CONCESSIONS.ONLINE
Privacy notice
Version: 2026-09-14 · Replaced by the 2026-10-14 notice
Scope and contact
This notice describes the current private pilot of Concessions. The platform operator administers this deployment, and each operating organization manages its own staff and concession operations. For privacy questions, contact the operator through the channel used to provide you access, or contact your organization administrator. This initial notice is a draft for review before public or commercial release; operator identity, direct privacy contact and deployment-specific practices must be confirmed for that release.
Information processed
The application processes names and email addresses supplied for registration or invitations; organization profiles, locations, menus and staff assignments; password hashes, encrypted authenticator credentials and session records; policy acceptance versions; order items, quantities, modifiers, notes, totals and fulfillment history; and security and administrative audit records. The server also processes network addresses and request metadata for operation, rate limiting and security. Avoid entering unnecessary sensitive information in free-text fields.
How information is used
Information is used to verify accounts, deliver access and recovery messages, administer organizations, calculate and fulfill orders, enforce permissions, investigate problems and maintain security and audit records. The current application does not implement advertising, advertising profiles or a sale-of-personal-information feature.
Who can access information
Organization information is available to authorized users according to their current role and location assignments. Authorized internal administrators can access organization administration records, and their access is audited. Hosting and infrastructure services process data necessary to operate the deployment. When configured, Brevo delivers account verification, invitation and recovery email, receiving the recipient address and message content. Other disclosures may be necessary to comply with applicable legal obligations or protect the service and its users.
Security
The service uses server-side access controls, password hashing, encrypted authenticator storage and audit records. No system can guarantee absolute security. Keep your account and order-access credentials private and report suspected misuse. This release does not collect raw payment-card information through the application.
Retention and deletion
Retention depends on the information and its operational, security, audit and legal purpose. Password-reset and verification links expire; delivered identity-email payloads are cleared from the application mail queue. Orders and audit records are retained, and organization deletion requests currently place records on hold rather than immediately erasing them. A fixed retention and purge schedule has not yet been adopted for this private pilot. Contact the operator to request review of information, correction, access removal or deletion; the operator must assess applicable obligations and retained records. No automatic deletion deadline is promised by this notice.
Choices and requests
You may ask the operator or your organization administrator about information held about you and request correction, access changes or deletion review. Identity verification may be required before a request is fulfilled. Removing an organization membership does not delete a shared identity or memberships in other organizations. Rights and response obligations may vary under applicable law.
Changes and deployment details
A new notice will receive a new version identifier, and registration records retain the accepted version. Before a public launch, the operator must review actual hosting locations, service-provider arrangements, retention practices and applicable privacy obligations. This notice does not assert a particular hosting country, international-transfer arrangement or legal compliance certification.