Privacy Policy
Last updated: January 2025
1. Introduction
Underboc Comedy Club ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.
2. Information We Collect
2.1 Information You Provide
- Event Reservations: Name, email, phone number, number of seats
- Account Information: When you sign in with Google, we receive your email address and basic profile information
- Contact Forms: Any information you voluntarily provide when contacting us
2.2 Information Collected via Google OAuth
When you sign in with Google, we collect:
- Email address
- Basic profile information (name, profile picture if public)
- Google account ID (for authentication purposes only)
We do NOT access: Your Google Drive, Gmail, or any other Google services beyond basic profile information.
3. How We Use Your Information
- Event Management: Process reservations and communicate about events
- Account Access: Provide secure access to administrative features for authorized staff
- Communication: Send event updates and important announcements (only if you've made a reservation)
- Service Improvement: Analyze usage patterns to improve our website and services
4. Information Sharing
We do NOT sell, trade, or rent your personal information to third parties. We may share information only in these circumstances:
- Legal Requirements: When required by law or to protect our rights
- Service Providers: With trusted partners who assist in website operation (hosting, analytics) under strict confidentiality agreements
- Emergency Situations: To protect the safety of our users or the public
5. Data Security
We implement appropriate security measures to protect your personal information:
- Secure HTTPS encryption for all data transmission
- Limited access to personal information on a need-to-know basis
- Regular security assessments and updates
- Secure database storage with access controls
6. Google OAuth and Third-Party Services
Our website uses Google OAuth for authentication. By signing in with Google:
- You agree to Google's Privacy Policy
- We only request necessary permissions for basic authentication
- You can revoke access at any time through your Google Account settings
7. Cookies and Analytics
We use cookies and similar technologies to:
- Remember your preferences and authentication status
- Analyze website traffic and performance (via Google Analytics)
- Improve user experience
You can control cookies through your browser settings.
8. Your Rights
You have the right to:
- Access: Request information about the data we hold about you
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information (subject to legal requirements)
- Portability: Request a copy of your data in a portable format
- Withdrawal: Withdraw consent for data processing at any time
9. Data Retention
- Event Reservations: Retained for administrative purposes and future event planning
- Account Information: Retained while your account is active
- Analytics Data: Aggregated and anonymized data may be retained indefinitely
10. International Data Transfers
Your information may be transferred to and processed in countries other than Switzerland. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
11. Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.
This Privacy Policy is governed by Swiss law and complies with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) where applicable.