Privacy Policy · Fan Engage

← Fan HomeEffective 6/19/2026

FAN ENGAGE PRO Privacy Policy

This Policy was last updated on June 19, 2026.

At Fan Engage Pro, we respect your privacy and are committed to protecting it through compliance with this privacy policy ("Policy"). Please read the following privacy policy to understand how we will treat your information we may collect from you or that you may provide on fanengagepro.com, any subsequent URL which may replace them, and all officially associated websites, URLs, mobile applications and micro sites owned or controlled by Fan Engage Pro (together, the "Website") and any related products or services ("Services"), as well as our practices for collecting, using, maintaining, protecting, and disclosing that information. This policy applies to information we collect: (a) on this Website; (b) in e-mail, text and other electronic messages between you and this Website; or (c) through forms you download from this Website, which provide dedicated non-browser-based interaction between you and Fan Engage Pro.

This Policy does not apply to information collected by (a) us offline or through any other means, including on any third party website or (b) any third party including through any application or content that may link to or be accessible from or on our Website.

This Policy also details your choices regarding the use of your Personal Information (identified below) and how you can access and update it.

This Policy is a legally binding agreement between you ("User", "you" or "your") and Fan Engage Pro, ("FEP," "we," "us," or "our"). Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website. By accessing or using this Website, you agree to this privacy policy. This policy may change from time to time. Your continued use of this Website after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

INTERNATIONAL VISITORS

Our Website is hosted and operated in the United States. We are a 'data controller' under the EU General Data Protection Regulation, and we may collect some 'personally identifiable information' as covered by the laws of other states. Regardless of your location, any information you provide, including any Personal Information, will be transferred to and processed by a computer server located within the United States. If you are using this site in the EU, any transfer of your data will be carried out in accordance with the law, to safeguard your privacy rights and in the unlikely event of a security breach, give you remedies, or any other similar approved mechanisms. See EU Residents below

INFORMATION WE COLLECT ABOUT YOU AND HOW WE COLLECT IT

We may collect several types of information from and about users of our Website, including your name, address, email address, telephone number, and other similar information that can be used to identify you ("Personal Information"). Specifically, when you use our Website, we may collect the following:

INFORMATION YOU PROVIDE TO US when you

Fill in forms on our Website, including when you register to

Respond to surveys;

Place an order;

Use the search bar on the Website; or

INFORMATION WE COLLECT THROUGH AUTOMATIC DATA COLLECTION TECHNOLOGIES.

Google Analytics primarily collects aggregated and anonymized user

Device & Browser Information

IP address (used for geolocation but anonymized if IP

Device type, operating system, and browser version

User Behavior on the Website such as:

Pages visited, time spent on each page

Clicks, scroll depth, and interactions

Referral sources (e.g., search engine, social media, direct link)

Location & Demographics (if enabled) such as:

Country, city (based on IP address)

Language preference

Approximate geolocation (if users allow location tracking)

Traffic Sources & Engagement such as:

How users arrived (organic search, paid ads, social media, direct

Returning vs. new visitors

Bounce rate and session duration

Potentially Personal Information (If Configured to Collect It) such

By default, Google Analytics does not collect personally

User IDs (if tracking logged-in users) such as

Custom Dimensions & Events (if configured to capture form

E-commerce Data (transaction details but we do not collect nor

Collection of Personal Information

We collect Personal Information when you fill out and submit an online form providing us Personal Information, such as your first and last name, mailing address, email address, employer, title and department, telephone and facsimile numbers, and other personally identifying information. Depending upon the activity, some of the information we ask you to provide is identified as mandatory and some as voluntary. If you do not provide the mandatory data with respect to a particular activity, you will not be able to engage in that activity. We collect, process, and use your personal data for specific purposes if you have given your consent to the collection, processing and use of specific personal data for such purposes. You may withdraw your consent any time.

We may collect your Personal Information if processing is necessary for the purposes of our legitimate interests, except where such interest is overridden by your interest; or:

• is required due to legal obligations or orders by public authorities or courts,

• is necessary to substantiate or protect legal claims or to defend against lawsuits, or

• serves to prevent abuse or other illegal activities.

Users may visit our Website anonymously. We will collect Personal Information from Users only if they voluntarily submit such information to us. Users can always refuse to supply Personal Information, except that it may prevent them from engaging in Website related activities. While the California Consumer Privacy Act (CCPA) primarily applies to for-profit businesses, our privacy practices align with CCPA's goals of transparency and security where relevant

See Your California Privacy Rights below.

Automatic Data Collection Technologies

As you navigate through and interact with our Website, we may use cookies, flash cookies, or web beacons (collectively, "Automatic Data Collection Technologies") to collect certain information about your equipment, browsing actions, and patterns. We may use these technologies to collect information about your online activities over time and across third-party Websites or other online services (behavioral tracking). The information we collect automatically may include Personal Information or we may associate it with Personal Information we collect in other ways or receive from third parties.

Automatic Data Collection Technologies collect non-personal identification information. This is information that does not by itself identify a specific individual. We gather certain information about you based upon where you visit on our site in several ways. This information is compiled and analyzed on both an individual and an aggregated basis. This information may include the website's Uniform Resource Locator ("URL") that you just came from, which URL you go to next, what browser you are using, and your Internet Protocol ("IP") address. A URL is the global address of documents and other resources on the World Wide Web. An IP address is an identifier for a computer or device on a Transmission Control Protocol/Internet Protocol ("TCP/IP") network, such as the World Wide Web. Networks like the World Wide Web use the TCP/IP protocol to route information based on the IP address of the destination. In other words, an IP address is a number that is automatically assigned to your computer whenever you are surfing the World Wide Web, allowing web servers to locate and identify your computer. Computers require IP addresses in order for users to communicate on the Internet. Automatic Data Collection Technologies help us to improve our Website and to deliver a better and more personalized service, including by enabling us to: (a) estimate our audience size and usage patterns; (b) store information about your preferences, allowing us to customize our Website according to your individual interests; (c) speed up your searches; and (d) recognize you when you return to our Website.

The technologies we may use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the

Flash Cookies. Certain features of our Website may use local stored

Web Beacons. Pages of our Website and our e-mails may contain small

Some content or applications, including advertisements, on the Website are served by third-parties, content providers, and application providers. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

Use and Processing of Collected Information

FEP processes your Personal Information to improve our Services, manage accounts, fulfill requests, accept donations, accept volunteer applications and manage volunteers, accept and process event applications, further our mission, and promote harm reduction. We process this information based on consent, contractual necessity, or legitimate interests aligned with our nonprofit mission.

We use information that we collect about you or that you provide to us, including any Personal Information:

To present our Website and its contents to you;

To provide you with information, products or services that you request

To fulfill any other purpose for which you provide it;

To provide you with notices about your account;

To carry out our obligations and enforce our rights arising from any

To notify you about changes to our Website or any products or services

To allow you to participate in interactive features on our Website;

To allow you to request services or volunteer for events;

To provide you with communications when you sign up for our text

To administer our Website, including by monitoring and analyzing our

In any other way we may describe when you provide the information;

For any other purpose with your consent.

Payment Processing

If you make a purchase or donation on the Website, you may be required to provide payment details, which will be processed through a third-party payment processor. FEP does not store sensitive payment information directly. We will not store or collect your payment card details. That information is provided directly to our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, Mastercard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.

The payment processors we work with are: Stripe

Managing Information

You may edit certain Personal Information through your account settings on the Website. However, we may retain data as necessary to meet our legal obligations.

Disclosure of Information

FEP will not share or disclose your Personal Information to third parties without your consent, except:

where necessary to provide Services,

to comply with any court order, law or legal process, including to

to fulfill the purpose for which you provide it;

with your consent;

to enforce or apply our Terms of Use and other agreements, including

if we believe disclosure is necessary or appropriate to protect the

for any other purpose disclosed by us when you provide the

Retention of Data

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

We will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.

Data Transfer

Your information, including Personal Information, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Information, to United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

FEP, Inc. will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Security of Information

The security of Personal Information is important to us, but no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect Personal Information, we cannot guarantee its absolute security.

Exercising Your Rights

Users may exercise data rights under applicable law by contacting FEP directly (please see the ''Contact Us'' section below). We may require verification to process these requests to protect your privacy and security.

We may, from time to time, send you an e-mail if you have requested us to do so. You also have choices with respect to cookies, as described above. By modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies some parts of our Website may not work properly in your case.

EU RESIDENTS

If you are a resident of the European Union (EU) and European Economic Area (EEA), you have certain data protection rights, covered by GDPR. – See more at https://eur-lex.europa.eu/eli/reg/2016/679/oj.

If you are a data subject, EU residents may have the following legal rights: (A) the right of access and update personal data relating to you; (B) the right to correct any mistakes in your personal information; (C) the right to restrict or object to your personal data being processed; (D) the right to receive and/or have your personal data ported to another data controller; (E) the right to erasure; (F) the right to provide instructions regarding the processing of your personal data after your death; (G) the right to stop receiving marketing emails; (H) compensation for damage caused by contravention of the law; and (I) California residents have the right to notify the Privacy Enforcement & Protection Unit of the California Attorney General's Office if you believe we have not handled your personal data in accordance with the laws.

A. Right to access to personal data relating to you

EU residents may ask to see what personal data we hold about you and be provided with: (1) a copy; (2) details of the purpose for which it is being or is to be processed; (3) details of the recipients or classes of recipients to whom it is or may be disclosed, including if they are overseas and what protections are used for those oversea transfers; (4) the period for which it is held (or the criteria we use to determine how long it is held); (5) any information available about the source of that data; and (6) whether we carry out an automated decision-making, or profiling, and where we do information about the logic involved and the envisaged outcome or consequences of that decision or profiling.

See the 'Contact Us'' section below for details of who to contact to make a request for your personal data. To help us find the information easily, please give us as much information as possible about the type of information you would like to see.

B. Right to correct any mistakes in your personal information

You can require us to correct any mistakes in your personal information, free of charge. If you would like to do this, please: (1) email, call or write to us (see the 'Contact Us' section below), (2) let us have enough information to identify you, and (3) let us know the information that is incorrect and how it should be corrected.

C. Right to restrict or prevent processing of personal data

You may request that we stop processing your personal data if: (1) you do not think that your data is accurate and we will start processing again once we have confirmed that it is accurate; (2) the processing is unlawful but you do not want us to erase your data; (3) we no longer need the personal data for our processing, but you need the data to establish, exercise or defend legal claims; or (4) you have objected to processing because you believe that your interests should override our legitimate interests.

D. Right to ask us to stop contacting you directly

You can ask us to stop contacting you at any time. If you would like to do this, please: (1) click on the link in the footer of any email you receive from us or on our behalf; or (2) contact us (please see the ''Contact Us'' section below).

E. What will happen if your rights are breached?

If an EU resident's statutory rights are violated you may be entitled to remedies, including monetary damages.

EU REPRESENTATIVE:

Under Article 27 of the GDPR , we have appointed an EU Representative to act as our data protection agent. Our nominated EU Representative is: Fan Engage Pro Legal Team (contact@fanengagepro.com)

CHILDREN UNDER THE AGE OF 13

Our Website is not intended for children under 13 years of age. No one under age 13 may provide any information to or on the Website. We do not knowingly collect Personal Information from children under 13. If you are under 13, do not use or provide any information on this Website or on or through any of its features/register on the Website, make any purchases through the Website, or provide any information about yourself to us, including your name, address, telephone number, e-mail address or any screen name or user name you may use. If we learn we have collected or received Personal Information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us (please see the ''Contact Us'' section below).

ADDITIONAL INFORMATION FOR RESIDENTS OF CERTAIN STATES

Residents of certain states, including California, Colorado, Connecticut, Utah, and Virginia (the "States") may have additional rights. Where we collect Personal Information from residents of the States we comply with the consumer privacy laws of the States ("US Privacy Laws"). This Supplemental US Privacy Notice applies to residents of the States ("you" or "your").

For the purposes of this Section, the following categories of information are not Personal Information:

Publicly available information;

Deidentified or aggregated data; or

Information otherwise excluded from the scope of US Privacy Laws.

This Supplemental Privacy Notice provides the following information to residents of the States:

Categories of Personal Information we collect;

Purposes for which we use Personal Information;

Categories of Personal Information we disclose to third parties;

Categories of third parties to which we disclose Personal Information;

How residents of the States can exercise their rights under US Privacy

The right to access, correct, or delete Personal Information;

The right to obtain a portable copy of Personal Information;

The right to limit the use of sensitive personal data in certain

The right to opt out of targeted advertising, sales of personal

Categories Of Non-Sensitive Personal Information

The table below outlines the categories of Personal Information we collect about residents of the States and whether and how they are disclosed to third parties.

We collect Personal Information from the following sources:

Directly from our Users

Inferences from your activity

--------------- --------------------- -------------------- ------------ ------------ Category Examples Purpose(s) Disclosure Retention to a 3rd Period Party

A. Identifiers. Identifiers may To communicate with This data For as long contain the you about your may be as necessary following: name, orders or purchases, disclosed to to fulfill shipping addresses, your account, and Processors our billing address, your requests for and legitimate email address, phone information; to Affiliates business number provide support in purposes response to your communications with us; to send you updates about new products and offers that may be of interest to you; to tailor your experience at our Website, showing you content that we think you might be interested in

B. Commercial Commercial To enhance your This data For as long Information. Information may online shopping may be as necessary contain the experience, disclosed to to fulfill following: order including as a way Processors our history and to recognize you and and legitimate preferences welcome you to the Affiliates business Website and to purposes provide you with customized Website content

C. Internet / Internet/Electronic To improve our This data For as long Electronic Activity may contain Website, customer may be as necessary Activity. the following: service, and user disclosed to to fulfill Information experience Processors our automatically and legitimate collected from your Affiliates business browser, such as your purposes browser type, viewed webpages, links that are clicked, IP address, mobile device identifier or other unique identifier, sites or apps visited before coming to our Website, the amount of time you spend viewing or using the Website, the number of times you return, or other click-stream or site usage data, emails we send that you open, forward, or click through to our Website

D. Imprecise Imprecise To improve our This data For as long Geolocational Geolocational Data Website, customer may be as necessary Data. may contain the service, and user disclosed to to fulfill following: experience Processors our Information and legitimate automatically Affiliates business collected from your purposes device, such as your internet service provider's address; your internet protocol or IP address; your MAC address; your operating system; and the type of handheld or mobile device used to link to the web page --------------- --------------------- -------------------- ------------ ------------

DISCLOSING PERSONAL DATA

We disclose Personal Information to the following categories of third parties:

• Processors: We use processors to securely handle Personal Information on our behalf and only on our instructions. These companies may not use your Personal Information for their own purposes.

• Affiliates: We may disclose your information to our affiliates and representatives as part of providing our services.

EXERCISING YOUR PERSONAL INFORMATION RIGHTS

Residents of the States may have the following rights under US Privacy Laws:

If you are a resident of a State, you can submit a request to exercise your Personal Information rights under US Privacy Laws by contacting us (please see the ''Contact Us'' section below). To protect your privacy, we may need to authenticate your identity before we respond to your rights request. We will use commercially reasonable efforts to verify your identity for this purpose. Any information you provide to authenticate your identity will only be used to process your rights request. Please be aware that we do not accept or process rights requests through other means (e.g., via fax or social media).

We will respond to your rights request within 45 days, though in certain cases we may inform you that we will need up to another 45 days to act on your request. If we suspect fraudulent or malicious activity on or from your account, we will delay taking action on your request until we can appropriately verify your identity and the request as authentic. Also note that each of the rights are subject to certain exceptions. If you believe our response to your rights request is insufficient, you can appeal our decision by contacting us (please see the ''Contact Us'' section below) and we will inform you of our final decision within 45 days.

We reserve the right to decline to process, or charge a reasonable fee for, requests that are manifestly unfounded, excessive, or repetitive.

Your Data Protection Rights under the California Privacy Protection Act (CalOPPA)

CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law's reach stretches well beyond California to require a person or company in the United States (and conceivable the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this Privacy Policy. – See more at: https://consumercal.org/about-cfc/cfc-education-foundation/california-online-privacy-protection-act-caloppa-3/.

According to CalOPPA we agree to the following:

users can visit our site anonymously;

2. our Privacy Policy link includes the word "Privacy", and can easily be found on the page specified above on the home page of our website;

3. users will be notified of any privacy policy changes on our Privacy Policy Page;

4. users are able to change their personal information by emailing us at contact@FEP.com.

Your Data Protection Rights under the California Consumer Privacy Act (CCPA)

If you are a California resident, you are entitled to learn what data we collect about you, ask to delete your data and not to sell (share) it. To exercise your data protection rights, you can make certain requests and ask us:

(a) What personal information we have about you. If you make this request, we will return to you:

The categories of personal information we have collected about you.

2. The categories of sources from which we collect your personal information.

3. The business or commercial purpose for collecting or selling your personal information.

4. The categories of third parties with whom we share personal information.

5. The specific pieces of personal information we have collected about you.

6. A list of categories of personal information that we have sold, along with the category of any other company we sold it to. If we have not sold your personal information, we will inform you of that fact.

7. A list of categories of personal information that we have disclosed for a business purpose, along with the category of any other company we shared it with.

Please note, you are entitled to ask us to provide you with this information up to two times in a rolling twelve-month period. When you make this request, the information provided may be limited to the personal information we collected about you in the previous 12 months.

(b) To delete your personal information. If you make this request, we will delete the personal information we hold about you as of the date of your request from our records and direct any service providers to do the same. In some cases, deletion may be accomplished through de-identification of the information. If you choose to delete your personal information, you may not be able to use certain functions that require your personal information to operate.

(c) To stop selling your personal information. We do not sell your personal information for monetary consideration. However, under some circumstances, a transfer of personal information to a third party, or within our family of companies, without monetary consideration may be considered a "sale" under California law.

If you submit a request to stop selling your personal information, we will stop making such transfers. If you are a California resident, to opt-out of the sale of your personal information, send an email to contact@FEP.com.

Please note, if you ask us to delete or stop selling your data, it may impact your experience with us, and you may not be able to participate in certain programs or membership services which require the usage of your personal information to function. But in no circumstances, we will discriminate against you for exercising your rights.

To exercise your California data protection rights described above, please send your request(s) by one of the following means:

By email: contact@FEP.com

Your data protection rights, described above, are covered by the CCPA, short for the California Consumer Privacy Act. To find out more, visit the official California Legislative Information website. The CCPA took effect on 01/01/202

Do Not Track Signals

The Website does not respond to "Do Not Track" signals. However, we limit Personal Information collection as outlined in this Policy.

Alternative: Our Policy on "Do Not Track" Signals:

We honor Do Not Track signals and do not track, plant cookies, or use advertising when a Do Not Track browser mechanism is in place. Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.

You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

Social Media Features

Our Website may include social media buttons to help you engage with FEP. Interaction with these features is subject to each platform's privacy policy.

Email Marketing

By opting in to receive newsletters or updates from FEP, you consent to our sending you communications via email. You may unsubscribe at any time using the link provided in our emails or by contacting us (please see the ''Contact Us'' section below).

Data Breach

In the event of a data breach, FEP will take appropriate steps to mitigate harm and notify affected individuals as required by federal and state data breach notification laws. We are committed to transparency and will provide timely updates regarding any incidents affecting your personal information.

Changes and Amendments

FEP reserves the right to modify this Policy as necessary to comply with legal requirements or to reflect our practices. Any changes will be effective upon posting the revised policy on our website. Continued use of the website constitutes acceptance of any updates to this Policy.

If you have any questions or wish to exercise your rights, please contact us at:

Fan Engage Pro Legal Team Email:

Last updated 6/18/2026.