Legal

Privacy Policy

Last updated: July 1, 2026

This Privacy Policy explains how City Elite Group Inc. ("Festopia," "we," "us") collects, uses, and protects information when you use festopia.com and related services. This page is maintained by Festopia to answer common privacy questions about our platform.

Our Principles

• We do not sell customer personal information.
• We do not rent customer data to third parties.
• We use customer information only to operate Festopia, provide services, improve the platform, comply with legal obligations, and communicate with customers.

Information We Collect

Account Information

• Name
• Email
• Mobile phone number
• Password (encrypted and managed by our authentication provider)

Booking Information

• Hotel selections
• Room selections
• Occupancy
• Event Pass purchases
• Booking history
• Payment schedules
• Payment status

Traveler Information

• Birthday
• City
• Country
• Flight information
• Passport status (if voluntarily provided)
• Emergency contact information
• Dietary restrictions
• Special requests
• T-shirt size (optional)

Brand Partner Information

• Referral codes
• Marketing performance
• Commission information
• Payment history
• Application information

Marketing Information

• SMS opt-in status
• Email marketing preferences
• Event interests
• Waitlist entries
• Birthday Club membership
• Travel preferences

Technical Information

• IP address
• Device and browser information
• Cookies
• Analytics events
• Login history
• Fraud prevention logs

Payment Information

Festopia never stores full credit card numbers. All payments are securely processed by Stripe, and we receive only the limited information necessary to fulfill your booking (such as last four digits, card brand, and payment status).

Third-Party Services

We use the following service providers to operate Festopia:

• Stripe — payments
• Supabase — authentication, database, and storage
• Google — OAuth login
• Resend and Lovable Email — transactional and marketing email
• Twilio — SMS (when enabled)
• Google Analytics — website analytics
• Meta Pixel — advertising measurement
• TikTok Pixel — advertising measurement (when enabled)

Cookies

We use cookies and similar technologies for:

• Authentication and login sessions
• Remembering booking progress
• Marketing attribution and referral tracking
• Analytics
• Performance improvements

Data Retention

• Customer accounts are retained while active.
• Booking history is retained for legal, tax, and customer service purposes.
• Marketing preferences are retained until the customer opts out.
• Customers may request deletion where legally permitted.

Your Rights

• Access your personal information
• Correct inaccurate information
• Request deletion (subject to legal obligations)
• Withdraw marketing consent
• Opt out of SMS at any time by replying STOP
• Opt out of marketing email using the unsubscribe link in any message

Children

Festopia is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

Security

We use industry-standard safeguards including encryption in transit, encrypted password storage, restricted database access, and monitored infrastructure. No system is perfectly secure, but we work continuously to protect your data.

Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated by email or in-product notice.

Contact Us

Questions about this Privacy Policy or your data can be sent to info@festopia.com.

City Elite Group Inc. — parent company of Festopia.