Privacy Policy

Last updated: March 10, 2026

Prestige Event Group ("we," "us," or "our") operates the website venuara.com and related services. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

1.1 Information You Provide

When you use our inquiry forms, questionnaire, or schedule a tour, we collect:

• Name — first and last name
• Email address — optional, used for follow-up communication
• Phone number — primary contact method
• Preferred contact method — WhatsApp, SMS, Email, or Phone Call
• Event details — event type, estimated guest count, timeline, preferred date, additional notes

1.2 Information Collected Automatically

When you visit our website, certain data is collected automatically through cookies and similar technologies:

• Google Analytics — anonymous usage statistics including page views, session duration, device type, and approximate geographic location
• Meta Pixel (Facebook) — tracks conversions from our advertising campaigns on Facebook and Instagram to measure ad effectiveness
• Device and browser data — browser type, operating system, screen resolution, and language preference

2. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide event planning assistance
• Schedule venue tours and follow up on your interest
• Send you relevant information about our services via your preferred contact method
• Improve our website and services based on usage patterns
• Measure the effectiveness of our advertising campaigns
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share data only with the following service providers who help us operate our business:

• Vercel — hosting and analytics; collects IP addresses, user agents, and page view data. Data location: US.
• Supabase — database hosting and storage
• Clerk — authentication service; processes emails, names, passwords, and session data. Data location: US.
• Stripe — payment processing; handles credit card data, billing addresses, and transaction records. PCI DSS Level 1 compliant. Data location: US.
• Sentry — error tracking service that may capture PII (such as emails or phone numbers) in error stack traces. Data location: US.
• Cloudflare Turnstile — CAPTCHA service on lead forms; collects device and browser fingerprinting data. Data location: Global CDN.
• Twilio — SMS and WhatsApp messaging service; processes phone numbers and message content for notifications. Data location: US.
• Google Analytics — web analytics
• Meta (Facebook/Instagram) — advertising pixel and conversion tracking

Each provider processes data according to their own privacy policies and in compliance with applicable data protection laws.

3.1 Sub-Processor Directory

The following table provides a comprehensive overview of the third-party services that may process your data on our behalf:

3.2 Error Tracking & PII Minimization

Our error tracking system (Sentry) is configured with data scrubbing rules to automatically redact personally identifiable information such as email addresses, phone numbers, and credentials from error reports. While these safeguards significantly reduce PII exposure, some personal data may occasionally appear in error stack traces. All error tracking data is automatically deleted after 90 days.

4. Cookies & Tracking Technologies

Our website uses the following cookies:

• Essential cookies — language preference, session management
• Analytics cookies — Google Analytics cookies to understand how visitors use our site
• Advertising cookies — Meta Pixel to measure the effectiveness of our Facebook and Instagram ads

You can manage your cookie preferences through your browser settings. Disabling cookies may affect some website functionality.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, or as required by law. Specific retention periods are as follows:

• Lead data — retained for 24 months of active use; anonymized after 36 months of inactivity
• Financial records — retained for 7 years to comply with tax and accounting obligations
• Error logs — automatically deleted after 90 days
• Analytics data — retained for 26 months, in line with Google Analytics default settings

You may request deletion of your personal data at any time by contacting us using the information in the Contact Us section below.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data under the California Consumer Privacy Act (CCPA) and the Texas Data Privacy and Security Act (TDPSA):

• Right to Know — you have the right to know what personal data we collect, how it is used, and which third parties receive it
• Right to Delete — you may request that we delete the personal information we have collected about you, subject to certain legal exceptions
• Right to Opt-Out of Data Sales — we do not sell your personal data to third parties. We never have and never will sell your information
• Right to Non-Discrimination — we will not discriminate against you for exercising any of your privacy rights. You will receive equal service and pricing regardless of whether you exercise your data rights
• Right to Correction — request that we correct inaccurate or incomplete personal data
• Right to Opt-Out of Targeted Advertising — opt out of targeted advertising and certain data processing activities

6.1 How to Submit a Request

To exercise any of these rights, please submit a verifiable request to us by emailing privacy@venuara.com. We will verify your identity before processing your request and respond within 45 days. If we need additional time, we will notify you of the reason and extension period (up to an additional 45 days).

7. Texas-Specific Provisions

7.1 Texas Data Privacy and Security Act (TDPSA)

If you are a Texas resident, you may have additional rights under the Texas Data Privacy and Security Act, including the right to access, correct, delete, and obtain a portable copy of your personal data, as well as the right to opt out of targeted advertising and profiling. We will respond to verified requests within 45 days.

7.2 Telephone Consumer Protection Act (TCPA)

We respect your communication preferences. By providing your phone number and selecting a preferred contact method, you consent to receive communications via that method regarding your inquiry. You may withdraw consent at any time by contacting us. We do not use automated dialing systems or pre-recorded messages without your express written consent.

8. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: privacy@venuara.com
• Phone: (210) 555-0100
• Address: Prestige Event Group, San Antonio, TX

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.