At Haunted Wisconsin, accessible from https://www.hauntedwisconsin.com, the privacy and security of our visitors is a top priority. This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, and what rights and choices you have.
This policy applies to information collected through our website only. It does not cover data collected offline or via third-party services that link to or from our site.
By accessing or using Haunted Wisconsin, you acknowledge that you have read and agree to this Privacy Policy. Questions or requests may be sent to [email protected].
1. Information You Provide Directly
2. Automatically Collected Data
3. Data from Third-Party Authentication
We process personal data for the following purposes:
| Purpose | Examples | Legal Basis (GDPR) |
|---|---|---|
| Service Delivery | Operating the website; responding to support requests | Contract / Legitimate Interests |
| Analytics & Improvement | Understanding usage patterns; improving features | Legitimate Interests |
| Email Marketing | Newsletters, updates, and promotional content | Consent |
| Transaction Processing | Processing orders, payments, and refunds | Contract |
| Security & Fraud Prevention | Detecting malicious activity; protecting user accounts | Legitimate Interests |
| Legal Compliance | Meeting tax, regulatory, and court-ordered obligations | Legal Obligation |
Haunted Wisconsin uses cookies, web beacons, and similar technologies. Cookies are small text files placed on your browser to help us deliver and improve our services. We use the following categories:
| Category | Purpose | Examples | Duration |
|---|---|---|---|
| Strictly Necessary | Core functionality, security, session management. Cannot be disabled. | Session cookies, CSRF tokens, auth tokens | Session |
| Analytics / Performance | Anonymized visitor behaviour data; site performance improvement. | Google Analytics 4 (_ga, _gid, _gat) | Up to 2 years |
| Functional / Preference | Remembering your settings: language, dark mode, layout. | Theme preference, locale cookies | Up to 1 year |
| Embedded Content | Set by third-party content embedded in our pages. | YouTube, Google Maps, social media widgets | Varies by provider |
Managing Cookies: You can control or delete cookies through your browser settings. Opt-out tools: DAA Opt-Out, Your Online Choices (EU), Google Analytics Opt-Out. Disabling strictly necessary cookies may impair website functionality.
Cookie Consent: Where required by law (e.g. GDPR, ePrivacy Directive), you will be presented with a cookie consent banner on your first visit. Your preference is stored and honored on subsequent visits.
We use Google Analytics 4 (GA4) to measure traffic and usage patterns. GA4 uses first-party cookies and does not use third-party cookies for cross-site tracking. Our privacy configuration includes:
You may opt out of Google Analytics tracking at any time via the Google Analytics Opt-Out Browser Add-on.
You may register or log in using providers such as Google, Facebook, Apple, or GitHub. We receive only the profile data you authorize (typically name, email, unique identifier). We do not receive your password. You may revoke access through the provider's security settings at any time. We are not responsible for the data practices of identity providers.
We understand you may have questions about how your data is handled when you log in to our website using your Facebook account. Facebook's app data deletion policy aims to address these concerns by providing users with greater control over their information. This policy requires apps to delete all user data obtained through Facebook if the user chooses to disconnect their Facebook account from the app.
If you choose to request deletion of your data used on the website, you can do this by going to your Facebook profile and clicking the “Send Request” button on the Settings & Privacy > Settings > Apps and Websites page.
Additionally, if you haven't used an app in over 90 days, Facebook will automatically revoke the app's access to your information. These measures are in place to help protect user privacy and give users peace of mind when using Haunted Wisconsin's website.
You can also request data deletion via [email protected] to remove all the data related to your account. Please include “Request Data Deletion” in the subject line of your email for us to fulfill your request. Requests are processed within 10 business days.
Payments are processed by PCI-DSS Level 1 compliant third-party processors. We do not store, transmit, or access full payment card numbers. Our payment infrastructure includes:
Transaction records (excluding card details) are retained for up to 7 years for accounting, tax, and legal compliance.
With your explicit consent, we may send newsletters, product updates, or promotional emails. Every commercial email includes a working one-click unsubscribe link in compliance with the CAN-SPAM Act and, where applicable, CASL. You may also unsubscribe by emailing [email protected]. Requests are processed within 10 business days. We may retain your address on a suppression list to honor your opt-out preference.
Our pages may include embedded content from YouTube, Twitter/X, Spotify, Google Maps, or social media platforms. Embedded content behaves as if you visited the originating website directly and may collect data, set cookies, and track your interaction independently. We encourage you to review each provider's privacy policy before interacting with embedded content.
Files, images, or documents you upload are stored securely with access controls, used solely for the stated purpose, and may be scanned for malware or policy violations by automated tools. Uploaded content is deleted within 90 days of account closure unless otherwise legally required.
We work with trusted third-party service providers who may access your personal data only to the extent necessary to perform services on our behalf. All processors are bound by Data Processing Agreements (DPAs). Categories include:
We do not sell your personal information. Data is shared only in these limited circumstances:
We implement appropriate technical and organizational measures to protect your personal data:
In the event of a personal data breach likely to result in risk to your rights, we will notify affected individuals and relevant supervisory authorities within the legally mandated timeframe (e.g. 72 hours under GDPR).
We retain personal data only as long as necessary to fulfil stated purposes or as required by law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Server access logs | Up to 7 years | Security monitoring and abuse prevention |
| Analytics data | Up to 14 months | Trend analysis (auto-deleted by GA4) |
| Newsletter subscriptions | Until unsubscribed + 30 days | Suppression list maintenance |
| Account data | Account lifetime + 12 months post-deletion | Dispute resolution and backups |
| Transaction records | 7 years | Tax and legal compliance |
| Uploaded files | Duration of use + 90 days post-closure | Service delivery; backup |
| Contact form submissions | 3 years | Correspondence records and dispute resolution |
Depending on your location, you may have rights to access, correct, delete, restrict, or transfer your personal data. You may exercise these rights by contacting us at [email protected]. We will respond within the timeframe required by applicable law. You will never be penalized or discriminated against for exercising your privacy rights.
Haunted Wisconsin is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions where a higher threshold applies, such as certain EU member states under GDPR Art. 8).
If we discover we have inadvertently collected data from a child under the applicable age threshold without verified parental consent, we will delete it immediately. Parents or guardians who believe their child has submitted data on Haunted Wisconsin should contact us at [email protected]. We will investigate and take corrective action within 72 hours of notification.
Haunted Wisconsin may contain links to third-party websites. Once you leave our site, this Privacy Policy no longer applies. We have no control over and accept no responsibility for external sites' content, privacy policies, or practices. We recommend reviewing the privacy policy of any third-party site you visit.
Some browsers transmit "Do Not Track" signals to websites. There is currently no universally accepted standard for how websites must respond to DNT signals. At this time, Haunted Wisconsin does not alter its data collection practices in response to DNT browser signals. We will review this position as industry standards evolve.
We may update this Privacy Policy periodically. When material changes are made, we will update the "Last Updated" date at the top and post a prominent notice on our website, and where feasible notify subscribers via email. Your continued use of Haunted Wisconsin after any modification constitutes acceptance of the revised policy. We encourage you to review this page periodically.
For questions, data subject requests, or privacy complaints, please contact us:
Halloween Geeks, LLC
PO Box 542
Waukesha, WI 53187-0542
262-372-1313
[email protected]
We aim to respond to all enquiries within 5 business days, and within applicable legal deadlines for formal data subject requests.
July 31st, 2026 3:41 p.m. CDT 26.07.19