1. Who is responsible and what this notice covers
DotWin LLC, a Wyoming limited liability company with home offices in Texas, operates The Homeschool Social (THS). This Privacy Policy covers our THS website, interest lists, event inquiries, ticketing and registration, event-related communications, and Winter Formal, Summer Bash, and other student events that link to this notice. Contact privacy@dotwin.win for privacy questions and legal@dotwin.win for event or ticket questions.
An independent venue, payment provider, photographer, or other service may also have its own notice when you deal with it directly. We explain below when information may be shared. This notice does not convert a third party’s unrelated activity into a DotWin service or automatically apply another DotWin client’s data practices to THS. The private Society membership service has additional membership-specific disclosures at /policies/privacy. This event notice supplements those disclosures for event purchases and participation; joining the membership list does not buy an event ticket.
2. Information we collect and where it comes from
Information you provide: your name, email, telephone number, student grade or age band, interest-list preferences, event questions, and the content of communications you send us. The current interest forms collect an email address and student stage or grade; they are not an event registration or a payment.
For event registration when offered: attendee and guardian identity and contact information, event eligibility, emergency contacts, authorized pickup details, attendance and check-in status, necessary accommodation instructions, and your separately provided choices about photos or marketing. Do not submit a Social Security number, a copy of a full medical record, or information unrelated to the requested service.
For ticketing and agreements: the order, seat assignment, price, discounts, payment status and provider references, refunds, disputes, the agreement version, adult signer name and capacity, electronic acceptance time, and evidence needed to associate acceptance with the transaction. Payment credentials are submitted to the payment provider; we do not need or ask you to email full card numbers or security codes.
For official voting: the verified purchaser account and order, selected theme, authorization, acknowledgment of the nonrefundability consequence, and first-vote time. A preview selection that is not submitted as an official ballot is not a purchased vote and does not change a refund right.
Information from use of the site: IP address, browser and device characteristics, request time, visited page or request path, referring page when supplied, and security or error records. Infrastructure providers may process these to deliver the site and detect abuse. The invitation service derives a one-way request fingerprint from an IP address to limit repeated submissions; a fingerprint can still be personal data and is not treated as automatically anonymous.
Information from others: a guardian or purchaser registering an attendee, an authorized pickup contact, a payment or hosting provider, and staff, venues, participants, or authorities reporting a safety incident. We may receive relevant incident descriptions, witness accounts, and event photos or recordings. Provide other people’s information only when authorized or when reasonably necessary to report a safety concern.
3. Why we use information
We use information to respond to requests, send the updates you requested, administer eligibility and registration, provide and account for tickets, associate attendees with guardians, manage arrival and pickup, deliver included portraits, arrange requested accommodations, send dress and event instructions, and handle refunds and support.
We also use necessary information to protect students and staff, investigate reports, prevent payment and ballot abuse, enforce legitimate ticket rules, maintain acceptance and financial records, diagnose site problems, and meet legal, tax, insurance, and reporting obligations. Access to health or accommodation information is limited to people who need it for the stated purpose. Required processing is not permission to repurpose a student’s sensitive information for advertising.
We use aggregate information to understand demand and improve events. We do not sell personal information, rent student or guardian contact lists, or share those lists with sponsors for their own marketing. We do not use student information for cross-context behavioral advertising or decisions producing legal or similarly significant effects based solely on automated profiling. We do not use attendee information or images to train general-purpose AI models.
4. Students, guardians, and children under 13
Student events may serve different age groups, but our public inquiry and interest forms are intended for adult purchasers and guardians. A parent or legal guardian must handle a child’s online registration and required permissions. We do not invite a child under 13 to independently submit personal information, create an account, or join a public online community through these forms. An age requirement for an in-person event is not permission for independent online registration.
If we learn that we collected personal information online directly from a child under 13 without the authorization required by law, we restrict use and delete it or obtain the required verifiable parental consent before continuing, as applicable. A standard checkout checkbox is not represented as sufficient verifiable parental consent for every child-directed online service. Before introducing a feature that collects information directly from children and requires that consent, we must provide the required direct parent notice and consent process.
A verified parent may ask to review, correct, or delete their child’s information and may withdraw a permission they previously granted, subject to lawful retention and another person’s rights. We may request proportionate evidence of identity and authority without collecting more information than needed. For an adult student, a purchaser or parent does not automatically have a right to all of that student’s private information. If an accommodation or permission essential to safe participation is withdrawn, we explain the practical effect; withdrawal does not itself create a refund outside the Event Terms or applicable law.
5. Sensitive information and separate choices
Health, disability, allergy, medication, emergency, and certain child-related information can be sensitive. We request only information reasonably needed for a stated safety or accommodation purpose, explain the request, and obtain separate consent when the law requires it. An acknowledgment of this notice is not blanket consent to collect all sensitive information. Where the law permits emergency processing without advance consent, we limit it to the emergency or legal obligation.
We do not use facial-recognition identification, create biometric identity templates from event portraits, or request continuous precise device location for THS events. A normal photograph may still be personal information. We do not intentionally publish student rosters, addresses, emergency contacts, medical instructions, private ballot selections, or pickup authorizations.
Promotional use of an identifiable student’s image, voice, or testimonial requires the separate permission described in the Event Terms, including guardian authorization for a minor. Declining that permission does not prevent attendance. A portrait included in a ticket is for delivery to the attendee or family and is not automatic permission for advertising. Contact privacy@dotwin.win to change a media choice or raise a concern about an identifiable image. Venue-operated safety cameras and an attendee’s independent photographs may be outside our control; we will identify the appropriate contact when reasonably possible.
8. Email, telephone, and marketing choices
Submitting an expressly labeled invitation or launch-update request asks us to send that series of messages to the provided email. You may unsubscribe from promotional emails using the message’s unsubscribe mechanism or by emailing privacy@dotwin.win. We keep only the suppression information reasonably needed to honor an opt-out. Buying a ticket does not automatically enroll you in unrelated marketing.
Receipts, event changes, dress instructions, pickup issues, and safety notices are transactional or operational messages. An unsubscribe from advertising does not block information needed to provide a purchased event. We do not treat a terms checkbox as consent to promotional texts or automated marketing calls. If we offer those services, the required separate disclosures and opt-in apply. Emergency or service-related contact uses the information supplied for that purpose.
9. Retention and security
We retain information for the purpose for which it was collected and for legitimate legal, accounting, safety, fraud-prevention, and dispute needs. Interest-list information is retained while the requested relationship is active or until an effective deletion or unsubscribe request, with limited suppression and legal records retained as necessary. Routine event logistics and sensitive accommodation information should be removed or minimized after the event and related follow-up when no longer needed.
Ticket transactions, accepted agreement versions, acceptance evidence, ballot-related refund decisions, and incident records may need to be retained longer for accounting, insurance, legal obligations, and limitation periods, including periods that differ when a participant is a minor. We do not set one arbitrary deletion date for every type of record. A legal hold may suspend deletion. Backups age out under our service providers’ retention processes; data restored from a backup remains subject to the applicable deletion request.
We use reasonable administrative, technical, and organizational safeguards, including access controls and restricted access appropriate to the information. No website, email system, or storage service is guaranteed perfectly secure. Send accommodation information through the private channel designated for it, not a public post. We will provide legally required notices of a qualifying data-security incident.
10. Access, correction, deletion, and privacy appeals
Email privacy@dotwin.win to request access to, correction of, a portable copy of, or deletion of your personal information; to withdraw a consent; or to ask about an applicable opt-out. Put “THS privacy request” in the subject and describe the request and the email associated with your record. A guardian may act for a child where authorized. We accept an authorized agent where applicable law permits one and may verify the agent’s authority and your identity. Do not send a government ID or medical record unless we explain why proportionate verification requires it.
We respond within the time required by applicable law. For a request subject to the Texas Data Privacy and Security Act, that is generally within 45 days, with one additional 45-day extension when permitted and with notice and an explanation during the initial period. We explain a denial and how to appeal. To appeal, email the same address with “THS privacy appeal” and the original request details. We provide the required written appeal decision within 60 days for a covered Texas appeal. If denied, you may contact the Texas Attorney General through its Consumer Privacy Rights complaint process at texasattorneygeneral.gov.
We do not penalize you for exercising a protected privacy right. Some requests may be limited by identity-verification requirements, another person’s privacy, security, a legal obligation, an active claim, or the need to maintain an accurate record of a completed transaction. We explain an applicable exception rather than treating it as permission to retain everything indefinitely. Other state or national laws may give additional rights when they apply; this policy does not waive them.
11. Processing location and changes to this policy
THS is operated from the United States. Our service providers may process information in the United States or other locations where they operate, subject to applicable safeguards and legal requirements. We do not promise that all providers keep every record in Texas or Wyoming.
The effective date and version appear at the top of this page. We post changes here and give additional notice or obtain new consent when required, particularly before materially changing the use of children’s or sensitive information. A policy update does not retroactively create consent for a use that required a separate choice. Contact privacy@dotwin.win for questions, accessible copies, or current business mailing details.
Public analytics and optional reminders · November 6, 2026 supplement
Beginning with this feature’s publication, we measure public-page visits, clicked actions, approximate click positions, scrolling and visible time with anonymous temporary browser-tab session identifiers. We categorize referring sources and screen sizes without storing referring URLs. We exclude private account pages and form contents, honor browser Do Not Track and Global Privacy Control signals, and delete public activity after 90 days. We do not collect student identities or make session-replay recordings for these reports.
Adults may separately request up to two emails about an unfinished Friendsgiving checkout. The optional checkbox starts unchecked. Each reminder includes a link to stop further reminders. These emails do not enroll anyone in a newsletter. Completed registration, an active retry, a waitlist entry, refunds, unavailable capacity and the event deadline suppress checkout reminders. This notice applies prospectively and does not alter an archived agreement or create retroactive consent.
The Homeschool Social