Privacy

This policy explains what information Milk & Cereal LLC ("Milk & Cereal," "we," "us") collects, how we use and share it, and the choices you have. It covers milkandcereal.co, our forms, our email, text, WhatsApp, and other messaging programs, ticketing and RSVPs, and our events (the "Services").

1. What We Collect

Information you give us. Your name, email address, mobile number, date of birth, city, Instagram and other social handles, gender (if you choose to share it), how you heard about us, who referred you, and your answers to any application questions. Messages you send us. Content you send us or tag us in. Information about people you refer or bring as guests.

Consent records. What you agreed to, when, how, the wording you were shown, the page you were on, and your IP address.

Event and community activity. Invitations, RSVPs, tickets, check-ins, attendance, no-shows, cancellations, table and VIP reservations, purchases, spend at our events where venues or partners share it with us, referrals, sponsorships, feedback, conduct reports, and notes about incidents. Photos and video of you taken at our events.

Purchases. Order details for tickets, tables, merch, and sponsorships. Payment card details are handled by payment processors and ticketing platforms. We do not receive or store full card numbers.

Messaging activity. Whether our messages were delivered, opened, or clicked, your replies, and your opt-ins and opt-outs.

Information from others. Ticketing and RSVP platforms (such as Luma and Partiful) when you RSVP or buy through them; venues, co-hosts, promoters, sponsors, and other event partners; people who refer you; other event communities we work with; and public social media profiles.

Information collected automatically. IP address, device and browser type, pages viewed, referring links, approximate location based on IP address, and information from cookies and similar technologies (see Section 7).

Profiles and scores we create. See Section 3.

2. How We Use It

• To review applications and decide who to invite, approve, waitlist, or remove.
• To send invitations, event updates, releases, merch, and other promotions by email, text, WhatsApp, and other channels you have agreed to.
• To run events, including guest lists, check-in, capacity, security, and safety.
• To build profiles, scores, and tiers (Section 3).
• To process purchases and refunds.
• To promote our events, music, and merch, and events we co-host or partner on.
• To measure, improve, and advertise the Services, including through analytics and advertising tools.
• To keep records of consent and opt-outs.
• To prevent fraud, enforce our Terms, protect guests, and comply with the law.
• For any other purpose we describe when we collect the information, or with your consent.

3. Profiles, Scores, and Tiers

We build profiles of Guest List members and attendees and create scores, ratings, tiers, and labels, and we may keep more than one for each person. Inputs can include your application, RSVPs, attendance, no-shows, late cancellations, referrals, purchases, table reservations, sponsorships, conduct, feedback from our team and venues, engagement with our messages, and your public social media presence.

We use these to decide who is invited, when, and to what, and to allocate access, priority, perks, and offers. We may use automated tools, including AI, to calculate scores, sort applications, and personalize messages.

We do not use race, color, religion, ancestry, national origin, sex, gender, gender identity, sexual orientation, disability, medical condition, or any other characteristic protected by law to calculate scores or to deny anyone access.

4. How We Share It

Service providers. Companies that process information on our behalf, including for messaging (such as Klaviyo, Twilio, and Meta for WhatsApp), databases and hosting (such as Supabase, Lovable, and Google), ticketing and RSVPs (such as Luma and Partiful), payments (such as Stripe), analytics, forms, customer support, AI tools, and professional advisers.

Venues, co-hosts, and promoters. For events you are invited to, RSVP to, or attend, we share what is needed to run the event, such as your name, guest list and ticket status, table details, and check-in information.

Event partners, sponsors, and other event communities. We may share your name, email address, city, social handles, Guest List status, attendance and engagement history, and scores or tiers with event partners, sponsors, and other event communities we work with, including so they can invite you to their events or send you their own marketing by email or social media. You can ask us not to share your information for their marketing (Section 8).

Safety. We may share information about conduct and removals with venues, security, other event organizers, and law enforcement to protect guests.

Legal and protection. When required by law or legal process, or to protect the rights, property, or safety of Milk & Cereal, our guests, or others.

Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business.

With your consent or at your direction.

Aggregated or de-identified information that cannot reasonably identify you, for any purpose.

5. Text Messages

If you opt in to our SMS program, we use your mobile number to send the messages you agreed to and keep a record of your consent. Reply STOP to any text to opt out, or HELP for help. Program details are in Section 5.2 of our Terms.

6. WhatsApp and Other Messaging Apps

When we message you on WhatsApp, Instagram, or another app, the app provider (such as Meta) also processes those messages under its own privacy policy.

7. Cookies, Analytics, and Advertising

We use cookies and similar technologies needed to run the site. We may also use analytics and advertising tools, such as those from Google, Meta, and TikTok, to understand how the site is used, measure our marketing, and show ads for our events. These tools may collect information about your activity on our site and other sites. We may upload email addresses in hashed form to advertising platforms to reach Guest List members or similar audiences. We do not upload mobile numbers collected through our SMS program to advertising platforms.

You can control cookies through your browser and ad personalization through your settings on each platform. Where required by law, we treat a Global Privacy Control signal as a request to opt out of sharing for advertising.

8. Your Choices and Rights

Messages. Reply STOP to texts. Use the unsubscribe or preferences link in any email. On WhatsApp and other apps, reply STOP, tell us, or block us.

Partner marketing. Email info@milkandcereal.co with "Do Not Share" in the subject line and we will stop sharing your information with partners for their own marketing.

Access, correction, and deletion. Email us to get a copy of your information, correct it, or delete it. We will verify your request by confirming details we already have. Deleting your profile removes you from the Guest List. We keep only what we need to honor your opt-outs (a suppression record of your email and mobile number), prove consent, enforce a removal from our events, and comply with the law.

We respond within 45 days, and we will not retaliate against you for making a request.

California residents. Depending on our size and activities, the California Consumer Privacy Act may give you the right to know what personal information we collect, use, and disclose; to delete and correct it; to opt out of its sale or sharing; and not to be discriminated against for exercising these rights. This policy describes the categories of information we collect and their sources (Section 1), our purposes (Sections 2 and 3), and the categories of recipients (Section 4). Sharing information with event partners for their own marketing may be a "sale" or "sharing" under California law; use the Partner marketing option above to opt out. You may use an authorized agent. Under California's Shine the Light law, you may also ask once a year for information about our disclosures to third parties for their direct marketing. Contact info@milkandcereal.co for any of these.

9. How Long We Keep It

We keep your profile and activity history while you are on the Guest List and for as long as it is useful for running our community, unless you ask us to delete it. We keep consent and opt-out records for at least five years after you opt out. We keep records of removals from our events for as long as needed to enforce them.

10. Age

The Services and our events are for people 21 and older. We do not knowingly collect information from anyone under 21. If we learn we have, we delete it.

11. Outside the United States

We are based in the United States, and your information is processed here. If you join us from another country, including at events we hold abroad, your information will be transferred to and processed in the United States. You may have additional rights under local law, such as Brazil's LGPD. Contact us to exercise them.

12. Security

We use reasonable safeguards, and our providers encrypt data in transit and at rest. Access is limited to people who need it. No system is perfectly secure.

13. Changes

We may update this policy. We will change the date at the top when we do, and we will notify you directly of material changes.

14. Contact

Milk & Cereal LLC
info@milkandcereal.co