Privacy Policy - Old Fashioned Magic at The Alexander

Last Updated: April 2026

Cocktails and Card Tricks LLC (“we,” “us,” or “our”) operates the Old Fashioned Magic ticketing platform, including the website at tickets.oldfashionedmagic.com and any associated subdomains and services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service to browse events, purchase tickets, manage orders, or interact with our platform in any way.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with these practices, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

When you purchase tickets, create a cart, manage an order, or contact us, we collect information you provide, including:

• Name (first and last)

• Email address

• Phone number

• Billing zip or postal code

• Payment information (credit card, debit card, Apple Pay, or other payment method details, which are processed and stored by our payment processor, Stripe, and are not stored on our servers)

1.2 Information Collected Automatically

When you access the Service, we automatically collect certain technical and usage information, including:

• IP address

• Browser type and version

• Device type and operating system

• Pages visited and time spent on the Service

• Referring URL and how you arrived at the Service

• Cart activity, including items added, sessions selected, and dates browsed

• Purchase history and order details

• QR code scan data at the time of event check-in

1.3 Cookies and Tracking Technologies

We use cookies and similar technologies to operate the Service and support analytics. These include:

• Essential cookies required for the Service to function, including session management and cart functionality

• Analytics cookies that help us understand how the Service is used

Most web browsers allow you to control cookies through their settings. Disabling cookies may affect your ability to maintain a cart or complete a purchase.

1.4 Information from Payment Processing

We use Stripe as our payment processor. When you make a purchase, Stripe collects and processes your payment information in accordance with Stripe’s own privacy policy and its PCI DSS Level 1 certification. We receive only a payment confirmation, transaction ID, and basic card summary information such as the last four digits and card brand. We do not receive or store your full card number, CVV, or other sensitive payment credentials.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To process your ticket purchases, hold inventory during checkout, and deliver your tickets via email and SMS

• To send you order confirmations, ticket delivery messages, event reminders, and other transactional communications related to your purchase

• To verify your identity and ticket at the time of event check-in via QR code scan

• To detect and prevent fraud, resolve payment disputes, and maintain the security of the Service

• To improve the Service, analyze usage patterns, diagnose technical problems, and develop new features

• To comply with legal obligations, respond to lawful requests from public authorities, and enforce our Terms of Purchase

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

3.1 With Event Staff and Operators

As the operator of Old Fashioned Magic, our event staff and authorized personnel have access to your name, email address, phone number, ticket details, and check-in status for the purpose of managing the event, verifying attendance, and communicating with attendees. This information is used solely in connection with your attendance at our events.

3.2 With Service Providers

We share information with third-party service providers who perform functions on our behalf, including:

• Stripe — for payment processing and transaction management

• Twilio — for transactional SMS delivery, including order confirmations and ticket delivery

• SendGrid — for transactional email delivery, including order confirmations and ticket delivery

• Supabase — for secure database hosting and data storage

• Railway — for application hosting and infrastructure

• Cloudflare — for content delivery, DDoS protection, and edge security

These providers are contractually required to use your information only to perform services on our behalf and to protect your information in a manner consistent with this Privacy Policy.

3.3 For Legal Reasons

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Cocktails and Card Tricks LLC, our guests, or the public.

3.4 In a Business Transfer

If Cocktails and Card Tricks LLC is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you of any such change by posting a notice on our website.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, including to complete transactions, provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Order and ticket records are retained for a minimum of three years after the event date to support chargeback resolution, tax reporting, and legal compliance.

5. Data Security

We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption of all data in transit using TLS/SSL

• Payment processing handled entirely by Stripe, a PCI DSS Level 1 certified provider

• Database encryption at rest via Supabase

• Edge-level security, firewall protection, and DDoS mitigation through Cloudflare

• Role-based access controls limiting staff access to only the data necessary to perform their functions

• Regular security monitoring and review

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Correction

You may access and update the personal information associated with your orders by contacting us at the address below. We will respond to reasonable requests within a timely manner.

6.2 Deletion

You may request deletion of your personal information by contacting us at [email protected]. We will honor your request unless we are required to retain the information for legal, financial, or security purposes, such as chargeback resolution or tax compliance.

6.3 Opt-Out of Marketing

Transactional messages related to your purchases — including order confirmations, ticket delivery, and event reminders — are necessary to fulfill your order and cannot be opted out of. If you receive any promotional communications from us beyond transactional messages, you may unsubscribe at any time using the unsubscribe link in those messages or by contacting us directly.

6.4 California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights, including:

• The right to know what personal information we collect, use, and share

• The right to request deletion of your personal information

• The right to opt out of the sale of your personal information (we do not sell personal information)

• The right to non-discrimination for exercising your CCPA rights

To exercise your CCPA rights, contact us at [email protected].

7. Children’s Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly. If you believe we have collected information from a child under 18, please contact us at [email protected].

8. Third-Party Links

The Service may contain links to third-party websites or services, including social media platforms or venue websites. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party site you visit.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page. If we make material changes, we will provide notice through the Service or by other means. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Cocktails and Card Tricks LLC

Operating as: Old Fashioned Magic

Email: support@oldfashionedmagic.com

Website: www..oldfashionedmagic.com