Privacy Policy
Effective Date: June 2, 2025
1. Introduction
Welcome to KALEIDOSCOPE.KE LLC ("Company," "we," "us," or "our"). We are committed to protecting the privacy of individuals who visit our website, purchase tickets for our electronic music festival "Kaleidoscope" (the "Event"), or otherwise interact with our services. This Privacy Policy outlines how we collect, use, disclose, and protect your Personal Information.
Our company is registered in the USA (8 THE GRN STE A DOVER, DE, 19901). The Event is held in Kenya. We sell tickets worldwide.
For any privacy-related concerns or requests, please contact us at: INFO@KALEIDOSCOPE.WTF
This Privacy Policy applies to Personal Information collected through our ticket sales platform (e.g., https://buytickets.at/kaleidoscopekellc/1724715), website, social media interactions, and any other channels related to the Event.
2. Personal Information We Collect
We collect the following types of Personal Information:
-
Contact and Identification Information: Full name, email address, phone number, billing address.
-
Demographic Information: Age and/or gender (if provided or necessary for age verification).
-
Transaction Information: Details of tickets purchased, payment information (processed by third-party payment processors), and transaction history.
-
Government-Issued ID: For age verification purposes at the point of entry to the Event, if applicable. This information is typically verified visually and not stored, but if temporary collection is necessary, it will be handled with utmost security and deleted promptly.
-
Technical Information: IP address, browser type, operating system, cookie data (see Section 6: Cookies and Tracking Technologies).
-
Marketing Preferences: Your preferences for receiving marketing communications from us.
-
Event-Related Acknowledgements: Confirmation that you are aware you attend the festival at your own risk and that KALEIDOSCOPE.KE LLC and its partners, including the event location hotel company TEMPLE POINT RESORT LTD, cannot be held liable for loss or damage of personal property, physical accidents, or loss of life, subject to applicable law.
-
Communications: Records of your communications with us (e.g., customer support inquiries).
3. How We Collect Your Personal Information
We collect Personal Information:
-
Directly from You: When you purchase tickets, create an account, subscribe to our newsletter, contact customer support, or otherwise provide it to us.
-
Automatically: Through cookies and other tracking technologies when you use our website (see Section 6).
-
From Third Parties: We may receive information from our payment processors (confirming payment), analytics providers, and social media platforms (if you interact with us through those platforms).
4. How We Use Your Personal Information
We use your Personal Information for the following purposes:
-
To Provide Services: Process ticket orders, deliver e-tickets, send important Event updates and information.
-
Customer Support: Respond to your inquiries and provide assistance.
-
Marketing and Communications: Send you marketing communications about the Event, future events, or other offerings, but only with your explicit consent where required by law. You can opt-out at any time (see Section 9).
-
Personalization (Future Intent): We intend to use data on customer consumption patterns to automate and personalize marketing and sales communications and offers. This will be done based on your interactions and preferences, and you will have control over these communications.
-
Analytics and Improvement: To understand how our services are used, improve our website and offerings, and conduct market research.
-
Security and Fraud Prevention: To protect the security of our services, prevent fraud, and enforce our Terms and Conditions.
-
Legal Compliance: To comply with applicable legal and regulatory obligations.
5. How We Share Your Personal Information
We do not sell your Personal Information to third parties. We may share your Personal Information with the following categories of recipients:
-
Service Providers: Third-party vendors who provide services on our behalf, such as:
-
Payment processors (to process your ticket payments securely).
-
Email marketing services (to send you communications, with your consent).
-
Customer support platforms.
-
Analytics providers.
-
Website hosting and IT support.
-
-
Event Partners: Companies that work with us to carry out the Event, such as security companies and operational partners (e.g., TEMPLE POINT RESORT LTD for on-site operations). Sharing is limited to what is necessary for their role.
-
Affiliated Companies: If applicable, within our group of companies for administrative or operational purposes.
-
Legal Authorities: If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of KALEIDOSCOPE.KE LLC, our users, or others.
When we share Personal Information with third parties, we take steps to ensure they use it only for the purposes for which it was disclosed and in accordance with applicable data protection laws.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies (e.g., web beacons, pixels) on our website to collect information about your Browse activities. This helps us:
-
Ensure essential website functionality.
-
Analyze website traffic and usage (analytics cookies).
-
Personalize your experience and deliver targeted marketing content (marketing cookies), with your consent where required.
You can manage your cookie preferences through your browser settings or through any cookie consent tool provided on our website. Please note that disabling essential cookies may affect the functionality of our website.
7. International Data Transfers
Your Personal Information may be transferred to, stored, and processed in countries other than your country of residence, including the USA (where our company is registered and some service providers may be located) and Kenya (where the Event takes place). These countries may have data protection laws that are different from the laws of your country.
We will take appropriate safeguards to ensure that your Personal Information remains protected in accordance with this Privacy Policy and applicable data protection laws when transferred internationally. This may include using Standard Contractual Clauses (SCCs) or relying on adequacy decisions where available.
8. Data Security
We implement reasonable technical and organizational measures to protect your Personal Information from unauthorized access, use, disclosure, alteration, or destruction. These measures include encryption, access controls, secure servers, and staff training on data protection.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your Personal Information, we cannot guarantee its absolute security.
Data Breach Notification Procedure: In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authorities as required by applicable law, without undue delay. This notification will describe the nature of the breach, the likely consequences, the measures taken or proposed to be taken to address the breach, and contact information for further details.
9. Your Data Protection Rights
Depending on your location and applicable data protection laws (such as GDPR, CCPA, Kenyan Data Protection Act), you may have the following rights regarding your Personal Information:
-
Right to Access: To request a copy of the Personal Information we hold about you.
-
Right to Rectification: To request correction of inaccurate or incomplete Personal Information.
-
Right to Erasure (Right to be Forgotten): To request deletion of your Personal Information under certain conditions.
-
Right to Restrict Processing: To request that we limit the processing of your Personal Information under certain conditions.
-
Right to Data Portability: To receive your Personal Information in a structured, commonly used, and machine-readable format and to transmit it to another controller, under certain conditions.
-
Right to Object: To object to the processing of your Personal Information, particularly for direct marketing purposes, under certain conditions.
-
Right to Withdraw Consent: If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
-
Right to Lodge a Complaint: To lodge a complaint with a supervisory authority if you believe our processing of your Personal Information infringes applicable data protection laws.
To exercise any of these rights, or to opt-out of marketing communications, please email us at: INFO@KALEIDOSCOPE.WTF. We will respond to your request in accordance with applicable law. We may need to verify your identity before processing your request.
We do not honor "Do Not Track" signals from web browsers at this time.
10. Data Retention
We will retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements, and for resolving disputes. The criteria used to determine our retention periods include the duration of your relationship with us, the nature of the data, and our legal and regulatory obligations.
11. Children's Privacy
Our services and the Event are not directed to individuals under the age of 21 (or the age of majority in their jurisdiction if different and stricter). We do not knowingly collect Personal Information from children under these ages without parental consent. If we become aware that we have inadvertently collected Personal Information from a child without proper consent, we will take steps to delete such information promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on our website with an updated effective date and/or via a website banner. We encourage you to review this Privacy Policy periodically.
13. Governing Law
This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Delaware, USA, without regard to its conflict of law principles, recognizing that data protection laws of other jurisdictions (e.g., Kenya, GDPR for EU residents) may also apply to your Personal Information.