Privacy Policy

Beyond Project ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable data protection laws including the EU General Data Protection Regulation (GDPR) and Thailand's Personal Data Protection Act (PDPA).

1. Who We Are

Beyond Project operates event experiences and related online services. Our contact for privacy matters is support@beyondproject.co.

2. What Data We Collect

We may collect the following categories of personal data when you interact with our website, purchase tickets, or register for events:

• Identity data: name, date of birth, profile photo
• Contact data: email address, phone number
• Transaction data: ticket purchase records, payment confirmation references (we do not store full card details)
• Technical data: IP address, browser type, device identifiers, pages visited, time spent
• Marketing preferences: your choices about receiving communications from us
• Event attendance data: check-in records, event history

3. How We Use Your Data

We use your personal data for the following purposes:

• Contract performance: to process your ticket purchase and provide access to events
• Legal compliance: to meet obligations under applicable laws (e.g. age verification, tax records)
• Legitimate interests: to improve our services, secure our platform, and prevent fraud
• Marketing (with your consent): to send you updates about upcoming events, exclusive offers, and Beyond Project news via email and other channels

You can withdraw your marketing consent at any time by clicking the unsubscribe link in any of our emails or by contacting us directly.

4. Marketing & Communications

Where you have given us consent, we may contact you with personalised event recommendations, early-access ticket offers, and partner promotions. We use your event history and preferences to tailor these communications.

We will only send marketing communications with your explicit prior consent. We will never sell your contact details for third-party unsolicited marketing.

5. Sharing Your Data with Third Parties

We only share your personal data with third parties where strictly necessary and under appropriate safeguards:

• Ticketing & payment processors: such as Lu.ma or Stripe, to facilitate event registration and payments. These processors are bound by their own privacy policies and applicable data protection law.
• Analytics providers: we may use anonymised or aggregated analytics tools (e.g. website traffic analytics) to understand how our website is used.
• Marketing platforms: where you have consented to marketing, we may share necessary contact data with email marketing providers (e.g. Mailchimp or similar) who act as data processors under our instruction.
• Legal & regulatory authorities: if required by law, court order, or to protect the safety and security of our events.

We do not sell your personal data to third parties. All third-party processors are required to maintain appropriate technical and organisational security measures, and we maintain data processing agreements where required by law.

6. International Data Transfers

Some of our service providers may be based outside your country. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission, or equivalent mechanisms).

7. Data Retention

We retain your personal data only for as long as necessary for the purpose it was collected, or as required by law. Event attendance records may be retained for up to 3 years. Marketing preferences are kept until you withdraw consent or request deletion.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability (receive your data in a structured, machine-readable format)
• Withdraw consent at any time, without affecting the lawfulness of prior processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@beyondproject.co. We will respond within 30 days.

9. Cookies & Tracking

Our website may use essential cookies necessary for it to function, and analytics cookies to understand usage patterns. We do not use third-party advertising cookies without your explicit consent. You can manage your cookie preferences through your browser settings.

10. Security

We implement appropriate technical and organisational security measures to protect your data against unauthorised access, loss, or misuse. However, no internet transmission is completely secure and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date above and, where appropriate, by sending a direct notification. Continued use of our services after such changes constitutes your acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests, please contact us at:
support@beyondproject.co