When and with whom do we share your information?

In short: We share information with the hosts and vendors you choose to deal with, with service providers who help us run Happentry, and when the law requires it. We don’t sell personal information.

With other users

• Public information: vendor profiles, hosts’ organization pages, events and market websites are public, along with any vendor lists a host publishes (vendors can choose not to be listed).
• Hosts you apply to: when you apply to a market, its host sees your application, your private vendor details and the documents you include.
• Hosts whose lists you join: when you subscribe to a market’s mailing list or send a form on its website, that host receives your email address or submission.
• Mailing-list emails: a host’s organization name and mailing address appear at the bottom of the emails it sends, as anti-spam law requires.
• Your team: members of an organization can see its information and each other’s names and email addresses.

With service providers

These companies process information on our behalf, only to provide their service to us, under contracts that require them to protect it:

Market websites can also embed videos from YouTube or Vimeo when a host adds them. These load only on pages where a host has placed them, using YouTube’s privacy-enhanced mode and Vimeo’s do-not-track setting.

Information stored outside your province or Canada

Our main database and servers are currently hosted in the United States, and some of our service providers also store or process information there. Information stored outside Canada may be accessible to courts, law enforcement and national security authorities under local law. We choose providers that protect personal information to a standard comparable to Canadian law, and we plan to move our servers to Canada.

Other situations

• Legal requirements: when required by law, a court order or other legal process, or to protect the rights, property or safety of Happentry, our users or others.
• Business transfers: if we are involved in a merger, financing, acquisition or sale of all or part of our business, information may be transferred as part of that transaction, under this policy’s protections.

We don’t sell personal information, and we don’t share it with advertisers.

5. Information hosts collect through Happentry

In short: For information that hosts collect through their mailing lists, website forms and vendor reviews, the host decides what to collect, and we store and process it for them.

Hosts use Happentry to collect information from their own audiences: mailing-list subscribers, people who fill in forms on their websites, and vendors who apply to their markets. For that information, the host decides what to collect and how to use it, and is responsible for having consent where needed, including under Canada’s Anti-Spam Legislation (CASL) for the emails they send. We store and process it on the host’s behalf, as described in this policy.

If you have questions about how a host uses your information, contact the host directly. You can also contact us and we’ll help where we can.

6. Third-party websites

In short: We aren’t responsible for the information you share with websites we link to.

Happentry and market websites link to other websites, such as hosts’ and vendors’ social media, online stores, payment pages and map directions. This policy doesn’t cover information you give those sites, and we aren’t responsible for their content or privacy practices. Please review their policies.

7. Cookies and similar technologies

In short: We use only the cookies needed to run Happentry. There are no advertising or tracking cookies, so you won’t see a cookie banner.

Market websites count visits without cookies (see What information do we collect?), and their fonts and maps are served from our own servers, so your browser doesn’t contact Google or Mapbox when you view them.

You can block or delete cookies in your browser settings. If you block the session cookie, you won’t be able to stay signed in.

8. Do we use artificial intelligence?

In short: Not at the moment.

Happentry doesn’t currently use artificial intelligence services to process your information. If we add AI-powered features (for example, writing helpers for hosts), we’ll update this policy before they launch to explain what they do, which providers are involved and what information they receive.

9. Signing in with Google

In short: If you sign in with Google, we receive your name, email address and profile photo.

You can create an account or sign in with your Google account instead of a password. When you do, we receive your name, email address and profile photo from that provider. We don’t receive your password, your friends or contacts, or your posts, and we never post anything on your behalf.

We use this information only as described in this policy. Google’s own use of your information is governed by Google’s Privacy Policy.

10. How long do we keep your information?

In short: We keep your information while your account is open and for as long as we need it for the purposes in this policy, unless the law requires us to keep it longer.

• Account information: while your account is open. When you ask us to delete your account, we delete or anonymize your information within 30 days, except as described below.
• Applications and records shared with hosts: hosts keep records of past applications and payments for their markets. If you delete your account, we remove your details from these records where we can, but some information may remain with the host for their own record-keeping.
• Billing records: kept for at least six years, as Canadian tax law requires.
• Unsubscribes, bounces and spam complaints: we keep the email address on a do-not-email list, so we never email it again.
• Visit counts: kept as daily totals that don’t identify anyone.
• Backups: deleted information can remain in backups until they’re replaced on our regular schedule. During that time it’s kept secure and isn’t used.

11. How do we keep your information safe?

In short: We protect your information with technical and organizational safeguards, though no system is perfectly secure.

Our safeguards include encrypted connections (HTTPS) for all of Happentry, database rules that limit each person to the information they’re allowed to see, passwords stored by our sign-in provider rather than in our database, and limiting access to personal information to people who need it. Still, no transmission over the internet or storage system can be guaranteed to be 100% secure. If a breach creates a real risk of significant harm, we’ll notify you and the relevant authorities as the law requires.

12. Children

In short: Accounts are for people 16 and older.

You must be at least 16 years old to create a Happentry account. We don’t knowingly collect personal information from children under that age. If you believe a child has given us their information, contact us at privacy@happentry.ca and we’ll delete it.

13. Your privacy rights

In short: Depending on where you live, you can ask to see, correct or delete your information, and withdraw your consent.

If you are in Canada

You can ask to access the personal information we hold about you (including information hosts have recorded about your applications), ask us to correct it, and withdraw your consent. Residents of Quebec can also ask how their information is used and have it de-indexed or deleted where the law allows. We’ll respond within 30 days.

If you’re not satisfied with our response, you can contact:

• the Office of the Privacy Commissioner of Canada;
• in Alberta, the Office of the Information and Privacy Commissioner of Alberta;
• in Quebec, the Commission d’accès à l’information du Québec.

If you are in the EU, UK or Switzerland

You may have the right to access your information and get a copy, to correct or erase it, to restrict or object to its processing, to data portability, and not to be subject to decisions made solely by automated means. You can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner).

Withdrawing consent and unsubscribing

You can withdraw your consent at any time. This doesn’t affect processing that happened before, or processing based on other legal grounds. To stop a market’s mailing-list emails, use the unsubscribe link at the bottom of any of them. To change which notifications we email you, use your notification settings. We’ll still send messages you need, such as sign-in, security and billing emails.

How to make a request

Email privacy@happentry.ca. We may need to confirm your identity before acting on a request, and will only use the information you give us for that purpose.

14. Do-Not-Track

Some browsers can send a “Do-Not-Track” signal. There is no agreed standard for responding to it. Because Happentry doesn’t track you across websites or use advertising cookies, there is nothing for the signal to turn off.

15. United States residents

In short: Residents of some US states have additional rights over their personal information.

If you live in a US state with a consumer privacy law (such as California, Colorado, Connecticut, Virginia or Texas), you may have the right to know what personal information we process, to access, correct and delete it, to get a copy, to not be discriminated against for using these rights, and to opt out of targeted advertising, the sale of your information and certain profiling. In the past 12 months we have collected these categories:

We keep each category as long as you have an account, and as described in How long do we keep your information?. We disclose personal information only to the service providers and users described in When and with whom do we share your information?. We have not sold or shared personal information for targeted advertising in the past 12 months. We use sensitive information only to provide the Services, never to infer things about you.

To use these rights, email privacy@happentry.ca. You can use an authorized agent; we may ask for proof of their authorization and to confirm your identity. If we decline your request, you can appeal by emailing us, and we’ll explain our decision in writing. If your appeal is denied, you can complain to your state attorney general. California residents may also ask, once a year, about any disclosure of personal information to third parties for their direct marketing (we make none).

16. Changes to this policy

In short: We’ll update this policy as needed and tell you before significant changes take effect.

We may update this policy from time to time, and will change the “Last updated” date when we do. If we make significant changes, such as using your information in a new way, we’ll notify you by email or with a notice in Happentry before they take effect, and ask for your consent where the law requires it.

17. How to contact us

Our Privacy Officer is responsible for how Happentry handles personal information. For questions, requests or complaints about this policy or your information, email the Privacy Officer at privacy@happentry.ca. We aim to reply within a few business days, and will respond to formal requests within 30 days.

18. How to review, update or delete your information

You can see and update much of your information yourself while signed in: your vendor profile, your organization’s details, and your notification settings. To get a copy of your information, correct something you can’t change yourself, or delete your account, email privacy@happentry.ca from the address on your account.