Privacy Policy
DRAFT FOR CLIENT, OPERATIONS, AND LAWYER REVIEW — NOT FOR PUBLICATION. Proposed effective date: September 11, 2026 (2026-09-11). Use the actual effective date if publication occurs later. The retention schedule, access restrictions, consent controls, and cookie controls below are proposed practices for the rebuild, not claims that the existing website already implements them. They must be adopted and tested before publication. This draft does not establish legal compliance.
1. Who we are and how to contact us
Mardi Gras Made Ez operates the Mardi Gras Made EZ website and Balcony Hopper booking service. This policy explains how we handle information when you inquire, book, participate, or choose to receive messages.
For privacy questions or requests, contact matt@mardigrasmadeez.com or (504) 606-6261. Please do not send payment-card details, identification documents, or detailed medical records by ordinary email or text.
2. Information we collect and why
| Information | Purpose |
|---|---|
| Each guest's name | Manage the guest list, booking, check-in, and name changes |
| Each guest's date of birth | Check that the guest will be 21 or older on the selected event day |
| Where each guest is travelling from | Understand travel arrangements and coordinate the experience |
| Each guest's phone number | Coordinate the booking and event; send texts only under the consent choices described below |
| Food allergens | Coordinate food requests and discuss relevant precautions |
| Accessibility needs | Discuss requested accommodations and coordinate assistance |
| Motion-sickness information | Discuss transport-related concerns and assistance |
| Purchaser contact details, selected day, guest count, payment status, booking reference, and correspondence | Respond to inquiries, administer purchases and refunds, provide support, and maintain transaction records |
| Messaging choices and records of consent or withdrawal | Honor your choices and document which messages you agreed to receive |
| Device, browser, IP address, website activity, and cookie choices | Operate and secure the website and, where you permit optional tracking, understand website use and advertising performance |
Payment providers process payment credentials. We use payment confirmations, amounts, and transaction references to manage your booking. Do not enter card numbers in guest-information fields.
3. Sensitive information and other guests
Allergen, accessibility, and motion-sickness information may reveal sensitive health information. We use it to arrange the experience and discuss your needs, not to target advertising or build marketing audiences. We request only the practical details needed to help you; a diagnosis or medical history is not requested.
You can decline to provide these sensitive details in the form and contact us to discuss your needs directly. We may be unable to arrange a particular request without enough information to assess it; we will discuss that with you. Where consent is required, we obtain your separate, explicit consent before processing the sensitive details. You may withdraw that consent by contacting us. Withdrawal does not undo processing already carried out, and limited retention may be necessary where law requires it.
If someone books for you, we may receive your name and booking details from them. A purchaser must share this policy with the guests they book for. Booking for another person does not authorize the purchaser to opt that person into texts or provide any required sensitive-data consent on their behalf. Guests should provide sensitive information and consent directly through the designated guest-information process.
4. Who can see your information
Access is limited to people who need the information for their work: authorized booking staff, event coordinators, and service providers supporting the booking. Food-service staff receive the relevant allergen instructions; staff arranging access or transport receive the relevant assistance requirements. They do not need a guest's full date of birth or complete health responses for those tasks. The booking team uses date of birth for eligibility; event staff receive an age-eligibility result where sufficient.
Website, booking, customer-support, payment, and messaging providers process information needed to operate those services under appropriate restrictions. We may disclose the minimum information necessary to comply with legal obligations, respond to lawful requests, protect safety, or address fraud and disputes. We do not sell guest personal information. Sensitive guest responses and full dates of birth are not sent to advertising or analytics services.
Mobile information is not shared with third parties or affiliates for marketing or promotion. Service providers may handle limited information to deliver our messages and provide support on our behalf. Text-message opt-in records and consent are excluded from other sharing and are not provided to third parties for their own use. We do not sell or rent mobile numbers or text-message consent information.
5. How long we keep information
Proposed retention rule — operations and lawyer review required before adoption:
| Information | Retention and disposal rule |
|---|---|
| Full date of birth | Remove from active systems within 30 days after the guest's actual event day, including a rescheduled day. If the booking is cancelled or the guest is replaced, remove within 30 days after that guest's participation ends. Keep a simple age-check result and check date with the booking where needed, rather than the full birth date. |
| Food-allergen, accessibility, and motion-sickness information, including copied notes or exports | Remove from active systems within 30 days after the guest's actual event day, or within 30 days after cancellation or replacement ends that guest's participation. Apply the same rule to service-provider copies and staff working lists. |
| Restricted backups containing those deleted details | Allow the deleted information to expire from backups within 90 additional days. Keep those backups unavailable for routine use; if restored, reapply the deletion before using the data. |
| Booking, payment, correspondence, and consent records | Keep only for the period needed to administer the booking, honor messaging choices, and meet applicable accounting, legal, and dispute obligations. Minimize these records so they do not retain full birth dates or health responses after their shorter periods above. Keep only the suppression information needed to honor an opt-out. |
A documented legal preservation requirement may temporarily delay deletion of specific relevant records. We restrict access during that hold, review the continuing need, and delete the records when the requirement ends. A hold on payment records does not automatically justify retaining every health response.
6. Text messages and your consent
Mardi Gras Made Ez offers optional booking/service texts and a separately optional marketing text program.
By selecting the optional booking-text checkbox, you consent to receive automated text messages from Mardi Gras Made Ez at the mobile number you provide about your inquiries, booking confirmations, payment reminders, and event updates. Marketing texts require your separate, optional marketing consent. Providing a phone number, making a purchase, or accepting the Terms and Conditions does not by itself give text-message consent. Consent is not a condition of purchase or of submitting an inquiry.
If you separately select the marketing-text checkbox, you consent to recurring promotional text messages from Mardi Gras Made Ez about its experiences and offers. Message frequency varies with your inquiries, booking activity, event changes, and selected marketing preferences. Message and data rates may apply.
Reply STOP to unsubscribe at any time. You may receive one confirmation of your opt-out, after which program texts stop unless you opt in again. Reply HELP for assistance, or contact matt@mardigrasmadeez.com or (504) 606-6261. You may use email or telephone for booking support without enrolling in texts. Our Terms and Conditions also explain the messaging program.
We record the number, message category, consent wording/version, affirmative choice, date and time, form/source, and withdrawals so that we can honor and demonstrate your choices. We do not infer consent for another guest from the purchaser's selections.
7. Cookies, security, and your choices
Essential technologies support website operation and security. Optional analytics and advertising technologies require your choice through the website's cookie controls. You can reject them or change your choice later. The cookie information presented on the website should identify the technologies actually in use and their retention periods. Guest birth dates and sensitive responses must not be included in URLs, analytics events, or advertising audiences.
We use access restrictions and appropriate technical and organizational safeguards to protect information. No method of storage or transmission can guarantee absolute security. Payment providers and other linked services also have their own privacy notices.
Contact us to request access, correction, deletion, or a copy of your information, or to withdraw consent. We may need to confirm your identity using information proportionate to your request. Available rights and exceptions depend on applicable law; we will explain any reason we cannot fulfill a request. Withdrawing marketing or texting consent does not cancel your booking. Guests outside the United States should understand that information may be processed in the United States and in locations used by our service providers.
8. Children and changes to this policy
The Balcony Hopper is for guests aged 21 or older. The website is not directed to children, and we do not knowingly collect children's information. If you believe a child has supplied information, contact us so we can address it.
We will post policy updates with a real effective date and provide additional notice or request fresh consent when required. A new policy does not retroactively create consent that you did not give.