Privacy Policy
EventSail — Skara Brae LLC
Privacy Policy
Effective Date: May 1, 2026
Platform: EventSail
Operator: Skara Brae LLC
Website: eventsail.co
Skara Brae LLC (“we,” “us,” or “our”) operates the EventSail platform (“the Platform”). This Privacy Policy explains how we collect, use, and safeguard information in connection with the Platform — both from tenant organizations who subscribe to EventSail, and from individuals who interact with tenant-operated websites powered by EventSail.
Each tenant organization using EventSail is an independent data controller for information they collect from their own members, volunteers, and participants. EventSail acts as a data processor on their behalf. Tenants are responsible for maintaining their own privacy policy for their members — a default template is provided but each organization should review and customize it for their specific circumstances.
1. Information We Collect
We collect information in the following contexts:
- Tenant account information: Organization name, contact email, billing information, and subscription details when an organization signs up for EventSail.
- Platform usage: Log data, IP addresses, browser type, and pages visited for security and platform improvement purposes.
- End user data (on behalf of tenants): When individuals interact with tenant-operated EventSail websites, their data (name, email, registration details, etc.) is collected and processed on behalf of the tenant organization. We process this data as a service provider, not for our own purposes.
- Billing information: Subscription payments are processed by Stripe. We do not store full credit card numbers.
2. How We Use Information
- To provide, operate, and improve the EventSail platform
- To process subscription billing and manage tenant accounts
- To send operational communications to tenant administrators
- To monitor platform health, security, and performance
- To fulfill legal and compliance obligations
3. Tenant Data
Data collected through tenant-operated EventSail websites belongs to the tenant organization. We process it only to provide the Platform services and do not use it for advertising, sale, or any purpose beyond service delivery. Tenants may export or request deletion of their data subject to their subscription terms.
4. SMS Communications
The Platform supports SMS communications sent by tenant organizations to their members and participants. SMS messages are sent through Twilio on behalf of tenants. Skara Brae LLC does not initiate SMS messages to end users independently. End users who wish to opt out of SMS should reply STOP to any message, or contact the tenant organization directly.
Message and data rates may apply.
5. Third-Party Service Providers
We work with the following service providers to operate the Platform:
- Stripe — payment processing for tenant subscriptions and tenant-collected payments
- SMTP2Go — transactional email delivery
- Twilio — SMS delivery on behalf of tenants
- Amazon Web Services (AWS) — cloud hosting and file storage
Each provider is bound by data processing agreements and may not use data for purposes beyond service delivery.
6. Data Retention
Tenant account data is retained for the duration of the subscription and for a reasonable period afterward to support reactivation and legal compliance. End user data processed on behalf of tenants follows the tenant’s retention policies. Tenants may request data deletion by contacting us at the address below.
7. Security
We implement industry-standard security measures including encrypted data transmission (HTTPS/TLS), access controls, and regular security monitoring. Payment data is handled entirely by Stripe under PCI-DSS standards. No method of electronic transmission is 100% secure, and we cannot guarantee absolute security.
8. Cookies
The Platform uses session cookies necessary for authentication and core functionality. We do not use advertising cookies or third-party tracking on Platform pages. Anonymous, aggregated analytics may be used to understand general usage patterns.
9. Children’s Privacy
The Platform does not knowingly collect personal information directly from children under 13. Youth data collected through programs and enrollments is provided by parent or guardian consent through the tenant organization, which is responsible for compliance with applicable children’s privacy laws including COPPA.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the effective date and, for material changes, notify tenant administrators by email. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy.
11. Contact
For questions about this Privacy Policy or to exercise your rights regarding platform-level data:
Skara Brae LLC
Email: privacy@eventsail.co
For questions about data collected by a specific tenant organization (e.g., a theatre or arts group using EventSail), please contact that organization directly.