Your trust matters
Privacy Policy
How BUMI Festival collects, uses, protects, and manages personal information for our website, ticketing, communications, and festival operations.
- PIPEDA-aware
- CASL-conscious
- Cookies & data transparency
Privacy, clearly explained.
BUMI Festival is built on community, trust, and respect for the people who gather with us. This policy is designed to make our privacy practices clear and accessible for attendees, families, vendors, artists, sponsors, volunteers, website visitors, and anyone who communicates with us.
This page focuses on privacy, data, cookies, and communications. Ticket purchase terms, vendor terms, waivers, and entry rules may be presented separately during ticketing, vendor registration, or check-in.
Last Updated: October 2025
Organization: Bumi Festival Ltd.
Privacy Contact: [email protected]
What we collect
Contact details, ticketing information, form submissions, communications, device/cookie data, and information needed to operate the Festival safely.
Why we collect it
To process requests, manage tickets, communicate Festival updates, support safety, improve the website, and send marketing only where permitted.
Your choices
You may request access or correction, unsubscribe from marketing, adjust cookie settings, or contact us with privacy questions.
The policy
How BUMI Handles Personal Information
The following policy language is written for BUMI’s public privacy page and can be reviewed by Canadian counsel before publication.
1. Who We Are
This Privacy Policy explains how Bumi Festival Ltd. (“BUMI”, “Bumi Festival”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information in connection with our website, ticketing, vendor and participant forms, newsletters, event communications, and festival operations.
BUMI Festival Ltd. is located at 9251 Yonge Street, Richmond Hill, Ontario. For privacy-related questions, please contact us at [email protected].
2. Scope of This Policy
This Policy applies to personal information collected through bumifest.ca, BUMI forms, newsletter sign-ups, event inquiries, vendor or participant submissions, festival-related communications, and other online or offline interactions connected to BUMI Festival.
Ticket purchases, vendor booth purchases, add-ons, and payments may be processed through third-party platforms such as TicketSpice, Google Ads, Meta Ads or other service providers. Those providers may also process your information under their own privacy policies and terms.
3. Personal Information We May Collect
Depending on how you interact with us, we may collect:
- Identity and contact information, such as name, email address, phone number, city, province/state, country, and organization or brand name.
- Ticketing and registration information, such as ticket type, order details, attendee names, add-ons, parking or shuttle selections, accommodation/camping selections, wristband or check-in information, and communications related to your purchase.
- Vendor, artist, sponsor, volunteer, and collaborator information, such as application details, booth or service descriptions, social media links, website links, permits or documents you submit, and business contact details.
- Payment-related information, such as transaction status and billing details. We do not intentionally store full credit card numbers on our website; payment data is typically handled by payment processors and ticketing platforms.
- Health, accessibility, or support-related information only if you choose to provide it so we can respond to your request or support festival operations.
- Communications, including messages you send to us by email, forms, social media, or other channels.
- Website and device information, including IP address, browser type, device type, pages visited, referral source, approximate location, and cookie or analytics information.
- Media and event content, such as photos or videos taken at the Festival, where permitted by applicable law and event terms.
4. How We Use Personal Information
We use personal information for reasonable festival, business, safety, and communication purposes, including to:
- Operate, administer, and improve the BUMI website and Festival experience.
- Process ticket, add-on, vendor, sponsor, artist, volunteer, and inquiry submissions.
- Respond to questions, applications, requests, and customer service matters.
- Send essential event communications, such as confirmations, updates, schedule changes, safety notices, arrival instructions, ticketing notices, and operational information.
- Manage check-in, wristbands, credentials, parking, camping, shuttle, accommodations, site access, and festival logistics.
- Review vendor, sponsor, artist, facilitator, volunteer, and collaboration applications.
- Improve our marketing, website performance, audience understanding, and user experience.
- Send newsletters, promotional emails, or marketing communications where we have consent or are otherwise permitted by law.
- Support safety, security, emergency response, legal compliance, dispute resolution, fraud prevention, and enforcement of our terms and policies.
5. Consent
By using our website, submitting a form, purchasing tickets or add-ons, communicating with us, or interacting with BUMI Festival, you consent to the collection, use, and disclosure of your personal information as described in this Policy, unless a different consent process applies.
You may withdraw consent to non-essential uses, such as marketing communications, at any time. Withdrawing consent may affect our ability to provide certain services, process requests, or communicate important event-related information.
6. Cookies, Analytics, Pixels, and Similar Technologies
Our website may use cookies, analytics tools, tracking pixels, embedded media, and similar technologies to help the website function, understand visitor behaviour, measure marketing performance, remember preferences, and improve the user experience.
These technologies may collect information such as pages viewed, time on page, referral source, device information, browser type, IP address, approximate location, and interactions with links or forms.
You can usually manage or block cookies through your browser settings. Some website features may not work properly if cookies are disabled.
7. Marketing Communications and CASL
We may send newsletters, festival announcements, offers, vendor or sponsor opportunities, ticket updates, and other promotional communications where we have your consent or are otherwise permitted to do so under applicable law.
Marketing emails should identify BUMI Festival as the sender and include a way to unsubscribe. You can unsubscribe from non-essential marketing communications at any time. Essential transactional or operational messages, such as ticket confirmations, safety notices, event changes, or information required to deliver a service you requested, may still be sent where permitted.
8. Sharing Personal Information
We do not sell personal information. We may share personal information with service providers, partners, and third parties where reasonably necessary for festival operations, website services, ticketing, payments, email delivery, analytics, marketing tools, customer support, security, legal compliance, or event logistics.
Examples may include ticketing platforms, payment processors, email marketing platforms, website hosting providers, analytics providers, form tools, CRM or spreadsheet tools, security and emergency service providers, vendors or contractors involved in festival operations, and professional advisors.
We may also disclose personal information if required by law, legal process, government request, emergency, investigation, enforcement of our terms, or to protect the rights, safety, and property of BUMI, attendees, staff, vendors, partners, or the public.
9. Third-Party Websites and Platforms
Our website may link to third-party websites, ticketing pages, payment pages, social media platforms, embedded maps, videos, or other external services. We are not responsible for the privacy practices, security, or content of third-party websites or platforms. Please review their policies before submitting information to them.
10. Retention of Personal Information
We keep personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain records, meet legal, accounting, insurance, safety, and operational requirements, resolve disputes, and enforce agreements.
Retention periods may vary depending on the type of information and the reason it was collected. When information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.
11. Security Safeguards
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, or destruction.
No website, email system, payment process, or online platform can be guaranteed to be completely secure. You should use caution when sharing personal information online and contact us if you believe your information may have been compromised in connection with BUMI.
12. Children and Minors
BUMI Festival may be attended by families and minors. We do not knowingly collect personal information from children without appropriate parent or legal guardian involvement or consent where required.
For Kids Passes, Teen Passes, minor attendees, or family-related requests, a parent or legal guardian may need to provide information on behalf of the minor. Parents or guardians may contact us with privacy questions related to a minor’s information.
13. International or Cross-Border Processing
Some of our service providers or platforms may store or process information outside Ontario or Canada. When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access by courts, governments, or regulatory authorities.
We take reasonable steps to use reputable service providers and to limit the information shared to what is reasonably necessary for the relevant service.
14. Your Privacy Rights and Choices
Subject to applicable law, you may request access to personal information we hold about you, ask us to correct inaccurate information, withdraw consent to non-essential uses, unsubscribe from marketing communications, or ask questions about our privacy practices.
To make a privacy request, contact us at [email protected]. We may need to verify your identity before responding. We will respond within a reasonable time, subject to legal, operational, security, and record-keeping requirements.
15. Updates to This Policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. Your continued use of the website or interaction with BUMI after an update means the updated Policy applies going forward.
16. Contact Us
For privacy questions, access or correction requests, consent withdrawal, or concerns about how your personal information is handled, please contact:
Bumi Festival Ltd.
9251 Yonge Street, Richmond Hill, Ontario
Email: [email protected]
Questions about your information?
Contact BUMI
For privacy questions, access or correction requests, consent withdrawal, or concerns about how your personal information is handled, contact the BUMI team directly.
Privacy Contact
Bumi Festival Ltd.
9251 Yonge Street, Richmond Hill, Ontario
Email: [email protected]
Introduction
Welcome to the Bumi Festival! Protecting your privacy and personal data is a priority for us. This Privacy Policy outlines how we collect, use, and protect your information when you visit our website, purchase tickets through our partner SpiceTicket, and participate in the festival.
By accessing our website or using our services, you agree to this Privacy Policy.
1. Information We Collect
We may collect the following types of personal information:
a. Information You Provide
- During Ticket Purchases: Full name, email address, phone number, payment details, and ticket preferences.
- Newsletter Signup: Email address.
- Volunteer or Vendor Registration: Name, contact details, and additional information relevant to your application.
- Accommodation Bookings: Preferences for lodging or camping.
b. Automatically Collected Information
When you visit our website or the SpiceTicket platform, we may collect:
- IP address
- Browser type
- Device information
- Browsing behavior on our website
c. Payment Information
Payments made for tickets and accommodations are processed securely via SpiceTicket. We do not store or manage your credit card details. For questions regarding payment security, please refer to SpiceTicket’s privacy policy.
2. How We Use Your Information
We collect your personal data for the following purposes:
- Ticketing and Event Management: To process ticket purchases, verify identities, and manage entry to the festival.
- Communications: To send booking confirmations, festival updates, and promotional content (with your consent).
- Accommodation Management: To coordinate lodging or camping preferences.
- Customer Support: To respond to inquiries or support requests.
- Marketing: To inform you about future festivals, offers, and events.
- Improvement of Services: To analyze website usage and enhance user experience.
3. Sharing Your Information
We do not sell your personal data to third parties. However, we may share your information with:
- Service Providers: Such as SpiceTicket for ticketing and payment processing.
- Festival Partners: For accommodation bookings and volunteer or vendor coordination.
- Law Enforcement: If required by law or to protect our legal rights.
4. Data Security
We implement robust security measures to protect your personal information from unauthorized access, disclosure, or alteration. This includes encrypted payment processing through SpiceTicket and secure data storage.
While we strive to ensure the highest level of security, no method of data transmission or storage is entirely secure. By using our services, you acknowledge this risk.
5. Your Rights
You have the right to:
Request deletion of your personal data, subject to legal or operational requirements.
Access the personal information we have about you.
Request corrections to your data.
Opt out of marketing communications by clicking “unsubscribe” in our emails.
6. Cookies
We use cookies to improve your browsing experience and analyze website traffic. By continuing to use our website, you consent to the use of cookies. You can manage your cookie preferences in your browser settings.
7. Third-Party Links
Our website may contain links to third-party platforms, including SpiceTicket for ticket purchases. We are not responsible for the privacy practices of external websites. Please review their policies before providing personal information.
8. Children’s Privacy
The Bumi Festival is family-friendly, and we take extra precautions for children’s privacy. Parents or guardians must provide consent for any personal data collected for Kids Pass ticket holders.
9. Updates to This Policy
We may update this Privacy Policy periodically. Any changes will be posted on our website, and the updated policy will take effect immediately.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or how your data is handled, contact us at:
Email: [email protected]
Phone: +1-647-394-7478