Effective Date: September 17, 2026
Last Updated: September 17, 2026

SUTE TIX, operating as Smileys Unique Ticketing Experience ("SUTE TIX," "we," "us," or "our"), operates a ticketing platform (the "Platform") that connects event-goers with event organizers. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you access or use our Platform. By using the Platform, you acknowledge that you have read and understood this Policy.

1. Information We Collect

We collect only the information necessary to provide our services, as described below. This is consistent with our data minimization obligations under applicable law.

1.1 Account Information

When you create an account, we collect your name, email address, and mobile phone number. You may optionally provide your date of birth, gender, and a profile picture.

1.2 Order and Transaction Information

We collect details about your purchases, including which tickets you bought, the name of the event organizer, any delivery or billing address you provide, and your order history.

1.3 Payment Information

All payment card processing is handled by Stripe, Inc., a PCI-DSS-compliant payment processor. We do not receive, store, or transmit your full card number, CVV, or PIN. We retain only the card type, the last four digits, and the expiration month and year, solely to help you and the event organizer identify a payment on record.

1.4 Location Information

We collect your approximate location only when you actively use map or nearby-event features, and only for the duration of that session. We do not track your location in the background.

1.5 Technical and Usage Data

We automatically collect device and browser information, IP address, pages viewed, session duration, and cookie identifiers to operate and improve the Platform.

2. How We Use Your Information

We use your personal information only for the following purposes:

• To process your order, issue your tickets, and facilitate your entry to events
• To send you order confirmations, mobile wallet passes, and material event updates
• To provide event organizers with attendee information required to operate their event
• To respond to customer support requests and to process refunds and disputes
• To detect, investigate, and prevent fraud, misuse, and security incidents
• To maintain records required by applicable law, including tax and accounting obligations
• To send you marketing communications where you have separately opted in; every such message includes a clear and easy method to unsubscribe at no cost.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects without human review.

3. How We Share Your Information

We do not sell your personal information to third parties, and we do not share it for cross-context behavioral advertising without your opt-in consent. We share your information only with the following categories of recipients, and only to the extent necessary for each stated purpose:

3.1 Event Organizers

The organizer of an event you purchase tickets for receives your name, contact details, and order information so they can admit you and communicate with you about the event. Each organizer acts as an independent data controller for the information we share with them, under their own privacy policy. We require organizers to handle your information in compliance with applicable law through our Terms and Conditions.

3.2 Service Providers (Processors)

We have entered into data processing agreements with each of the following vendors, who process your information solely on our behalf and under our instructions:

3.3 AI Services

We use AI services provided by OpenAI, LLC and Anthropic, PBC to analyze venue seating layout images supplied by event organizers. These services process seating map images only. Your personal information — including your name, contact details, order history, and payment information — is not transmitted to these AI services.

3.4 Legal and Regulatory Disclosures

We may disclose your information to law enforcement agencies, regulators, or courts where we are legally required to do so, or where disclosure is necessary to establish, exercise, or defend a legal claim. Where permitted, we will notify you of such a request before complying.

4. Where Your Information Is Stored and Transferred

Your personal information is stored on infrastructure operated by Amazon Web Services, Inc. in the United States. Some of our service providers operate internationally, which means your information may be processed outside the United States. Whenever such transfers occur, we require the receiving party to protect your information to the same standard described in this Policy, and we rely on appropriate contractual safeguards (such as data processing agreements) to ensure that protection.

5. How Long We Keep Your Information

We retain personal information only as long as necessary for the purposes stated in this Policy or as required by law:

We do not retain personal information for longer than is necessary and have established internal procedures for the timely deletion of information that has met its retention period.

6. Security

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Restricting access to personal information to personnel and services that require it
• Encrypting information in transit using TLS/SSL
• Encrypting stored databases and files at rest
• Ensuring that full payment card data never enters our systems

We maintain a written information security program that is reviewed and updated regularly. No security system is perfectly impenetrable, however, and we cannot guarantee the absolute security of your information. In the event of a data breach that poses a risk to your privacy or security, we will notify you and any required regulatory authorities in accordance with applicable law and without undue delay.

7. Your Privacy Rights

Depending on where you reside, you may have the following rights regarding your personal information. Georgia residents have these rights under the Georgia Consumer Privacy Protection Act (SB 111, effective July 1, 2026).

7.1 Right to Access

You may request a copy of the personal information we hold about you, including the categories of data we collect, the purposes for which we use it, and the categories of third parties with whom we share it.

7.2 Right to Correction

You may ask us to correct personal information that is inaccurate or incomplete.

7.3 Right to Deletion

You may ask us to delete personal information we hold about you. We will honor this request unless we are required or permitted by law to retain it (for example, for tax or fraud-prevention purposes).

7.4 Right to Data Portability

You may request a copy of certain personal information in a portable, commonly used format so you can transfer it to another service.

7.5 Right to Opt Out of Sale or Sharing

You may direct us not to sell or share your personal information for cross-context behavioral advertising. We do not currently sell personal information, but you may submit a preference on record at any time by contacting us at the address below.

7.6 Right to Appeal

If we deny your request, you may appeal our decision by contacting us at the address below and requesting a review. We will respond to your appeal within the timeframe required by applicable law.

7.7 How to Submit a Request

To exercise any of the above rights, contact us at: larry.h@smileysuniqueuniverse.com. We will verify your identity before fulfilling any request and will respond within the timeframe required by applicable law—no later than 45 days, with one extension of an additional 45 days where reasonably necessary.

Note Regarding Organizer-Held Data: Because event organizers receive and independently control your information, a request to erase or restrict your information from their records must also be submitted directly to the relevant organizer. SUTE TIX cannot fulfill deletion or restriction requests on behalf of independent event organizers.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Keep you signed in during a session (session cookies – strictly necessary)
• Preserve your cart between pages (functional cookies – strictly necessary)
• Measure how the Platform is used so we can improve it (analytics cookies)

You can configure, block, or delete cookies through your browser settings. Please note that disabling session and functional cookies will prevent the checkout process from working correctly. We do not use cookies or tracking technologies to build advertising profiles or to share your browsing behavior with advertising networks.

9. Children's Privacy

The Platform is intended for individuals who are 13 years of age or older. We do not knowingly collect personal information from children under the age of 13. Our registration process requires users to confirm they meet this age requirement, consistent with the Children's Online Privacy Protection Act (COPPA), as amended effective 2026. If you are a parent or guardian and believe that a child under 13 has provided personal information to us without your consent, please contact us immediately at larry.h@smileysuniqueuniverse.com. We will promptly investigate and, if confirmed, delete that information from our systems and notify any affected third parties to do the same. We do not knowingly share the personal information of children under 13 with third parties for purposes that are not integral to our service.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The Effective Date at the top of this document reflects when the Policy was last changed. We will notify account holders of material changes by email at least 30 days before those changes take effect. Continued use of the Platform after the effective date of any update constitutes your acceptance of the updated Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

SUTE TIX – Smileys Unique Ticketing Experience
Danielsville, Georgia, United States
Email: larry.h@smileysuniqueuniverse.com

For marketing-related opt-outs, every promotional email we send includes a one-click unsubscribe link. You may also opt out by emailing us directly. See also our Terms and Conditions.

This document was last updated September 17, 2026. © 2026 SUTE TIX – Smileys Unique Ticketing Experience. All rights reserved.