PRIVACY POLICY
Draft under legal review.
Controller
COCO420. Contact: privacy@coco4e20.com.
What data
For the COCO PASS: first and last name, email, date of birth, city, country and, if you give them, phone and Instagram. From the payment we keep only amount, status and the provider reference: we never see your wallet or card details.
For the priority list: your email only.
Why
To issue the pass and let partners check it (performance of the contract), to check you are an adult (legal obligation and partner rules), and for tax records. Promotional messages only if you opted in (consent, withdraw any time).
Who sees it
At the door a partner sees only: pass status, first name and last initial, card number and expiry. Technical providers: Supabase (database, EU), Vercel (hosting), Resend (email), NOWPayments (payments). We do not sell data.
How long
For the life of the pass and up to 24 months after it expires, then deleted. Payment records for as long as tax law requires.
Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent: write to privacy@coco4e20.com. You can also complain to your data protection authority (AEPD in Spain, Garante in Italy).
