ARENA ONE PRIVACY POLICY

Effective Date: April 20, 2026

1. Introduction
Welcome to Arena One. We respect your privacy and are committed to transparently sharing how we handle your Personal Data. This Privacy Policy describes how ARTIST ONE ENTERTAINMENT GROUP, LLC d/b/a Arena One and its current and future affiliates, subsidiaries, and related entities (“Company,” “Arena,” “Arena One,” “we,” “us,” or “our”) collect, use, and share your Personal Data when you interact with our website, social media, in-theatre app, customer service, and when you attend our events (collectively, the “Services”). By accessing or using our Services, you hereby agree to the collection, use, disclosure, processing and sharing of your information in accordance with this Privacy Policy.

This Privacy Policy does not apply to any third-party websites, apps, or services even if our site or app links to those third parties, including our third-party ticketing and merchandise partners. We suggest you review those third-party policies to learn how those companies collect and use your Personal Data. This Privacy Policy does not apply to any information we may collect, process, or retain in an employment context.

As used herein, “Personal Data” is defined as (i) any information that is linked or reasonably linkable to an identified or identifiable individual, and does not include de-identified data or publicly available information; and (ii) personal information or data as defined under applicable privacy law.

Please note, this Privacy Policy is provided in the interest of transparency and is solely intended to assist in your understanding of our standard practices. Any disclosures or rights outlined below are not intended to limit our rights or waive any applicable exemptions under applicable laws.

2. Information We Receive or Collect From You
We operate two public interfaces, our website and our Arena One Fan Experience Web App (the “App”). If you are reading this then you’ve found us at arenaonelive.com/privacy-policy. Personal Data You Provide We collect information directly from you in circumstances such as the following:
● When you create a profile in our App; account
● When you register to receive event updates;
● When you contact us with inquiries or reach out for customer support;
● When you sign up for marketing communications; and
● When you submit content through the App.

The information we collect may include:
● Contact information, such as your name, phone number, and email address;
● Handle or display names you may use in the App;
● User generated and submitted content including photos, videos, text messages, poll
responses, and votes you submit via the App as a part of the fan participation
experience; and
● Information you provide to us in any customer service communications, submissions, or
feedback.

Automatically Collected Technical & Usage Data
When you use or interact with our Services, certain information about your device(s) and your
interactions with our Services may be automatically collected, including:
● Device Information such as type of device used to access Services, IP address, and
general location;
● Online Activity including browsing history, browser session tokens, device and browser type;
● Pages visited and interaction data;
● Cache memory created from the fan profile you create and your submissions on the
App;
● Cookies, local storage, and similar technologies as shown below in “Local Storage Keys”
section.
Please note, technical and usage will not reveal your exact location or address.

De-identified, Aggregated, or Anonymous Information
We may use or receive information or data with certain components removed including, but not limited to, your name, phone number, email address, or tracking information. The removal of those components by deletion, or through aggregation, obfuscation, or other means makes the data de-identified, anonymous, or aggregated. Subject to applicable law, our receipt, use, and disclosure of such aggregated, de-identified, and anonymized information is not subject to this Privacy Policy nor considered to be Personal Data.

Local Storage Keys
Our App does not use Cookies. Instead we utilize Local Storage Keys in connection with session identifiers, prompt response tracking, and basic display preferences. The Local Storage Keys are used to:
● Maintain your active session, including your active theatre and event connection;
● Remember which prompts you have already responded to;
● Store your verification status and display name; and
● Remember whether you have completed the welcome tutorial.
This information is associated with your browser activity and therefore you can delete this data by clearing your browser storage on your device. Also, in the App, this data is cleared each time you tap “Leave Experience.”

Cookies
We use cookies, local storage, and similar technologies to keep the site secure, remember your preferences, measure performance, and support our marketing. This includes Google Analytics, which uses Cookies to collect information such as page views, session duration, device and browser type, operating system, screen resolution, approximate geographic location at the city or region level (not your specific address), referral source, and the pages you visit. The manner in which we collect IP addresses will obscure, truncate, or remove the portion of the address that can be linked to your specific identity. Please review Google Analytics’ privacy policy to further understand how they may process this data. At any time, you can control Cookies through your browser and device settings.

We do not currently use advertising or tracking Cookies to deliver targeted content on third-party platforms.
For a full breakdown of every category of Cookie we use, how to disable optional Cookies, how to manage Cookies in your browser, and how to sign out of arenaone.me sessions, see our Cookie Preferences page. See additional information on your Privacy Rights below. You may exercise those rights, subject to applicable laws, by contacting us at privacy@artist.one.

Live Event Recording and Interactivity
When you attend Arena One events, your image, likeness, and/or voice may be captured through audio or audiovisual means and displayed as a part of the live broadcast or audience interaction. By attending Arena One events or using interactive features, you acknowledge and agree that you may be filmed and/or recorded and that such content may be used during live productions, recordings, replays, and for future marketing, promotional, or other commercial purposes. Please see our Terms of Use, and posted signage at our events for additional information, including how to request removal of your image in any recording, replay, or future marketing and promotional content.

3. Privacy of Children
Arena takes the privacy of children very seriously. Our Services are not directed at children and we do knowingly collect any information from:
● Individuals age 13 or under;
● Individuals from who receipt would be illegal under applicable laws.
You acknowledge that, per our Terms of Use, users of App must be 14 or older. If you are or become aware that any minor has provided use with personal data, we encourage you to reach out to us so that we can use best efforts to promptly delete that data. Please contact us by writing us at:

privacy@artist.one

OR

Artist One Entertainment Group, LLC
Attn: Privacy Manager
2113 Main St. Unit A
Lititz, PA 17543

4. What We Do Not Collect
We do not currently collect or process:
● Payment or credit card information
● Billing or shipping addresses associated with ticket and merchandise payments;
● Information on individual ticket purchase transactions
All ticket and merchandise purchases are processed by third-party partners.

5. How We Use Your Information
This section is designed to further detail how we use your information. How we use your information will in part be determined by how you choose to interact with our Services.

a. SMS Communication. Subject to applicable law(s), if you opt-in we may use your phone number to send you SMS (text message) communications, to contact you regarding (i) event announcements, reminders, and logistical updates; (ii) ticket on-sale notifications, including early access opportunities and presale alerts; (iii) promotional and marketing messages; (iv) real-time event communications including programming updates or changes; and (v) notifications if content you submitted as a part of the fan experience is chosen to be featured or otherwise used.

b. Email Communication. Subject to applicable law(s), if you opt-in we may send you email communications to contact you regarding: (i) Event announcements, reminders, and logistical updates; (ii) ticket on-sale notifications, including early access opportunities and presale alerts; (iii) promotional and marketing messages; (iv) real-time event communications including programming updates or changes; and (v) notifications if content you submitted as a part of the fan experience is chosen to be featured or otherwise used. In addition, we may send you post-event communications

c. Interactive Event Features. As a part of our unique event experience, through our App, you will have the opportunity to respond to audience polls, send text messages to the artist, and/or share videos and photos. If you choose to generate and submit this type of content it may be published to the full audience during the event and included in clips of the event that are used as recaps or in future marketing content. Additionally, if you choose to, the content you submit as a part of the fan experience may be shared across applicable social media sites.

d. Support, Provide Access To, and Improve our Services. In order to operate, deliver, and continuously improve our Services, we use personal information to create and manage user access, enable participation in live and interactive experiences, and
provide communications related to events and user activity. This includes facilitating real-time engagement during events, responding to user inquiries, and maintaining the performance, security, and reliability of our platform.

e. Ensure Security and Prevent Misuse. We may use your Personal Data to (i) to comply with applicable laws; (ii) maintain the security and integrity of or Services; (iii) protect our, your, or others' rights, privacy, safety or property (including by making and defending legal claims or orders or in response to an incident at an Event); (iv) audit our internal processes for compliance with legal and contractual requirements and internal policies; (v) enforce the terms and conditions that govern our Services; and (v) prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical or illegal activity.

f. Analyze Usage and Improve our Services. In order to understand how users interact with our Services and to continuously improve performance and functionality, we use Personal Data gathered through Cookies and Session Tokens to analyze usage patterns, measure engagement, and evaluate the effectiveness of our features and communications. We use these insights to develop new features, products, and capabilities, troubleshoot issues, and enhance the overall reliability and quality of our platform. These activities help us improve the user experience, increase content relevance, and optimize the delivery of our live and recorded programming.

g. Legal Compliance. We may process and share your Personal Data in order to comply with applicable laws or to respond to legal orders and inquiries. To illustrate and summarize the types of information we collect and the purpose of the collection, please see the chart below.

6. Frequency and Terms For SMS and Email Communications
a. Opt-In. By opting in to receive SMS messages from Arena One, you agree to receive messages for one or more of the purposes listed in Section 5 of this Privacy Policy.
b. Email Messages. We may use your email address to send you communications, subject to your consent where required by law. Receiving marketing emails is not a condition of any purchase or use of our Services.
c. Message Frequency. Message frequency may vary based on your interaction with Arena One and upcoming events.
d. Message and Data Rates. We do not charge you for SMS text messages when using our Services. However, your mobile carrier’s standard message and data rates may apply when you send or receive SMS text messages. Any charges billed for SMS messages are paid directly to your carrier.
e. Opt-Out Instructions. To cancel SMS messages, at any time you can reply “STOP” to any message. After you send the SMS message STOP, we will send you a confirmation message and you will no longer receive SMS messages from us unless you opt in again. You may unsubscribe from marketing emails at any time by clicking the unsubscribe link included in each email or by contacting us at unsubscribe@arenaonelive.com .
f. Help Instructions. For technical or customer assistance, reply “HELP” via SMS or contact us at: help@artist.one. Note, to exercise your rights (outlined below) or to notify us of the inadvertent collection of any personal data of a minor, please reach out to us at the physical or email address provided in the respective sections of this Privacy Policy.
g. Consent Requirements. Your consent to receive SMS messages is not a condition of any purchase or use of our Services. However, you understand that in order to participate in certain features of the interactive fan experience you will have to utilize SMS messages.
h. SMS Service Providers. We may use third-party service providers, such as Twilio or similar platforms, to send SMS messages.
i. Email Service Providers. We may use third-party service providers, such as SendGrid or similar platforms, to deliver email communications on our behalf.
7. Sharing of Information

7. We may share your information with the following partners under the circumstances outlined below.
a. Third-party service providers: We carefully select third party partners to facilitate in the operation of our platforms and the provision of our Services, including the fulfillment of requests you may make. To the extent necessary, we may share your information with Customer Relationship Management and communication platforms; messaging provider partners (including SMS and email delivery platforms); analytics providers; and Cloud infrastructure providers.
b. Event and Business Partners: In limited circumstances we will share aggregated data sets with our artist or production partners. When we share this information it will not identify you individually and therefore it will not be deemed to be Personal Data under the CCPA/CPRA or other applicable state privacy law.
c. Public Disclosure: We may publish the information you provide to us when you use our interactive features in our App. When you submit your own user-generated photos or videos, they (or modified versions thereof) may be displayed or played on screen during a live event and may then be included in any replays, recordings, or publicly distributed clips of the event. When you submit comments or other materials through the App, depending on what you choose to include in the content, if they are selected to be published they may appear on screen with the name you provide in the App and in all media in any replays, recordings, or publicly distributed clips of the event.
d. Legal Requirements: We may disclose your Personal Data to certain law enforcement or civil government offices (i) to to to the extent required by applicable laws or legal processes; (ii) in connection with potential legal actions or proceedings; (iii) to protect our, your, or others' rights, privacy, or security (including by making and defending legal claims or orders or in response to an incident at an Event); (iv) enforce the terms and conditions that govern our Services; and (v) prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical or illegal activity; and (vi) in our discretion, to the extent lawful, .
e. Corporate Transactions: In the event of a merger, acquisition, liquidation, valuation, or sale of a substantial portion of all of our assets, we may disclose your information to necessary parties or advisors to the transaction.

8. Third-Party Links:
Our website and App contain links to websites that are owned and operated by third-party partners. The websites, and services they provide, are not under our control. We accept no liability or responsibility for the operation of those sites and provision of their services, including but not limited to, their data collection, retention, and use policies.

9. How We Protect Your Personal Data:
We use commercially reasonable administrative, technical, and organizational security procedures that are intended to protect the Personal Data and data we collect and store from unauthorized access, disclosure, and use. Although we use reasonable efforts to keep your personal data secure, no security measure is 100% secure. While we strive to keep safe the information we receive and store, we cannot guarantee the security of any information you submit or transmit to us and therefore we will not be responsible for the theft, destruction, or inadvertent disclosure of that information You should use caution when sharing personal data over the internet.

10. Data Transfer:
You acknowledge that we are located and operate in the United States. We may transfer, store, and use the Personal Data we collect and maintain about you, outside of your state or other governmental jurisdiction. If you are domiciled or located outside the United States and choose to provide information to us or use or interact with our Services, please note that we will transfer personal data to United States and process it here. The data protection laws in the jurisdiction in which we process Personal Data may differ from those of your jurisdiction and your personal data may be subject to access requests from governments, courts, law enforcement agencies or regulatory agencies in those other jurisdictions.

11. Data Retention:
In accordance with our policies and applicable law, we retain and store your Personal Data for the least amount of time necessary to provide you with access to our Services, communicate with you, and comply with applicable laws, regulations, and court orders. For security reasons and/or to comply with applicable law, we may retain backup information related to your user account on our App for some time after cancellation or deletion. After you cancel your account, copies of certain information from your account may remain viewable to us or our partners under certain circumstances. Further, you acknowledge that it is not always possible to completely remove or delete all of your information due to technical constraints and contractual, financial or legal requirements. User-generated content that is published via display or read aloud during an Arena One event may not be deleted or removed from any recordings of the applicable event.

12. Privacy Rights:
You may have certain rights with regard to your Personal Data. The scope and applicability of those rights differs depending upon your residency. Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, Nevada, New Hampshire, New Jersey, Oregon, Rhode Island, and other states that may have adopted applicable data privacy laws may have specific rights that relate to the use, processing, disclosure, and retention, of your Personal Data. Those rights may include:
a. Right to Access. Subject to available limitations under applicable law, you may have the right to access the data we have collected about you.
b. Right to Correction. You may have the right to request the correction of any inaccurate or outdated information that you provided or that is otherwise included in your Personal Data.
c. Right to Deletion. You may have the right to request we delete any Personal Data we have collected about you, subject to some restrictions.
d. Right to Disclosure. You may have the right to request a record of the categories of third parties or actual third parties to whom we have disclosed your Personal Data.
e. Right to Opt-Out. You may have the right to opt out of the use of automated decision- making technology with regards to your Personal Data. You may have the right to request to opt-out sales of your Personal Data, targeted advertising, or profiling. Notwithstanding, as mentioned above, we do not currently sell data or use targeted advertising or profiling.
f. Right to Portability. You may have the right to request a copy of your Personal Data. We will not discriminate against you if you choose to exercise any of your rights. The rights listed above are not absolute. Subject to legal exemptions and obligations, we may not be required nor able to comply with your request. You may seek to exercise your state privacy rights by submitting your request to:

privacy@artist.one

OR

Artist One Entertainment Group, LLC
Attn: Privacy Manager
2113 Main St. Unit A
Lititz, PA 17543

In order to properly respond to any request, we reserve the right to authenticate your request and confirm your identity. We will be unable to process your request if you do not provide us with sufficient information to analyze the request. Subject to applicable law(s), you may designate a third party to act as your authorized agent for the purpose of exercising any rights you may have under state law. Use of an authorized agent may require both proof of your and your agent’s identities and proof of permission for the agent to act on your behalf. This proof may be sent with the request to exercise any of the rights you may have.

Unless otherwise noted or required by law, we will provide you with a response to your request within forty-five (45) calendar days after receipt. If needed, and subject to notification to you within the initial forty-five day (45) period, we may extend our response time by an additional forty-five (45) days.

13. Changes to This Policy
We may modify this Privacy Policy at any time by posting an updated version on both our website and the App and changing the Effective Date. We suggest you review our Privacy Policy from time to time in order to remain informed on how we collect, use, retain, and share Personal Data.

14. Accessibility
We recognize the need and are committed to making available this Privacy Policy to persons with disabilities. Please contact us at help@artist.one to request an alternative format of this Policy.

15. Contact Us
If you have any questions about this Privacy Policy, please contact us at:

Artist One Entertainment Group, LLC
Attn: Privacy Manager
2113 Main St. Unit A
Lititz, PA 17543
privacy@artist.one