1. Introduction

East Coast Korean Camp Meeting ("ECKCM," "we," "our," or "us") operates the website my.eckcm.com and the associated online registration system. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

By creating an account or registering for an event, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Account Information

Email address and password (or OAuth credentials via Google)
Language preference (English or Korean)
Age confirmation (that you are at least 13 years old)
Consent timestamps (terms acceptance, age confirmation)

2.2 Personal Profile Information

Full legal name (English) and display name (Korean)
Gender
Date of birth
Phone number and country code
Email address
Church affiliation and role
Ministry department
School grade (for K-12 participants)

2.3 Event Registration Data

Attendance dates and number of nights
Lodging preferences (accessibility needs, floor preferences)
Meal selections per day
Airport pickup details (if requested)
Participant group information
Confirmation code

2.4 Payment Information

Payment method type (card, ACH bank transfer, Klarna, Amazon Pay)
Transaction amounts and status
Stripe reference IDs (PaymentIntent ID, charge ID, refund ID)
Invoice and line-item details

Important: We do not store your credit card numbers, bank account numbers, CVV, or other sensitive payment credentials. All payment instrument data is processed and stored solely by our payment processor, Stripe.

2.5 E-Pass and Check-in Data

E-Pass tokens linked to each registered participant
Check-in timestamps, type (main, dining, session), and method (self, kiosk)

2.6 Automatically Collected Data

Authentication session cookies (managed by Supabase)
UI preferences stored in browser (sidebar state, language preference)
CAPTCHA verification data (Cloudflare Turnstile, processed at signup only)

We do not use third-party analytics, tracking pixels, or advertising cookies.

3. How We Use Your Information

Event Registration: To process your camp meeting registration, assign lodging, prepare meals, and generate E-Passes.
Payment Processing: To charge registration fees, issue invoices, and process refunds.
Communication: To send transactional emails such as registration confirmations and payment receipts.
Check-in and Attendance: To manage on-site check-in and track attendance at events and sessions.
Administration: To enable event staff to manage registrations, verify payments, and resolve issues.
Security: To detect fraud, prevent unauthorized access, and maintain audit logs of administrative actions.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share data only with the following parties and only as necessary:

4.1 Service Providers

Provider	Purpose	Data Shared
Stripe	Payment processing	Payment method details, transaction amounts, billing info
Supabase	Database hosting & authentication	All account and registration data (encrypted at rest)
Vercel	Website hosting	HTTP request data (IP addresses, headers)
Resend	Transactional email delivery	Recipient email address, confirmation details
Cloudflare	CAPTCHA verification	Browser interaction data (at signup only)

4.2 Event Staff

Authorized ECKCM event staff and administrators may access your registration details, check-in records, and payment status for the purpose of managing the event.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal process.

5. E-Pass and Publicly Accessible Information

When your registration is confirmed, an E-Pass is generated for each participant with a unique URL. This E-Pass page displays:

Participant's full name (English and Korean)
Gender
Date of birth
Event name and dates
Confirmation code
QR code for check-in

The E-Pass URL is shared only with the registering user via email. However, anyone who obtains the E-Pass URL can view this information without logging in. Please keep your E-Pass links secure and do not share them publicly.

6. Children's Privacy

Account creation requires users to be at least 13 years old. Children under 13 may be registered as event participants by a parent or guardian who holds an account. We collect children's personal information (name, date of birth, gender, grade, meal preferences) only as necessary for event registration and management.

If you believe a child under 13 has created an account without parental consent, please contact us immediately so we can remove the account.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services and fulfill our legal obligations. Registration and payment records are retained for accounting and audit purposes.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Encryption in transit (HTTPS/TLS) and at rest
Row-level security policies on database tables
Secure authentication with hashed passwords
Audit logging of administrative actions
Webhook signature verification for payment events

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information
Withdraw consent for data processing

To exercise any of these rights, please contact us at the email address below.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: myeckcm@gmail.com