Privacy Policy

This website is operated by XYZ World Inc, trading as ÉCLAT US (“ÉCLAT”, “we”). Contact us at hello@eclatus.com or by post at [postal address].

1. What we collect

Exhibitor registration. Business name, website, phone number, business email, contact name and email, any additional emails you add, social media links, whether you intend to sell goods or services and the details you give, your chosen participation tier and business categories, and your consent to be contacted. If you upload logo files, we store those files.

Messages. When you use the contact form or the question box, we store your name, email, message and any business details you include.

Payment. Card details are entered on Stripe’s own payment page and never reach our servers. We store the Stripe session reference, the amount and whether payment succeeded.

Technical. To limit abuse we count requests against a one-way hash that combines your IP address with a time window. We do not store your IP address itself. We do not use analytics or advertising trackers.

2. Cookies

We set one cookie. It holds a random session reference so you can return to a registration you started, and so nobody else can open it. It is HttpOnly, Secure, SameSite=Lax, and expires after 30 days.

We set no advertising or analytics cookies.

3. Why we use it

To process and confirm exhibitor participation; to send you a confirmation and receipt; to answer your message; to take payment where you choose to pay by card; to invoice where you choose to pay after the event; to publish confirmed exhibitors on the event page; and to keep the site secure.

4. What is published

When your participation is confirmed, the event page shows your business name, your tier and your categories. It never shows your email address, phone number or contact name.

5. Who processes it for us

Cloudflare — hosting, the database that holds registrations and messages, and file storage for logos.

Resend — sending confirmations, receipts and our replies.

Stripe — card payments. Stripe handles card data as its own controller under its privacy policy.

Google Workspace — the hello@eclatus.com mailbox where your messages and replies are held.

We do not sell your information, and we do not share it for advertising.

6. How long we keep it

Registrations, messages and payment records are kept for as long as we need them to run the event, answer queries and meet our accounting and legal obligations. Abuse-prevention counters expire automatically. You can ask us to delete your details sooner — see below.

7. Your choices

Write to hello@eclatus.com to ask for a copy of what we hold, to correct it, or to have it deleted. If you no longer want to hear from us, say so in the same email and we will stop.

Depending on where you live, you may have additional rights under your local law, including under the laws of certain U.S. states.

8. Children

This site is for businesses and adult visitors. We do not knowingly collect information from children.

9. Security

The site is served over HTTPS. Registration sessions use an HttpOnly cookie, forms are accepted only from this website, uploads are checked by file type and size, and requests are rate limited. No system is perfect; tell us at once if you think something is wrong.

10. Changes

If we change this policy we will update the date at the top of this page.

Questions about this policy: hello@eclatus.com.