Privacy Policy

1. Overview

Ryan Field Foundation LLC ("we", "us", "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you interact with us through our websites, our official mobile application ("App"), ticketing services, parking services, and customer communications. It also covers information gathered via any other digital products or services that link to this Privacy Policy (collectively, the "Services").

This Privacy Policy applies wherever it is made available or linked.

It does not apply to websites, applications or services operated by third parties that have their own privacy policies, even where those services are accessible through our Services. We encourage you to review the privacy notices of those third parties before providing them with your personal information.

Please read this Privacy Policy carefully so that you understand how we collect and use your personal information and the choices available to you.

We may update this Privacy Policy from time to time to reflect changes to our Services, legal requirements or our business practices. Where we make material changes, we will update the "Effective Date" above and, where appropriate, notify you through our website, App or other appropriate means. We encourage you to review this Privacy Policy periodically.

Certain U.S. state privacy laws provide additional rights to residents of those states. Additional information for residents of California and other applicable U.S. states is set out later in this Privacy Policy.

2. Information We Collect and How We Collect It

We collect personal information in a variety of ways depending on how you interact with our Services.

The information we collect may be provided directly by you, generated when you use our Services, received from trusted third-party service providers, or generated through your use of our website or mobile application.

The categories of information we collect are described below.

3. How We Use Your Information

We use personal information for a variety of business and operational purposes, including to provide our Services, manage our relationship with you, improve your experience, and comply with our legal obligations. Depending on how you interact with us, we may use your personal information for the following specific purposes.

To Provide Our Services

We use your information to create and manage your account, authenticate your identity when you sign in, and provide access to our website and App. It is also used to process ticket purchases and parking reservations, issue digital tickets and parking passes, provide customer support, and administer competitions, promotions, and surveys. Finally, this data enables us to communicate with you directly about your account or the specific Services you use.

To Operate and Improve Our Services

We use information to understand how visitors use our website and App so we can improve the functionality, usability, and accessibility of our Services. This data also helps us develop new products, features, and services. Additionally, we use it to monitor the performance and reliability of our systems, troubleshoot technical issues, and undertake essential testing, quality assurance, and ongoing service improvement.

To Operate Our Venue

We use your information to administer events, validate tickets, manage parking services, and facilitate entry to the venue. It also allows us to provide customer support, maintain venue safety and security, and manage crowd movements for operational planning. Furthermore, we use this data to investigate incidents and continually improve the overall visitor experience.

To Personalise Your Experience

Where appropriate, we may use your information to personalise content displayed within our website or App and recommend relevant events, services, or content. We also use it to remember your preferences and tailor our communications based on your interests and previous interactions with us.

To Communicate With You

We may use your information to send account and service notifications, ticket confirmations, parking confirmations, and security notifications. This also includes customer service communications, operational updates, and responses to your enquiries. These communications are strictly necessary for the operation of your account or the Services you have requested.

Marketing Communications

Where permitted by applicable law, we may use your information to send you information about upcoming events, competitions, promotions, venue news, and special offers. We may also send surveys, customer research, and details about products and services we believe may be of interest. These marketing communications may be delivered by email, SMS, push notification, or other electronic channels. You may opt out of marketing communications at any time by using the unsubscribe link included within the communication, adjusting your App settings where applicable, or contacting us using the details provided at the end of this Privacy Policy.

Opting out of marketing communications will not affect service-related communications that are necessary to administer your account or fulfil services you have requested.

Analytics, Reporting and Business Intelligence

We use information to measure website and App usage, understand customer behaviour, and analyse attendance and purchasing trends. This analysis helps us improve customer engagement, measure the effectiveness of marketing campaigns, and develop business reporting and operational insights. Where possible, we use aggregated or de-identified information for these purposes.

Security and Fraud Prevention

We use information to verify user identities, protect customer accounts, detect and investigate fraud, and prevent unauthorised access. It also allows us to monitor for malicious activity, enforce our Terms and Conditions, and protect the overall security and integrity of our Services.

Legal and Regulatory Compliance

We may use your information where necessary to comply with applicable laws and regulations or to respond to lawful requests from courts, regulators, or law enforcement agencies. Additionally, we use it to establish, exercise, or defend legal claims, as well as to protect our rights, property, employees, customers, and visitors.

Corporate Transactions

If we are involved in a merger, acquisition, corporate restructuring, financing transaction or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.

Aggregated and De-identified Information

We may aggregate or de-identify personal information so that it can no longer reasonably be linked to an individual.

We may use this information for analytics, research, reporting, service improvement and other lawful business purposes.

4. How We Share Your Information

We do not sell or share your personal information as those terms are defined under the CCPA.

We may share your personal information with trusted third parties where necessary to operate our Services, fulfil your requests, comply with legal obligations or protect our legitimate business interests.

The categories of recipients with whom we may share personal information are described below.

Service Providers

We engage carefully selected service providers to perform services on our behalf. Depending on the Services you use, we may share personal information with providers that support identity management, authentication, ticketing, and event management. This includes vendors handling parking services, payment processing, customer relationship management (CRM), and email, SMS, or push notification delivery.

We also share information with companies that manage website and mobile application hosting, cloud infrastructure, analytics, reporting, and customer support. Finally, data may be disclosed to partners handling fraud prevention, cyber security, website performance monitoring, and professional advisory services. These organisations are authorised to use your personal information only as necessary to perform services on our behalf or as otherwise permitted by applicable law.

Event Partners

Where you purchase tickets for, register for or attend an event organised or promoted in conjunction with another organisation, we may share information necessary to administer your attendance, provide customer services, fulfil contractual obligations or meet legal requirements.

Where appropriate, additional information will be provided at the point your information is collected.

Competitions, Promotions and Surveys

If you choose to participate in a competition, promotion or survey, we may share relevant information with organisations assisting us in administering the activity.

Where a promotion is jointly operated with another organisation, we will explain how your information will be used before you participate.

Marketing Partners

Where permitted by applicable law and in accordance with your communication preferences, we may share limited information with organisations that assist us in delivering marketing communications, measuring campaign performance or managing customer relationships.

These organisations are not permitted to use your information for their own independent marketing purposes.

Analytics Providers

We use third-party analytics providers to help us understand how our website and App are used, improve our Services and measure performance. These providers may receive technical information about your device, browser, App usage and interactions with our digital services. Where practical, we seek to minimise the personal information shared for analytics purposes.

Northwestern University and Northwestern Athletics

Ryan Field Foundation LLC works closely with Northwestern University and Northwestern Athletics in connection with New Ryan Field, Welsh-Ryan Arena, athletics events and related fan and venue services. Where appropriate, we may share personal information with Northwestern University and Northwestern Athletics, and may receive personal information from them, to support the operation of events and venues, provide ticketing and other services, manage our relationships with fans and customers, understand and improve the fan experience, and communicate with you about relevant events, news, services and opportunities.

Where your information may be used by both Ryan Field Foundation LLC and Northwestern University or Northwestern Athletics, we will provide appropriate information about that relationship and your available choices. Each organisation is responsible for handling personal information in accordance with applicable privacy laws and its respective privacy obligations.

Legal Requirements

We may disclose personal information where we believe disclosure is necessary to comply with applicable law, a court order, subpoena, or other lawful request. This includes responding directly to formal requests from regulators or law enforcement agencies. Additionally, we may share information to investigate suspected fraud or criminal activity. Finally, disclosures may be made to protect the rights, safety, or property of Ryan Field Foundation LLC, our customers, or others, as well as to enforce our Terms and Conditions or other critical legal rights.

Business Transactions

If Ryan Field Foundation LLC is involved in a merger, acquisition, financing, reorganisation, sale of assets or similar corporate transaction, personal information may be transferred as part of that transaction. Where required by law, we will provide appropriate notice before personal information becomes subject to a different privacy policy.

With Your Consent

We may share your personal information with other organisations where you have asked us to do so or have otherwise provided your consent.

Aggregated and De-identified Information

We may share aggregated, statistical or de-identified information with business partners, sponsors, governing bodies, researchers or other organisations.

This information does not identify individual users.

5. Your Choices and Managing Your Preferences

We want to give you meaningful choices about how your personal information is used. Depending on the Services you use and where you live, you may be able to manage your information and communication preferences in a number of ways.

Marketing Communications

You may withdraw your consent to marketing communications or change your preferences at any time.

You can do this by:

• selecting the unsubscribe link included in our marketing emails;
• adjusting your preferences within the App (where available); or
• contacting us using the contact details provided at the end of this Privacy Policy.

Please note that even if you opt out of marketing communications, we may still send you service-related communications that are necessary to administer your account or fulfil services you have requested. Examples include ticket and parking confirmations, password resets, account security notifications and important operational updates relating to events you have booked.

Push Notifications

If you use our App, you can choose whether to receive push notifications. Push notifications may include event reminders, parking information, ticket updates, venue information, operational announcements, and where permitted, marketing communications. You can disable push notifications at any time through your device settings.

Device Permissions

Depending on the features you use, the App may request access to your notifications and digital wallet functionality. You may change these permissions at any time through your device settings.

Please note that disabling certain permissions may prevent some App features from functioning correctly.

Browser Privacy Signals

Some web browsers offer Do Not Track (DNT) or other privacy preference settings. There is currently no universally accepted standard for responding to DNT signals, and our website may not respond to these signals.

Depending on where you live, you may have rights to opt out of certain uses of your personal information. Further information about your privacy rights and how to exercise them is provided below.

6. Data Retention, Security and International Transfers

How Long We Keep Your Information

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy. The table below sets out, by type of information, how long we generally keep it and why. These periods apply to all individuals whose information we process, regardless of where they are located.

When personal information is no longer required, we securely delete, anonymise, or otherwise dispose of it in accordance with our internal data retention policies.

How We Protect Your Information

We take the security of your personal information seriously and maintain administrative, technical, and organisational safeguards designed to protect it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access. These measures include strict user access controls, data encryption where appropriate, and robust network and system security. We also implement authentication controls, continuous system monitoring and logging, routine vulnerability management, regular employee training, and internal policies governing the secure handling of personal information.

While we take reasonable steps to protect your information, no method of transmitting information over the Internet or storing information electronically can be guaranteed to be completely secure. Accordingly, we cannot guarantee the absolute security of information transmitted to or stored within our Services.

International Transfers

We may store or process personal information in countries other than the country in which it was collected. Where we do so, we take appropriate measures to protect your personal information in accordance with applicable law.

Children's Privacy

Our Services are intended for a general audience. We do not knowingly collect personal information directly from children in violation of applicable law. Where required by law, we obtain appropriate parental or guardian consent before collecting personal information from children. If you believe a child has provided personal information to us without the necessary authorisation, please contact us using the details provided at the end of this Privacy Policy so that we can investigate and, where appropriate, delete the information.

Third-Party Websites and Services

Our Services may contain links to websites, mobile applications or services operated by third parties. This Privacy Policy applies only to our Services.

We are not responsible for the privacy practices or content of third-party websites or services. We encourage you to read the privacy policies of those organisations before providing them with your personal information.

Notice to California Residents: Categories of Personal Information Collected and Retained

Under the California Consumer Privacy Act (CCPA), as amended, we are required to provide California residents with a summary of the statutory categories of personal information we collect, the business purposes for collection, and how long we retain each category. The retention periods below correspond to those set out in the general table above; see that table for the description of how each period is applied in practice.

We do not use or disclose sensitive personal information for purposes beyond those necessary to provide the specific Services described above.

7. Your Privacy Rights

Depending on where you live, you may have certain rights in relation to your personal information. These rights vary depending on applicable law and may not apply in every jurisdiction. Exercising your privacy rights will not affect your ability to purchase tickets, attend events, or use our Services, except where certain personal information is necessary to provide the service you have requested. Where required by law, we will respond to your request within the applicable legal timeframes.

Depending on your location, your rights may include the right to know what personal information we collect about you, access the personal information we hold, and request the correction of inaccurate details. You may also have the right to request the deletion of your personal information, receive a copy of certain data in a portable format, or object to and restrict certain processing activities. Furthermore, you can withdraw your consent where processing is based on consent, opt out of certain marketing communications and appeal a decision relating to a privacy request where applicable. Please note that these rights are subject to certain legal limitations and exceptions.

How to Exercise Your Rights

To exercise your privacy rights, please contact us using the details provided at the end of this Privacy Policy. We may need to verify your identity before responding to your request.

If we cannot fulfil your request, we will explain why where required by applicable law.

Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals unless permitted by applicable law. Where applicable law provides additional rights relating to automated decision-making, we will comply with those requirements.

Notice to California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Subject to applicable exceptions, California residents have the right to know the categories of personal information we collect, the purposes for which it is collected, and the categories of third parties with whom this information is shared.

Your specific rights also include requesting the deletion, correction, or access to specific pieces of your personal information. Where applicable, you may limit the use of your sensitive personal information, and remain free from discrimination for exercising any of these privacy rights. Where required by law, California residents may also designate an authorised agent to submit these requests on their behalf.

Residents of Other U.S. States

Residents of certain U.S. states may have similar privacy rights under their respective applicable state privacy laws. Where these comprehensive state laws apply, you may have the right to access your personal information, correct any inaccuracies, and delete your personal information entirely. Additionally, you may possess the right to obtain a portable copy of certain data, and formally appeal any decisions relating to your submitted privacy requests.

8. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, update your personal information, or make a privacy-related complaint, please contact us by email or by mail to Ryan Field Foundation LLC, Attn: Privacy / Legal Department, 1560 Sherman Ave, Suite 1110, Evanston, IL, 60201.

If you are submitting a privacy rights request, we may need to verify your identity before responding to ensure data security. If you are acting on behalf of another individual as an authorised agent, we may request formal evidence of your legal authority to act on their behalf. We are committed to protecting your data and will respond to all verified requests within the specific timescales required by applicable law.

Complaints

If you are dissatisfied with how we have handled your personal information, we encourage you to contact us first so that we have the opportunity to investigate and resolve your concerns.

Depending on where you live, you may also have the right to lodge a complaint with your local data protection or privacy regulator.

9. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to our Services, applicable laws and regulations, technology, business operations, or our privacy practices. When we make material changes, we will update the Effective Date shown at the beginning of this Privacy Policy and, where appropriate, notify you through our website, App, or by other appropriate means. We encourage you to review this Privacy Policy periodically so that you remain informed about how we collect, use, and protect your personal information.