Privacy Policy
Last updated November 5, 2026
This policy explains how Interfusion Festival (“we”, “us”) handles information in the Interfusion Festival Volunteer Agreements portal at interfusionvolunteers.com (the “portal”). The portal is used to send volunteer agreements to festival volunteers and collect their signatures.
What we collect
- Volunteer contact details that festival staff enter or import, such as name, email address, phone number and volunteer team.
- Signed agreements: the answers you give on the agreement form, your typed or drawn signature, the date and time you signed, and the IP address and browser used, so the signature can be verified later.
- Card details, only when an agreement asks for them: the card number, expiry date, cardholder name and billing street address and ZIP. Card details are encrypted before they are stored and can be viewed only by authorized festival staff. We never store the security code (CVV). Stored cards are destroyed on the deletion date set for that agreement.
- Email delivery records: when each agreement email and reminder was sent, and whether it bounced.
- Staff accounts: for festival staff who sign in, their name, email, sign-in security settings and a log of actions taken in the portal.
How we use it
We use this information only to run the volunteer program for Interfusion Festival: to send you your agreement and reminders, record your signature, send you a signed copy, keep records of who has signed, and contact you about your volunteer role. We do not use it for advertising.
We don’t sell your data
We do not sell, rent or trade personal information. We do not share it with third parties except the service providers that host and run the portal (such as our hosting and network provider and Google, described below), or when the law requires it.
How we use Google user data
A festival administrator can connect their Google account to the portal. The portal asks Google only for the access it needs, and uses it only for these purposes:
- Gmail, send only (
gmail.send): to send agreement invitations, reminders and signed copies from the administrator’s Gmail address. - Gmail metadata (
gmail.metadata): to notice delivery failure (bounce) notices for emails the portal sent, so staff can fix a wrong address. The portal reads message headers only, not the content of other emails, and does not read, change or delete the administrator’s other mail. - Google Drive, files created by the portal only (
drive.file): to save a backup copy of each signed agreement PDF to the administrator’s Drive. The portal cannot see any other files in that Drive.
Google data is not used for advertising, is not sold, and is not shared with anyone else. No person reads it unless the administrator asks us to for support, it is needed for security, or the law requires it. The administrator can disconnect the portal at any time in the portal’s settings or at myaccount.google.com/permissions.
The portal’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we protect it
The portal is served only over HTTPS. Card details are encrypted with a key that requires a staff member’s personal passphrase to unlock. Staff sign in with two-step verification, and sensitive actions are recorded in an audit log. Signing links are private to each volunteer and can expire.
How long we keep it
We keep signed agreements and volunteer contact details for as long as they are needed for the festival’s records. Card details are destroyed on the deletion date set for the agreement. You can ask us to delete your information at any time, unless we must keep it by law.
Your choices
You can ask to see, correct or delete your information, or ask a question about this policy, by emailing [email protected].
Changes
If we change this policy, we will update the date at the top of this page.
Contact
Interfusion Festival, volunteer program
[email protected]