PRIVACY
POLICY
We believe in full transparency about how Drift Fest PK collects, uses, and protects your data. This policy applies to our website, mobile experience, and event services.
01 — Information We Collect
—When you purchase tickets or register for Drift Fest PK, we collect your name, email address, phone number, and payment information (processed securely via our ticketing partner).
—When you browse our website, we automatically collect technical data including your IP address, browser type, device information, pages visited, and time spent on each page through Google Analytics 4.
—When you submit a review or interact with our live leaderboard, we collect the content you provide along with a session identifier to prevent abuse. No account creation is required.
—We do not collect sensitive personal data such as passport numbers, biometric data, or financial account details beyond what is strictly necessary for ticket purchases.
02 — How We Use Your Data
—To process your ticket orders and send confirmation emails and event updates.
—To operate and improve the Drift Fest PK website, including the live leaderboard and driver profiles.
—To analyze website traffic and user behavior through Google Analytics to improve our services.
—To display aggregated, anonymized statistics about event attendance and engagement — no individual data is ever publicly shared.
—To send important event communications such as schedule changes, venue updates, or safety notices. You may opt out of marketing emails at any time.
05 — Data Retention
—Ticket purchase records are retained for 7 years to comply with Pakistani financial regulations.
—Website analytics data (via Google Analytics) is retained for 14 months by default.
—Review content submitted to the site is retained indefinitely as part of our public event record. You may request removal by contacting us.
—Session tokens used for rate limiting are stored in Redis and expire automatically after 24 hours.
06 — Your Rights
—You have the right to access the personal data we hold about you.
—You have the right to request correction of inaccurate personal data.
—You have the right to request deletion of your personal data, subject to our legal retention obligations.
—You have the right to withdraw consent for marketing communications at any time.
—To exercise any of these rights, please contact us at privacy@driftfest.pk. We will respond within 30 days.
07 — Security
—All data is transmitted over HTTPS/TLS encryption. We use Supabase, which provides enterprise-grade PostgreSQL security including Row-Level Security (RLS) policies.
—Admin access to the platform is protected by PIN authentication. Sensitive operations are rate-limited to prevent abuse.
—We conduct regular security reviews and promptly patch known vulnerabilities.
—Despite these measures, no system is 100% secure. If you discover a security vulnerability, please disclose it responsibly at security@driftfest.pk.
08 — Children's Privacy
—Our website is not directed at children under the age of 13. We do not knowingly collect personal data from children.
—Drift Fest PK events are open to all ages, but ticket purchases must be made by an adult (18+).
—If you believe a child has provided us with personal data, please contact us immediately and we will delete it.
09 — Policy Changes
—We may update this Privacy Policy from time to time. The "Last Updated" date at the bottom of this page will reflect any changes.
—Significant changes will be communicated via email to registered ticket holders.
—Continued use of our website after changes constitutes acceptance of the updated policy.
10 — Contact Us
—Drift Fest PK is organized by AS-X Media, Karachi, Pakistan.
—For privacy-related inquiries: privacy@driftfest.pk
—For general event inquiries: info@driftfest.pk
—For security disclosures: security@driftfest.pk
Questions about this policy?
We're a real team of people who genuinely care about your privacy. Reach out directly.
privacy@driftfest.pk →