FREQUENT FAN
EXPERIENCE PRIVACY POLICY

This Experience Privacy Policy (“Policy”) explains how Frequent Fan, Inc. (“FrequentFan,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with the purchase of any ticket, hospitality package, athlete appearance, or other premium experience (collectively, “Experiences”).

This Policy applies to Experiences offered by FrequentFan, whether FrequentFan acts as the merchant of record or as a facilitator connecting you with a third-party merchant of record, whether accessed:

• Through a FrequentFan-operated platform; or
• Through a third-party partner platform where FrequentFan acts as merchant of record.

This Policy does not apply to www.frequentfan.com corporate website interactions, which are governed by our separate Corporate Website Privacy Policy.

1. OUR ROLE

FrequentFan may act as either the merchant of record for certain Experience purchases or as a facilitator connecting you with a third-party merchant of record. Where a third-party merchant of record is responsible for the transaction (such as for certain ticket purchases), that entity will process payment and transaction-related data in accordance with its own privacy policy.

We collect and process personal information as necessary to:

• Perform our contractual obligations under our Terms of Use
• Process payments and confirm transactions
• Fulfill and deliver Experiences
• Coordinate with venues, ticketing marketplaces, and talent booking partners
• Provide customer support
• Prevent fraud and unauthorized transactions
• Enforce resale restrictions and other provisions in our Terms of Use
• Comply with tax, accounting, and legal obligations

2. PERSONAL INFORMATION WE COLLECT

In connection with Experience purchases, we may collect the following categories of personal information:

A. Identification & Contact Information

• Full name
• Email address
• Billing address
• Phone number (if provided)
• Government-issued identification (in limited cases for high-value or VIP events requiring identity verification or venue access)
• Information you provide when joining a waitlist, priority access list, or early access program.

B. Transaction & Ticket Metadata

• Event name
• Venue
• Event date and time
• Ticket quantity
• Seat identifiers or section details
• Order timestamps
• Purchase amount
• Order history
• Refund, credit, or substitution records

C. Payment Information

Payment card information is processed by secure third-party payment processors in accordance with their privacy policies. FrequentFan does not store full payment card numbers.

We may retain:

• Payment confirmation identifiers
• Last four digits of payment method
• Processor transaction reference numbers

D. Fulfillment & Attendance Information

• Ticket delivery confirmations
• Guest names (if provided)
• Event check-in records
• VIP credentialing information
• Participation confirmations

We use third-party email delivery providers (such as SendGrid) to send transactional and marketing communications related to Experiences.

E. Device, Cookies & Fraud Prevention Information

• IP address
• Device identifiers
• Browser and usage data
• Transaction metadata
• Fraud risk indicators
• Behavioral transaction patterns

We may use cookies, tracking pixels, and third-party analytics services (such as Google Analytics and PostHog) to improve services, analyze performance, and assist with fraud prevention. You may manage cookies via your browser settings or available opt-out tools.

For high-value Experiences, additional identity verification or fraud screening measures may be used.

3. HOW WE USE PERSONAL INFORMATION

We use personal information to:

• Process and confirm Experience purchases
• Deliver tickets and event access
• Provide relevant events, tickets and experiences within your budget range and of your interests
• Coordinate logistics with ticketing marketplaces, venues, and talent booking partners
• Communicate event updates, substitutions, or schedule changes
• Provide customer support
• Detect, prevent, and investigate fraud
• Investigate suspected unauthorized resale or commercial misuse
• Respond to chargebacks and payment disputes
• Enforce our Terms of Use
• Maintain financial, tax, and accounting records
• Comply with applicable laws

For high-value Experiences, personal information may also be used to:

• Conduct identity verification
• Perform enhanced fraud screening
• Mitigate financial and operational risk

In some cases, when you opt in, join a waitlist or otherwise register interest in an Experience, marketing communications may be sent by FrequentFan or by a Partner Platform, including in connection with that Experience or similar offerings.

Where you proceed to complete a purchase through a third-party merchant of record, your information may be shared with that entity to process the transaction, provide customer support, and fulfill the Experience.

4. INFORMATION SHARING

We may share personal information with:

A. Payment Processors

To securely process transactions and manage payment disputes.

B. Ticketing & Marketplace Partners

To source, confirm, and deliver tickets, and where applicable, to enable third-party merchants of record to process transactions, payments, customer support, and fulfillment.

C. Venues & Event Operators

To facilitate admission, credentialing, and guest access.

D. Talent Booking & Hospitality Partners

To coordinate athlete appearances and VIP logistics, including authorized talent procurement partners.

E. Partner Platforms

If you join a waitlist, priority access list, or otherwise express interest in an Experience, your contact information may be shared with the applicable Partner Platform (such as point.me) for purposes of marketing, promotional communications, and related outreach regarding that Experience or similar offerings.

Such communications will be subject to the Partner Platform’s own privacy policy and practices. You may opt out of marketing communications from the Partner Platform at any time using the unsubscribe mechanisms provided in those communications.

Customer support inquiries submitted to a Partner Platform (such as point.me) may be shared with FrequentFan to provide support, respond to inquiries, and fulfill the Experience.

Customer support inquiries may be handled by FrequentFan and shared with the applicable third-party merchant of record to resolve transaction-related issues.

We and our partners may use third-party customer support and CRM tools to manage and respond to these communications.

F. Fraud Prevention & Risk Service Providers

To detect, prevent, and investigate fraudulent transactions.

G. Legal & Regulatory Authorities

When required by law or necessary to protect rights, enforce agreements, or ensure safety.

We do not sell personal information.

5. FRAUD PREVENTION, RISK MITIGATION & CHARGEBACKS

Given the high value of certain Experiences, FrequentFan employs enhanced fraud prevention measures.

We may:

• Review transactions manually
• Require identity verification
• Temporarily delay ticket delivery pending fraud screening
• Cancel suspicious transactions
• Retain transaction data for dispute resolution

Personal information may be retained and used in connection with:

• Chargeback disputes
• Arbitration proceedings
• Legal enforcement actions
• Fraud investigations

6. DATA RETENTION

We retain transaction-related personal information for as long as necessary to:

• Fulfill contractual obligations
• Maintain financial and tax records
• Respond to disputes or chargebacks
• Enforce refund and resale policies
• Comply with legal and regulatory requirements

Retention periods may extend beyond the scheduled date of the Experience.

7. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, this section provides additional disclosures under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”).

A. Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers — such as name, email address, billing address, IP address, device identifiers.
• Commercial Information — such as purchase history, ticket selections, order records, refund or credit history.
• Financial Information — such as payment confirmation identifiers and limited payment method details (full payment card numbers are processed by third-party payment processors and are not stored by FrequentFan).
• Internet or Network Activity Information — such as browser data, usage data, cookies, and analytics information.
• Geolocation Data (Approximate) — derived from IP address.
• Inferences — such as fraud risk indicators or transaction risk assessments generated for security purposes.

B. Categories of Personal Information Disclosed for Business Purposes

We may disclose the categories listed above to the following categories of recipients for business purposes:

• Payment processors
• Ticketing and marketplace partners
• Venues and event operators
• Talent booking and hospitality partners
• Partner platforms through which Experiences are accessed
• Fraud prevention and risk service providers
• Cloud hosting and technology service providers
• Professional advisors (legal, accounting, compliance)
• Regulatory authorities when required by law

C. Sale or Sharing of Personal Information

We do not sell or share personal information as defined under California law.

We do not share personal information for cross-context behavioral advertising as defined under California law.

D. Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes other than those permitted under CPRA, including:

• Processing transactions
• Preventing fraud
• Complying with legal obligations

E. Your California Privacy Rights

Subject to applicable limitations and verification requirements, California residents have the right to:

• Request access to the personal information we collect
• Request correction of inaccurate personal information
• Request deletion of personal information (subject to legal retention obligations)
• Request information about categories of data collected and disclosed
• Opt out of the sale or sharing of personal information (we do not sell or share personal information)
• Limit use of sensitive personal information (as applicable)
• Not be discriminated against for exercising privacy rights

To exercise your rights, please contact:

Email: hello@frequentfan.com

We may need to verify your identity before processing your request.

8. DATA SECURITY

We implement commercially reasonable administrative, technical, and organizational safeguards, including:

• Encryption in transit
• Role-based access controls
• Secure payment processing
• Fraud monitoring systems
• Secure cloud infrastructure

However, no method of transmission or storage is completely secure.

9. INTERNATIONAL DATA TRANSFERS

FrequentFan is based in the United States. Personal information may be processed and stored in the United States or other jurisdictions where our service providers operate.

By purchasing an Experience, you consent to such transfers.

10. CHILDREN'S PRIVACY

We do not knowingly collect personal information from children under the age of 13.

Experiences are intended only for individuals aged 18 or older.

11. UPDATES TO THIS POLICY

We may update this Policy from time to time. Updates will be reflected by the “Last Updated” date above.

Continued participation in Experiences after changes are posted constitutes acceptance of the revised Policy.

12. CONTACT US

For privacy-related inquiries or requests:

Email: hello@frequentfan.com

Entity: Frequent Fan Inc.