Notice at Collection
California Consumer Privacy Act (CCPA / CPRA) — Required Disclosure
📄 At-a-Glance Summary
- Who is collecting: Marin Buzz (app.marinbuzz.com)
- What is collected: Name, email, phone (optional), IP address, browser info, payment (via Stripe)
- Why we collect it: Newsletter delivery, SMS alerts, ticket purchases, legal consent records, analytics (with consent)
- Do we sell your data? No. We do not sell personal information.
- Do we share for ads? Only after you consent via our website checkbox — you can opt out at any time.
- How long do we keep it? Consent records: indefinitely (legal requirement). Email / SMS: until you unsubscribe. Payments: 7 years.
- Your rights: Know, Delete, Correct, Opt Out of Sharing, Non-Discrimination
- How to exercise rights: Your Privacy Choices page or email privacy@marinbuzz.com
1. Who Is Collecting Your Information
Marin Buzz collects personal information through its website at app.marinbuzz.com. Marin Buzz is the business responsible for the collection and processing described in this Notice.
Contact: privacy@marinbuzz.com
2. Categories of Personal Information Collected
The following table describes the categories of personal information we collect at each collection point on our website, as defined under the California Consumer Privacy Act.
| CCPA Category | Specific Data Elements | Collected On | Sold? | Shared for Ads? |
|---|---|---|---|---|
| Identifiers | First name, last name, email address | /subscribe, /ticket | No | With consent |
| Identifiers | Mobile phone number | /insider-texts, /ticket (optional) | No | No |
| Identifiers | IP address | All pages (logged at form submission) | No | No |
| Internet / Network Activity | Browser type, device type, operating system (User-Agent string) | All form submission pages | No | No |
| Internet / Network Activity | Pages visited, buttons clicked, session interactions | All pages (after consent checkbox) | No | With consent |
| Financial Information | Payment method type, last 4 digits (from Stripe); order amount | /ticket (via Stripe) | No | No |
| Consent Records | Checkbox status, legal text version, timestamp, IP (at time of consent) | All form pages | No | No |
| Geolocation (coarse) | IP-derived state/country (used only for California jurisdiction determination) | All form pages | No | No |
3. Purposes of Collection
We collect personal information for the following business and commercial purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Deliver email newsletter via Beehiiv | Name, email | Your request / consent |
| Send SMS marketing alerts via Twilio | Phone number | TCPA prior express written consent |
| Process event ticket purchases via Stripe | Name, email, Stripe payment token | Contract (purchase fulfillment) |
| Maintain TCPA/CIPA consent audit trail | Email/phone, IP, UA, timestamp, consent text | Legal obligation (immutable record; cannot be deleted) |
| Analytics & marketing (GTM, Meta, Google Analytics) | IP, session interactions, device data | Your explicit consent (checkbox) |
| Fraud prevention & rate limiting | IP address, user agent | Legitimate business interest |
| Respond to CCPA/CPRA privacy requests | Email, phone (to verify identity) | Legal obligation |
| Send transaction confirmations & ticket receipts | Email, purchase details | Contract (purchase fulfillment) |
We do not use your personal information for:
- Profiling that produces legal or similarly significant effects without your consent
- Selling your information to data brokers
- Sharing your data with event sponsors or venue partners without separate consent
- Building advertising profiles on minors under 18
4. Third Parties Who Receive Your Data
The following third parties may receive your personal information as part of our service operations. Each acts as a service provider (data processor) on our behalf, bound by contractual data processing restrictions.
| Third Party | Role | Data Shared | Their Privacy Policy |
|---|---|---|---|
| Beehiiv, Inc. | Email newsletter platform | Name, email, consent metadata | beehiiv.com/privacy |
| Twilio, Inc. | SMS delivery service | Phone number, message content | twilio.com/legal/privacy |
| Stripe, Inc. | Payment processor | Name, email, payment data (directly to Stripe) | stripe.com/privacy |
| Cloudflare, Inc. | Web hosting & infrastructure | IP address, request metadata (transit only) | cloudflare.com/privacypolicy |
| Google (GTM / Analytics) | Analytics & marketing tags | Session data, IP (after consent only) | policies.google.com/privacy |
| Meta Platforms (Pixel) | Advertising analytics | Session data (with LDU for CA; after consent only) | facebook.com/privacy/policy |
5. Sensitive Personal Information
Under the CPRA, the following categories are classified as "Sensitive Personal Information." Here is how Marin Buzz handles each:
| Sensitive PI Category | Collected? | How Used |
|---|---|---|
| Social Security Number / Government ID | No | Not collected |
| Financial Account Numbers (bank, credit card) | No | Handled directly by Stripe; we never receive raw numbers |
| Precise Geolocation | IP-derived only | IP address used solely to determine California/non-California jurisdiction. Not used for advertising targeting. |
| Racial / Ethnic Origin | No | Not collected |
| Religious Beliefs | No | Not collected |
| Health / Medical Information | No | Not collected |
| Contents of Mail / Messages | No | Not collected |
| Biometric Data | No | Not collected |
| Personal Communications Content | No | Not collected |
We use sensitive personal information only for the purposes you consented to and only to the extent necessary to provide our services. You may request that we limit our use of sensitive personal information via our Your Privacy Choices page.
6. Retention Periods
| Data Category | Retention Period | Reason |
|---|---|---|
| Consent audit records (D1 database) | Indefinitely (minimum 5 years) | Legal defense (TCPA/CIPA proof of consent) |
| Email subscriber records (Beehiiv) | Until unsubscribe + 90 days | Active newsletter delivery |
| SMS subscriber / opt-out records (Twilio) | Until STOP reply + 90 days | TCPA opt-out list maintenance |
| Payment records (Stripe) | 7 years | IRS / tax record requirement |
| IP address / user agent in consent log | Indefinitely | Jurisdiction verification; anti-fraud |
| Analytics / session data (Google, Meta) | Governed by Google / Meta data retention settings | Analytics reporting window |
7. Your Rights & How to Exercise Them
As a California resident you have the right to Know, Delete, Correct, Opt Out of Sale / Sharing, Limit Use of Sensitive PI, and Non-Discrimination. These rights are detailed in full on our Your Privacy Choices page.
To submit a request, visit app.marinbuzz.com/your-privacy-choices or email privacy@marinbuzz.com.
Response time: We will acknowledge your request within 5 business days and fulfill it within 45 days (extendable to 90 days for complex requests, with notice).
8. Contact & Further Information
For the complete description of our data practices, please read our full Privacy Policy.
Questions about this Notice at Collection:
📧 privacy@marinbuzz.com
Subject: "Notice at Collection Inquiry"
This notice is provided pursuant to Cal. Civ. Code § 1798.100(b) (CCPA), Cal. Civ. Code § 1798.121 (CPRA sensitive PI), and the California Privacy Protection Agency (CPPA) regulations effective 2026.