Privacy Policy

1. Information We Collect

Registration and sign-in: your email address (used for magic-link sign-up/sign-in) and an optional display name.

Ticketing and attendee information: tickets are sold through TicketSpice, a third-party ticketing platform. When you purchase tickets, we receive order and attendee information from TicketSpice (such as attendee names, email addresses, ticket types, and order numbers) for ticket verification, admission check-in, and event administration. Payment and cardholder data are processed directly by TicketSpice and its payment processors — we do not collect or store your payment card information.

Usage information: for security and abuse prevention, we keep basic access logs (such as IP address, browser type, and access times).

Cookies, analytics and advertising information: see Section 4.

Event photography and video: the event may be photographed and recorded; see Section 7.

Communications: information you provide when you contact us (e.g., by email).

Minors' information: provided only by a parent or guardian (e.g., an accompanying minor's name on a ticket); see Section 8.

2. How We Use Information

We use personal information to: provide account registration and sign-in; issue tickets, verify admission, and organize and run the event; send you notices and confirmations directly related to your order and the event (transactional messages); send you event news and promotional emails where you have consented or as otherwise permitted by law (see Section 3); provide customer support; protect the security of the website and the event and prevent abuse and fraud; understand and improve the website and the event through analytics tools (see Section 4); use event photos and video for event records and promotion (see Section 7); and comply with legal obligations (such as tax and financial record-keeping).

We do not sell your personal information.

3. Marketing Emails and Your Choices (CASL)

In accordance with Canada's Anti-Spam Legislation (CASL):

• We send marketing/promotional emails only where you have actively opted in, or within an existing business relationship permitted by law (for example, a recent ticket purchase);
• Every marketing email identifies us and our contact information and includes an unsubscribe link; unsubscribe requests take effect within no more than 10 business days;
• Unsubscribing does not affect essential transactional messages such as order confirmations and event-change notices;
• We do not direct marketing at minors.

4. Cookies, Analytics and Advertising Tools

Essential cookies: we use essential session cookies to keep you signed in. These are necessary for the website to function.

Analytics and advertising tools: subject to your choices in our cookie banner, we use the following third-party tools to collect website-usage and ad-conversion information (such as page views, referral source, device type, and ticket-purchase conversion events) in order to improve the website, measure campaign performance, and run remarketing advertising: Google Analytics 4 (Google LLC), Meta Pixel (Meta Platforms, Inc.), Microsoft Advertising / Bing UET (Microsoft Corporation), and TikTok Pixel (TikTok Pte. Ltd. and its affiliates). These providers process this information outside Canada (primarily in the United States and Singapore); see Section 5.

Your choices: you may decline, or withdraw your consent to, non-essential cookies at any time through the website's cookie settings panel, and you may manage or delete cookies in your browser. Declining non-essential cookies does not affect core functions such as sign-in and ticket purchasing.

5. Third-Party Service Providers and Processing Outside Canada

We use the following service providers to process personal information, some of which are located outside Canada (primarily in the United States):

When your personal information is stored or processed outside Canada, it is subject to the laws of those jurisdictions and may be accessible to law enforcement or national security authorities there in accordance with those laws. If you would like written information about our policies and practices with respect to service providers outside Canada, or have any questions about such processing, please contact our Privacy Officer listed in Section 12 (the designated contact for the purposes of section 13.1 of Alberta's PIPA).

Except as necessary to provide the services above, with your consent, or as required by law, we do not share your personal information with unrelated third parties.

6. Retention and Security

We retain personal information only for as long as necessary to fulfil the purposes above and to meet legal requirements:

• Account information: for as long as your account exists; deleted or anonymized within 30 days after you request deletion (except where the law requires retention);
• Access logs: no longer than 90 days;
• Order and financial records: retained for 6 years as required by Canadian tax rules;
• Marketing lists: until you unsubscribe or withdraw consent.

We use reasonable technical, physical and administrative safeguards to protect your personal information. If a security incident involving your personal information creates a real risk of significant harm to you, we will notify you and the relevant privacy regulators (such as the Office of the Information and Privacy Commissioner of Alberta and the Office of the Privacy Commissioner of Canada) as required by law.

7. Event Photography and Your Image

The event may be photographed and video-recorded by us or by persons engaged by us, for event records, news coverage, and promotion of this and future events (including publication on this website and our official social media channels). Clear notices will be provided on the ticket purchase page and at event entrances.

• If you do not wish identifiable close-up images of you to be used for promotion, you may tell our staff on site, or contact us afterwards to request that we stop using and delete the relevant images; we will use reasonable efforts to do so;
• Identifiable images in which a minor is the primary subject will be used for promotion only with the consent of the minor's parent or guardian.

8. Minors

Account registration and ticket purchases must be completed by an adult who has reached the age of majority in their province (18 in Alberta; 19 in British Columbia).

Minors' information involved in family/student ticket purchases (such as names on tickets) must be provided, with consent, by a parent or guardian. We collect only the minimum information necessary to run the event, and we do not use minors' information for marketing, profiling, or behavioural tracking. Guardians may contact us at any time to access, correct, or delete such information.

If we learn that we have collected a minor's personal information without guardian consent, we will delete it promptly.

9. Your Rights

Under PIPEDA and applicable provincial PIPA, you have the right to:

• Access the personal information we hold about you, and how it has been used and disclosed;
• Correct inaccurate or incomplete information;
• Withdraw consent (including unsubscribing from marketing emails and withdrawing cookie consent) — withdrawal does not affect processing already carried out on the basis of consent, and may affect services that depend on the information;
• Request deletion (to the extent permitted by law and where we have no retention obligation).

To exercise these rights, contact us as set out in Section 12. We may need to verify your identity, and we will respond within 30 days (where the law permits an extension, we will explain the reason and the new timeline in writing). If you are not satisfied with our response, you have the right to complain to the Office of the Information and Privacy Commissioner of Alberta (OIPC Alberta), the Office of the Information and Privacy Commissioner for British Columbia (OIPC BC), or the Office of the Privacy Commissioner of Canada (OPC).

10. Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with the effective date and version number. We will give advance notice of material changes by email or by prominent notice on the website.

11. Language

This policy is available in Chinese and English (Chinese version: fandeng.ai/privacy). In the event of any inconsistency between the two versions, the Chinese version prevails.

12. Contact Us · Privacy Officer

We have designated a Privacy Officer responsible for personal information protection:

• Email: info@fandeng.ai (please include “Privacy” in the subject line)
• Operator: Rocky Mountain Scenic Tours Ltd. (至尊旅游)
• Address: 880 4 Ave SW, Calgary, AB T2P 0K4, Canada