Privacy Policy

1. Who we are

Thames Coast is a free community events hub for New London, Groton, and Mystic, Connecticut. It is owned and operated by Elevare Studio LLC (“we,” “us,” “Thames Coast”). We are the data controller for the information described here.

We built Thames Coast to be low-data by design: there are no user accounts, no login, and no advertising trackers. You can browse the entire site without giving us anything.

2. The short version

• You can read the whole site anonymously. We don’t make you sign in.
• We only collect personal information when you choose to give it: posting an event, subscribing to the Friday email, or claiming a business listing.
• We don’t set advertising or cross-site tracking cookies, and we don’t sell your personal information.
• You can ask us to show you, correct, or delete what we hold, and you can unsubscribe from email in one click, any time.

3. What we collect, why, and our legal basis

We collect only what a given action needs. We never require an account.

• Browse the site: standard server/request logs (IP address, browser type, pages requested, timestamp), handled by our hosting provider, to serve the site, keep it secure, and prevent abuse (legitimate interest).
• Post an event: organizer name, organizer email, and the event details you type (title, category, dates, venue name, address, description, price/free, ticket or RSVP link, optional image). We also record the submitting IP for spam prevention. Used to publish your event, contact you about the listing, and screen for spam/quality (consent + legitimate interest).
• Subscribe to the Friday email: your email address, an optional town/category interest preference, subscription status, and a random unsubscribe token, to send the weekly “This Weekend on the Thames Coast” email you asked for (consent, double opt-in).
• Claim a business listing: business name, town, category, contact name, contact email, and optionally phone and website, to set up your listing, confirm your founder spot, and follow up about featuring (consent + legitimate interest).
• Pay for a listing or sponsorship (future, dormant until billing launches): billing and payment details are collected and processed by Stripe. We store a Stripe customer/transaction identifier and the amount, not your full card number (contract).

We do not collect government IDs, passwords (there are no accounts), precise device geolocation, or special-category/sensitive data. The latitude/longitude we store is the event venue’s location for the map, not your location.

4. Cookies, local storage, and analytics

Thames Coast does not use cookies for tracking or advertising, and does not use any advertising pixels or cross-site trackers.

We use a small amount of first-party browser local storage on your own device for features you trigger: your light/dark theme choice, the events you tap “Save” on, and an autosaved draft of the event submission form so a reload doesn’t lose your work. This data stays in your browser and is not transmitted to us as a profile. Because none of it is used to track you across sites or build an advertising profile, no cookie-consent banner is legally required for it.

Analytics: we intend to use a privacy-friendly, cookieless analytics approach that counts aggregate visits without cookies, without collecting personal data, and without cross-site tracking.

5. Who we share data with

We use a small set of vendors to run the site. They process data on our instructions only, under their own security and data-processing terms. We do not sell your personal information and we do not share it with advertisers.

• Supabase (database and storage): all stored data, including event submissions, organizer contact, subscribers, and business leads.
• Resend (email delivery): email addresses and message content.
• Anthropic (Claude) (AI spam/quality screening of submitted events): the event content you submit. It does not receive the organizer’s email address.
• Vercel (hosting and content delivery): server request logs, including IP address.
• Stripe (future/dormant): billing/payment details you enter at checkout.
• Meta Platforms (Facebook) (auto-posting published events to our Facebook page): only public event information, no resident personal data.
• Map / geocoding provider: the venue address text submitted with an event, to show it on the map.

Elevare Studio LLC also operates Thames Coast and, where you submit a business listing, may use your business contact details to follow up about Elevare’s own web and marketing services. This is first-party use by the operator, not a sale to a third party; you can opt out at any time (Section 8). We may also disclose information if required by law, to enforce our Terms, or to protect the safety and rights of users and the public.

6. How long we keep it

• Published events: kept while relevant and as a public archive. Past events remain viewable unless you ask us to remove your listing.
• Held/rejected submissions and moderation logs: retained up to 12 months for spam and abuse prevention, then deleted.
• Newsletter subscribers: kept until you unsubscribe. After you unsubscribe we keep your address on a suppression list so we can honor your opt-out and not email you again.
• Business listing leads: kept as a business record while the relationship is active and for a reasonable period after.
• Payment records (once billing is live): retained as long as required by tax and accounting law.
• Server logs: retained by our hosting provider for a short operational window.

7. How we protect it

Personal data (organizer emails, subscriber addresses, business contacts) is stored server-side and is not exposed to the public site. The public site can only read a limited set of display fields; contact details, tokens, and internal moderation data are never served to anonymous visitors. Access to the underlying database is restricted to the operator. Payment card data is handled entirely by Stripe and never touches our servers. No system is perfectly secure, but we design for least-exposure and review access regularly.

8. Your choices and rights

You can, at any time:

• Unsubscribe from the Friday email using the one-click link in every message. We stop within 10 business days (usually immediately).
• Access, correct, or delete the personal information we hold about you, or ask us to remove an event or business listing you submitted. Use our contact form or email nyriian@thamescoastevents.com.

Depending on where you live, you may have additional rights under state or national law, including under the Connecticut Data Privacy Act, the California CCPA/CPRA, and the EU/UK GDPR. We do not sell personal data or run targeted advertising. To exercise any right, reach us through the contact form or the email above; we may ask you to confirm the email address tied to the data. We will not discriminate against you for exercising any of these rights.

9. Children

Thames Coast is a general-audience events site and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

10. Changes to this policy

If we change this policy we will update the date above and, for material changes, note it on the site. Continued use after an update means you accept the revised policy.

11. Contact

Questions or requests: use our contact form or email nyriian@thamescoastevents.com.

Elevare Studio LLC · 143 Dewey Ave, Groton, CT 06340. Powered by Elevare Studio LLC. See also our Terms of Service.