Privacy Policy

Effective Date: August 2026

Privacy at a Glance

We are committed to protecting your privacy and handling your personal information responsibly.

This Privacy Policy explains how we collect, use, share and protect your information when you use our website, mobile app and other services.

In summary:

You
We
Share information with us
Use it to provide our services
Choose your communication preferences
Respect your choices
Exercise your privacy rights
Protect your information
Contact us with questions
Help you understand how your data is used

Want to know more? The full Privacy Policy below explains what information we collect, how we use it, who we share it with and the choices available to you.

1. Overview

Ryan Field Foundation LLC ("we", "us", "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you interact with us through our websites, our official mobile application ("App"), ticketing services, parking services, and customer communications. It also covers information gathered via any other digital products or services that link to this Privacy Policy (collectively, the "Services").

This Privacy Policy applies wherever it is made available or linked.

It does not apply to websites, applications or services operated by third parties that have their own privacy policies, even where those services are accessible through our Services. We encourage you to review the privacy notices of those third parties before providing them with your personal information.

Please read this Privacy Policy carefully so that you understand how we collect and use your personal information and the choices available to you.

We may update this Privacy Policy from time to time to reflect changes to our Services, legal requirements or our business practices. Where we make material changes, we will update the "Effective Date" above and, where appropriate, notify you through our website, App or other appropriate means. We encourage you to review this Privacy Policy periodically.

Certain U.S. state privacy laws provide additional rights to residents of those states. Additional information for residents of California and other applicable U.S. states is set out later in this Privacy Policy.

2. Information We Collect and How We Collect It

We collect personal information in a variety of ways depending on how you interact with our Services.

The information we collect may be provided directly by you, generated when you use our Services, received from trusted third-party service providers, or generated through your use of our website or mobile application.

The categories of information we collect are described below.

How we collect information
Examples of information we may collect
Information you provide directly
Name, email address, telephone number, postal address, date of birth, gender where voluntarily provided, account details, communication preferences, competition entries, survey responses, photographs or other content you submit, and information you provide when contacting us.
Account and authentication information
Account identifier, name, email address, profile information, account creation date and status, and information used to authenticate you and keep your account secure.
Website and digital services
Information about your use of our website and digital services.
Mobile App
App and device information, push notification preferences, authentication status, App usage, digital ticket and parking pass information, and crash and diagnostic information.
Tickets and events
Ticket purchases, ticket validation, events attended, seat location and venue entry information.
Parking
Parking reservations and purchases, parking usage, ANPR information and parking entry and exit records.
Venue services
Hospitality bookings, guest lists, suite or table reservations, dietary requirements, accessibility requirements and services, Wi-Fi registration, customer service interactions, lost property and purchases linked to your account.
Venue safety and security
CCTV footage, incident and safeguarding records, and information used for security, safety, crime prevention and venue operations.
Photography and video
Images or recordings in which you may be identifiable when official photography or filming takes place at an event.
Information received from third parties
Account, authentication, ticketing, parking, payment and marketing preference information received from organisations providing services to us or supporting our Services.
Information we generate
Records and insights created from your interactions with us, such as ticket purchase history, event attendance, parking activity, customer service history, competition participation and marketing engagement.

3. How We Use Your Information

We use personal information for a variety of business and operational purposes, including to provide our Services, manage our relationship with you, improve your experience, and comply with our legal obligations. Depending on how you interact with us, we may use your personal information for the following specific purposes.

To Provide Our Services

We use your information to create and manage your account, authenticate your identity when you sign in, and provide access to our website and App. It is also used to process ticket purchases and parking reservations, issue digital tickets and parking passes, provide customer support, and administer competitions, promotions, and surveys. Finally, this data enables us to communicate with you directly about your account or the specific Services you use.

To Operate and Improve Our Services

We use information to understand how visitors use our website and App so we can improve the functionality, usability, and accessibility of our Services. This data also helps us develop new products, features, and services. Additionally, we use it to monitor the performance and reliability of our systems, troubleshoot technical issues, and undertake essential testing, quality assurance, and ongoing service improvement.

To Operate Our Venue

We use your information to administer events, validate tickets, manage parking services, and facilitate entry to the venue. It also allows us to provide customer support, maintain venue safety and security, and manage crowd movements for operational planning. Furthermore, we use this data to investigate incidents and continually improve the overall visitor experience.

To Personalise Your Experience

Where appropriate, we may use your information to personalise content displayed within our website or App and recommend relevant events, services, or content. We also use it to remember your preferences and tailor our communications based on your interests and previous interactions with us.

To Communicate With You

We may use your information to send account and service notifications, ticket confirmations, parking confirmations, and security notifications. This also includes customer service communications, operational updates, and responses to your enquiries. These communications are strictly necessary for the operation of your account or the Services you have requested.

Marketing Communications

Where permitted by applicable law, we may use your information to send you information about upcoming events, competitions, promotions, venue news, and special offers. We may also send surveys, customer research, and details about products and services we believe may be of interest. These marketing communications may be delivered by email, SMS, push notification, or other electronic channels. You may opt out of marketing communications at any time by using the unsubscribe link included within the communication, adjusting your App settings where applicable, or contacting us using the details provided at the end of this Privacy Policy.

Opting out of marketing communications will not affect service-related communications that are necessary to administer your account or fulfil services you have requested.

Analytics, Reporting and Business Intelligence

We use information to measure website and App usage, understand customer behaviour, and analyse attendance and purchasing trends. This analysis helps us improve customer engagement, measure the effectiveness of marketing campaigns, and develop business reporting and operational insights. Where possible, we use aggregated or de-identified information for these purposes.

Security and Fraud Prevention

We use information to verify user identities, protect customer accounts, detect and investigate fraud, and prevent unauthorised access. It also allows us to monitor for malicious activity, enforce our Terms and Conditions, and protect the overall security and integrity of our Services.

Legal and Regulatory Compliance

We may use your information where necessary to comply with applicable laws and regulations or to respond to lawful requests from courts, regulators, or law enforcement agencies. Additionally, we use it to establish, exercise, or defend legal claims, as well as to protect our rights, property, employees, customers, and visitors.

Corporate Transactions

If we are involved in a merger, acquisition, corporate restructuring, financing transaction or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.

Aggregated and De-identified Information

We may aggregate or de-identify personal information so that it can no longer reasonably be linked to an individual.

We may use this information for analytics, research, reporting, service improvement and other lawful business purposes.

4. How We Share Your Information

We do not sell or share your personal information as those terms are defined under the CCPA.

We may share your personal information with trusted third parties where necessary to operate our Services, fulfil your requests, comply with legal obligations or protect our legitimate business interests.

The categories of recipients with whom we may share personal information are described below.

Service Providers

We engage carefully selected service providers to perform services on our behalf. Depending on the Services you use, we may share personal information with providers that support identity management, authentication, ticketing, and event management. This includes vendors handling parking services, payment processing, customer relationship management (CRM), and email, SMS, or push notification delivery.

We also share information with companies that manage website and mobile application hosting, cloud infrastructure, analytics, reporting, and customer support. Finally, data may be disclosed to partners handling fraud prevention, cyber security, website performance monitoring, and professional advisory services. These organisations are authorised to use your personal information only as necessary to perform services on our behalf or as otherwise permitted by applicable law.

Event Partners

Where you purchase tickets for, register for or attend an event organised or promoted in conjunction with another organisation, we may share information necessary to administer your attendance, provide customer services, fulfil contractual obligations or meet legal requirements.

Where appropriate, additional information will be provided at the point your information is collected.

Competitions, Promotions and Surveys

If you choose to participate in a competition, promotion or survey, we may share relevant information with organisations assisting us in administering the activity.

Where a promotion is jointly operated with another organisation, we will explain how your information will be used before you participate.

Marketing Partners

Where permitted by applicable law and in accordance with your communication preferences, we may share limited information with organisations that assist us in delivering marketing communications, measuring campaign performance or managing customer relationships.

These organisations are not permitted to use your information for their own independent marketing purposes.

Analytics Providers

We use third-party analytics providers to help us understand how our website and App are used, improve our Services and measure performance. These providers may receive technical information about your device, browser, App usage and interactions with our digital services. Where practical, we seek to minimise the personal information shared for analytics purposes.

Northwestern University and Northwestern Athletics

Ryan Field Foundation LLC works closely with Northwestern University and Northwestern Athletics in connection with New Ryan Field, Welsh-Ryan Arena, athletics events and related fan and venue services. Where appropriate, we may share personal information with Northwestern University and Northwestern Athletics, and may receive personal information from them, to support the operation of events and venues, provide ticketing and other services, manage our relationships with fans and customers, understand and improve the fan experience, and communicate with you about relevant events, news, services and opportunities.

Where your information may be used by both Ryan Field Foundation LLC and Northwestern University or Northwestern Athletics, we will provide appropriate information about that relationship and your available choices. Each organisation is responsible for handling personal information in accordance with applicable privacy laws and its respective privacy obligations.

Legal Requirements

We may disclose personal information where we believe disclosure is necessary to comply with applicable law, a court order, subpoena, or other lawful request. This includes responding directly to formal requests from regulators or law enforcement agencies. Additionally, we may share information to investigate suspected fraud or criminal activity. Finally, disclosures may be made to protect the rights, safety, or property of Ryan Field Foundation LLC, our customers, or others, as well as to enforce our Terms and Conditions or other critical legal rights.

Business Transactions

If Ryan Field Foundation LLC is involved in a merger, acquisition, financing, reorganisation, sale of assets or similar corporate transaction, personal information may be transferred as part of that transaction. Where required by law, we will provide appropriate notice before personal information becomes subject to a different privacy policy.

With Your Consent

We may share your personal information with other organisations where you have asked us to do so or have otherwise provided your consent.

Aggregated and De-identified Information

We may share aggregated, statistical or de-identified information with business partners, sponsors, governing bodies, researchers or other organisations.

This information does not identify individual users.

5. Your Choices and Managing Your Preferences

We want to give you meaningful choices about how your personal information is used. Depending on the Services you use and where you live, you may be able to manage your information and communication preferences in a number of ways.

Marketing Communications

Where you have chosen to receive marketing communications, you may withdraw your consent or change your preferences at any time.

You can do this by:

  • selecting the unsubscribe link included in our marketing emails;
  • adjusting your preferences within the App (where available); or
  • contacting us using the contact details provided at the end of this Privacy Policy.

Please note that even if you opt out of marketing communications, we may still send you service-related communications that are necessary to administer your account or fulfil services you have requested. Examples include ticket and parking confirmations, password resets, account security notifications and important operational updates relating to events you have booked.

Push Notifications

If you use our App, you can choose whether to receive push notifications. Push notifications may include event reminders, parking information, ticket updates, venue information, operational announcements, and where permitted, marketing communications. You can disable push notifications at any time through your device settings.

Device Permissions

Depending on the features you use, the App may request access to your notifications and digital wallet functionality. You may change these permissions at any time through your device settings.

Please note that disabling certain permissions may prevent some App features from functioning correctly.

Browser Privacy Signals

Some web browsers offer Do Not Track (DNT) or other privacy preference settings. There is currently no universally accepted standard for responding to DNT signals, and our website may not respond to these signals.

Depending on where you live, you may have rights to opt out of certain uses of your personal information. Further information about your privacy rights and how to exercise them is provided below.

6. Data Retention, Security and International Transfers

How Long We Keep Your Information

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy. The table below sets out, by type of information, how long we generally keep it and why. These periods apply to all individuals whose information we process, regardless of where they are located.

Type of information
Why we hold it
How long we keep it
Account and identity information (name, email, telephone, postal address, account credentials and account identifier)
Account creation, ticket and parking fulfilment, identity authentication, customer support, and system security
Retained for the lifetime of your active account, plus 3 years following account closure or your last interaction, to resolve potential transaction disputes
Financial and transaction records (billing address, telephone number, payment or billing details processed by our external vendors)
Processing transactions, issuing tickets or parking passes, preventing fraud, and financial auditing
7 years, to comply with tax, statutory accounting, and legal requirements
Commercial and activity information (ticket purchase history, event attendance, parking activity, venue retail purchases, customer service interactions)
Analysing consumer behaviour, refining venue logistics, executing marketing campaigns, and auditing transaction records
5 years from the date of the transaction or interaction, to support business intelligence and trend analysis
Website and App activity (unique device ID, IP address, browser type, operating system, app version, navigation paths, searches, click logs, interactions with emails or push notifications)
Operating, securing, and improving our website and mobile App; diagnosing technical bugs; measuring marketing efficacy
24 months from the date of capture, after which data is aggregated, anonymised, or permanently erased
Audio, electronic, or visual information (customer support call recordings, CCTV footage)
Maintaining visitor safety, preventing crime, protecting venue property, and investigating on-site incidents
Automatically overwritten or securely deleted after 30 days, unless required longer for an ongoing investigation or legal claim
Sensitive personal information (accessibility and dietary requirements)
Delivering accessible and appropriate venue services
Retained only for as long as necessary to provide the relevant service, unless you ask us to retain the information for future visits

When personal information is no longer required, we securely delete, anonymise, or otherwise dispose of it in accordance with our internal data retention policies.

How We Protect Your Information

We take the security of your personal information seriously and maintain administrative, technical, and organisational safeguards designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. These measures include strict user access controls, data encryption where appropriate, and robust network and system security. We also implement authentication controls, continuous system monitoring and logging, routine vulnerability management, regular employee training, and internal policies governing the secure handling of personal information.

While we take reasonable steps to protect your information, no method of transmitting information over the Internet or storing information electronically can be guaranteed to be completely secure. Accordingly, we cannot guarantee the absolute security of information transmitted to or stored within our Services.

International Transfers

We may store or process personal information in countries other than the country in which it was collected. Where we do so, we take appropriate measures to protect your personal information in accordance with applicable law.

Children's Privacy

Our Services are intended for a general audience. We do not knowingly collect personal information directly from children in violation of applicable law. Where required by law, we obtain appropriate parental or guardian consent before collecting personal information from children. If you believe a child has provided personal information to us without the necessary authorisation, please contact us using the details provided at the end of this Privacy Policy so that we can investigate and, where appropriate, delete the information.

Third-Party Websites and Services

Our Services may contain links to websites, mobile applications or services operated by third parties. This Privacy Policy applies only to our Services.

We are not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policies of those organisations before providing them with your personal information.

Notice to California Residents: Categories of Personal Information Collected and Retained

Under the California Consumer Privacy Act (CCPA), as amended, we are required to provide California residents with a summary of the statutory categories of personal information we collect, the business purposes for collection, and how long we retain each category. The retention periods below correspond to those set out in the general table above; see that table for the description of how each period is applied in practice.

CCPA / CPRA Statutory Category
Examples of Specific Data Collected
Commercial / Business Purpose for Processing
Retention Period
A. Identifiers
Real name, email address, telephone number, postal address, unique device ID, account credentials, and IP address
Account creation, ticket and parking fulfilment, identity authentication, customer support, and system security
See "Account and identity information" above
B. Customer Records (Cal. Civ. Code § 1798.80)
Name, billing address, telephone number, and payment or billing details (processed securely by external vendors)
Processing transactions, issuing tickets or parking passes, preventing fraud, and financial auditing
See "Financial and transaction records" above
C. Commercial Information
Ticket purchase history, event attendance logs, parking activity, venue retail purchases, and customer service interactions
Analysing consumer behaviour, refining venue logistics, executing marketing campaigns, and auditing transaction records
See "Commercial and activity information" above
D. Internet or Electronic Network Activity
Browser type, operating system, app version, navigation paths, searches, click logs, and interactions with emails or push notifications
Operating, securing, and improving our website and mobile App; diagnosing technical bugs; and measuring marketing efficacy
See "Website and App activity" above
E. Audio, Electronic, or Visual Information
Customer support call recordings and CCTV footage captured at the physical venue
Maintaining visitor safety, preventing crime, protecting venue property, and investigating on-site incidents
See "Audio, electronic, or visual information" above
F. Sensitive Personal Information (SPI)
Account log-in credentials; accessibility and dietary requirements
Delivering accessible and appropriate venue services
Login credentials: see "Account and identity information" above. Accessibility/dietary requirements: see "Sensitive personal information" above

We do not use or disclose sensitive personal information for purposes beyond those necessary to provide the specific Services described above.

7. Your Privacy Rights

Depending on where you live, you may have certain rights in relation to your personal information. These rights vary depending on applicable law and may not apply in every jurisdiction. Exercising your privacy rights will not affect your ability to purchase tickets, attend events, or use our Services, except where certain personal information is necessary to provide the service you have requested. Where required by law, we will respond to your request within the applicable legal timeframes.

Depending on your location, your rights may include the right to know what personal information we collect about you, access the personal information we hold, and request the correction of inaccurate details. You may also have the right to request the deletion of your personal information, receive a copy of certain data in a portable format, or object to and restrict certain processing activities. Furthermore, you can withdraw your consent where processing is based on consent, opt out of certain marketing communications and appeal a decision relating to a privacy request where applicable. Please note that these rights are subject to certain legal limitations and exceptions.

How to Exercise Your Rights

To exercise your privacy rights, please contact us using the details provided at the end of this Privacy Policy. We may need to verify your identity before responding to your request.

If we cannot fulfil your request, we will explain why where required by applicable law.

Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless permitted by applicable law. Where applicable law provides additional rights relating to automated decision-making, we will comply with those requirements.

Notice to California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Subject to applicable exceptions, California residents have the right to know the categories of personal information we collect, the purposes for which it is collected, and the categories of third parties with whom this information is shared.

Your specific rights also include requesting the deletion, correction, or access to specific pieces of your personal information. Where applicable, you may limit the use of your sensitive personal information, and remain free from discrimination for exercising any of these privacy rights. Where required by law, California residents may also designate an authorised agent to submit these requests on their behalf.

Residents of Other U.S. States

Residents of certain U.S. states may have similar privacy rights under their respective applicable state privacy laws. Where these comprehensive state laws apply, you may have the right to access your personal information, correct any inaccuracies, and delete your personal information entirely. Additionally, you may possess the right to obtain a portable copy of certain data, and formally appeal any decisions relating to your submitted privacy requests.

8. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, update your personal information, or make a privacy-related complaint, please contact us by email or by mail to Ryan Field Foundation LLC, Attn: Privacy / Legal Department, 1560 Sherman Ave, Suite 1110, Evanston, IL, 60201.

If you are submitting a privacy rights request, we may need to verify your identity before responding to ensure data security. If you are acting on behalf of another individual as an authorised agent, we may request formal evidence of your legal authority to act on their behalf. We are committed to protecting your data and will respond to all verified requests within the specific timescales required by applicable law.

Complaints

If you are dissatisfied with how we have handled your personal information, we encourage you to contact us first so that we have the opportunity to investigate and resolve your concerns.

Depending on where you live, you may also have the right to lodge a complaint with your local data protection or privacy regulator.

9. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to our Services, applicable laws and regulations, technology, business operations, or our privacy practices. When we make material changes, we will update the Effective Date shown at the beginning of this Privacy Policy and, where appropriate, notify you through our website, App, or by other appropriate means. We encourage you to review this Privacy Policy periodically so that you remain informed about how we collect, use, and protect your personal information.