Privacy Policy

Privacy Policy — Work’N’Roll

Last updated: 13 September 2026

Work'N'Roll ("we", "us", "our") is an events, experiential and digital marketing brand based in New York City, focused on industry culture, education, and community.

Work'N'Roll NYC is a brand of Freaky Dog LLC, a New York limited liability company, which is the data controller for the personal data described in this policy.

This Privacy Policy explains how we collect, use and protect your personal data when you interact with us, including when you:submit any form on our website https://www.worknroll.nyc (for example: event registration, homepage form, sponsor/media interest, contact/waitlist, newsletter sign-up),create and use an account on our event pass and community portal at https://pass.worknroll.nyc (the "Portal"), andreceive our event- and community-related communications.

By submitting a form on our website, creating a Portal account and, where applicable, ticking the consent checkboxes, you agree to the practices described in this Privacy Policy.

1. Who we are & how to contact us

Freaky Dog LLC DBA Work'N'Roll NYC
Email: contact@worknroll.nyc
Website: https://www.worknroll.nyc

If you have any questions about this Privacy Policy or about how we handle your data, you can contact us at contact@worknroll.nyc.

2. What data we collect
We may collect different types of personal data depending on which form or service you use.

2.1. Event registration formsWhen you register for an event we may collect:
‍
‍Identity & contact details
‍Full name
Email address
Phone number
‍
‍Professional information
‍Company / organizationJob title / position
Ticket type (e.g. Guest, Sponsor, Media, Budtender, Brand Representative, other categories we may introduce)
Selected time slot / arrival window
‍
‍Event-specific information
‍Event ID (internal identifier for the event)
Unique reservation ID and internal token
QR code payload used for check-in
Status of your ticket (e.g. Pending, Valid, Checked In, Cancelled)
Check-in time and "checked in by" (which member of our staff handled your check-in)

‍Proof of eligibility (for some ticket types)
‍For certain categories (for example, budtender, brand representative or media registrations, or other restricted tickets), we may ask you to upload proof of eligibility (such as a photo or screenshot of a badge, pay stub, employment letter, press credentials, proof of brand affiliation, or another document related to your professional status). We store this proof privately and connect it internally to your registration record. We do not use this proof for any purpose other than verifying that you are eligible for that specific ticket type or account type.

‍Consent & preferences
‍Required consent: "I agree to the processing of my personal data for the purpose of event registration and communication, according to the Privacy Policy."
Optional consent (if you choose to give it): "I agree to receive event updates, marketing communications and partner offers from Work'N'Roll.

"If you do not tick the required consent checkbox (where shown), we may be unable to process your registration.

2.2. Homepage / general forms (contact, waitlist, newsletter, sponsor/media interest)When you use forms on our homepage or other site sections (for example to request information, join a waitlist, apply as a sponsor or media partner, or subscribe to updates), we may collect:
Full name
Email address
Phone number (optional or required, depending on the form)
Company / organizationRole / area (e.g. brand, sponsor, media, partner, creator)
Message or project description (whatever you type into free-text fields)Event or topic you are interested in
Your preferences on receiving marketing or partner communications (where applicable)
Again, for these forms you may see at least one required consent checkbox for data processing, and in some cases an optional checkbox for marketing communications.

2.3. WNR Pass portal accounts
When you create and use a Portal account we may additionally collect:
‍
‍Account & profile
‍Name, email, phone, and a password (stored by our authentication provider in hashed form)
Profile photo and social media handles
Account type (dispensary staff / "budtender", brand representative, or media/press)
Employer, dispensary or brand affiliation and job title
For media accounts: outlet, audience size, role, content type, and coverage commitments

‍Verification documents
‍Proof of eligibility you upload for your account type (see 2.1). Verification repeats periodically; each submission is stored privately and is never public.

‍Portal activity
‍Event registrations, ticket QR codes, check-ins and cancellations
Content you submit: product reviews and ratings, brand and booth feedback, comments and chat messages, links to your posts, photos, favorites, and private notes

Engagement data: XP/star point entries, badges, bingo progressEmail delivery, open and click events for messages we send you

‍Age.
The Site, the Portal and our events are intended for people 21 and older. We do not knowingly collect data from anyone under 21; if we learn an account belongs to someone under 21, we delete it.

3. How we use your data
We use your personal data collected through our forms and the Portal for the following purposes:
‍
3.1. Event registration and ticketing
To receive and process your event registration request
To verify your eligibility for restricted ticket or account types
To generate and assign a unique token and QR code for your ticketTo allocate you to a time slot / arrival window (if applicable)
To determine and manage your ticket type (Guest, Sponsor, Media, Budtender, Brand Representative, etc.)

3.2. Event communicationsTo send you registration confirmations and updatesTo send you your QR code and event access details
To notify you about changes to the event (schedule, venue, timing, etc.)
To respond to your questions about your participation or ticket
These are operational communications and may be sent even if you do not agree to marketing communications, as long as you are registered for the event or hold a Portal account.

3.3. Operating the PortalMaintaining your account and profile and running periodic verification
Managing check-in and attendance capacity (including per-brand attendance limits)Awarding engagement points (XP/stars), badges and bingo progressShowing you your own review history, favorites and private notes

3.4. Sharing feedback with brands
Product reviews and brand/booth feedback submitted on the Portal are collected specifically to be shared with the brands, sponsors and partners they concern — in dashboards, reports and exports, as part of free or paid offerings.
Feedback shared this way shows your first name and workplace or affiliation, not your contact details.
Aggregated statistics, scores and rankings (for example, event awards such as "Best Brand" or "Best Product") may be computed from reviews and published.

3.5. Moderation and safety
We process Portal data to detect fake, manipulated or self-interested reviews, to enforce our Terms of Use and code of conduct, and to maintain a restricted-accounts list.

3.6. Contact requests, sponsor/media and partnership inquiries
For forms on the homepage or other sections (e.g. "Contact", "Sponsor", "Media", "Partner", "Work with us", "Join the community"), we process your data to:respond to your inquiry and communicate with youevaluate and follow up on sponsorship or media requestscoordinate potential collaborations, partnerships or bookingsschedule calls, meetings or demos if requested

3.7. Marketing and community updates (only with your consent)
If you tick the optional marketing consent checkbox (on any form that includes it), we may use your data to:send you news about upcoming Work'N'Roll events and experiencesinform you about special offers, collaborations and partner promotionsinvite you to community activities, surveys, or early access experiencessend you newsletters or similar email updatesYou can opt out of these communications at any time by using the unsubscribe link in our emails or contacting us at contact@worknroll.nyc.

3.8. Analytics and service improvement
We may use aggregated and anonymised data to:understand interest in our events, experiences, and brandanalyse patterns in registrations, attendance, waitlists, reviews and partnershipsimprove our website, the Portal, events, communication flows and check-in processesproduce internal reports and statisticsshare aggregated, non-identifiable statistics with sponsors and partners (for example: total number of attendees, percentage of budtenders, average product scores), but not your identifiable personal data, except as described in Section 3.4.

3.9. Legal compliance and protection
We may process your data where necessary to:comply with legal obligations (for example, in relation to venue regulations or local laws)respond to lawful requests from authoritiesprotect our rights, property and safety, as well as the rights, property and safety of our guests, partners and team.

4. Legal bases for processing
Depending on your location and applicable law, our legal bases for processing your data may include:

‍Performance of a contract — to process your event registration, run your Portal account, or handle your inquiry and provide you with the services or information you request.
‍
‍Consent — for processing your data for event registration and communication (via the required consent checkbox), and for sending you marketing communications (via the optional marketing checkbox).

‍Legitimate interests — to run and improve our events, brand, Portal and community, manage attendance and interest, moderate content, prevent fraud, and communicate with potential sponsors, media and partners, where these interests are not overridden by your rights and freedoms.

‍Legal obligations — in cases where we must process or retain certain data under applicable law.

5. How we store and share your data
We use a set of tools and service providers to run our website, the Portal, forms and event operations. This currently includes, for example:
Database, authentication and file storage (Supabase) Hosting (Vercel)
Email delivery and open/click analytics (Resend) Our marketing website platform (Webflow)Workflow automation tools (n8n)Databases / workspaces (Notion)Email and productivity tools (Google Workspace / Gmail)QR-code generation services Messaging platforms used for operations (for example, tools used by our internal team for check-in and guest management)These service providers act as our data processors and process your data on our behalf, under our instructions and according to their own security/privacy standards.We do not sell your personal data.We may share your data with:

‍Brands, sponsors and event partners — the review and feedback data described in Section 3.4, and event lists strictly needed for event operations (for example, door lists for security), with appropriate safeguards in place and where permitted by law.

‍Venues and security staff, where needed for entry and safety.

‍Authorities or legal advisors, if required by law or to protect our legitimate rights.

6. International data transfers
Because we use cloud-based services and tools, your personal data may be stored or processed in other countries outside your state or country of residence.

Where required by law, we take steps to ensure that such transfers are carried out with appropriate safeguards (for example, using providers that implement standard contractual clauses or equivalent mechanisms).

7. Data retention
We retain your personal data only for as long as necessary for the purposes described in this Privacy Policy, including:

‍Event registrations and check-in records: for the duration of the event and a reasonable period after the event, to handle any follow-ups, disputes, analytics or legal requirements;
‍Verification / proof of eligibility documents: while your verification is valid and for a limited period sufficient to validate your participation and comply with any legal or regulatory requirements, after which we aim to delete or irreversibly anonymize such documents;
‍Reviews and feedback: while relevant to the product or brand history; they may be retained in anonymized or aggregated form indefinitely;
‍Private notes: notes you delete are removed from your view but retained in archived form for moderation and record-keeping purposes; archived notes remain visible to Work'N'Roll staff;
‍General inquiries and partner/sponsor/media contacts: as long as we are actively communicating or may reasonably follow up, and for a reasonable period thereafter;
‍Marketing communications: until you withdraw your consent or opt out;
‍Restricted-accounts records: as long as needed to enforce our Terms of Use.Specific retention periods may vary depending on legal requirements, our internal policies and the nature of the data.8. Your choices and rightsDepending on your location and applicable law, you may have some or all of the following rights in relation to your personal data:
‍Access — to ask what personal data we hold about you.
‍Correction — to request correction of inaccurate or incomplete data.
‍Deletion — to request that we delete your personal data, where legally permitted. You can also request deletion of your Portal account; we will delete or anonymize your personal data, except records we need for legal, security or dispute purposes and aggregated statistics that no longer identify you. Reviews may be retained in de-identified form.
‍Restriction — to ask us to restrict processing of your data in certain circumstances.
‍Objection — to object to certain types of processing, including our use of your data for marketing.
‍Withdrawal of consent — where processing is based on consent (for example, marketing), you can withdraw this consent at any time.

You can also edit your Portal profile and manage your favorites and notes directly in the Portal, and unsubscribe from marketing via the link in any marketing email.
To exercise any of these rights, you can contact us at contact@worknroll.nyc. We may need to verify your identity before acting on your request.

9. Cookies and tracking
Our website may use cookies and similar technologies to:keep the site and forms functioning properly,analyze traffic and performance,improve user experience, andin some cases, help us understand how visitors interact with our content and events.

The Portal uses browser storage (localStorage) to keep you signed in and remember interface preferences; this is required for the Portal to function.
Emails we send may include open and click tracking so we can measure delivery and engagement.
Where required by law, we will provide you with a cookie banner and/or preferences to manage your cookie settings.

10. Protecting your data
We take reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse or alteration — including access controls, row-level security in our database, and private storage for verification documents.
However, no online service or transmission of data over the internet can be guaranteed to be 100% secure. You use the site and submit data at your own risk, but we are committed to continuously improving our security practices.

11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, for example when we launch new services, change our processes, or if legal requirements change.
When we update the policy, we will change the "Last updated" date at the top and publish the new version on this page. In some cases, we may also notify you directly (for example, by email or in event communications), if the changes are significant.

12. How to contact us

If you have any questions, concerns, or requests related to this Privacy Policy or to your personal data, you can contact us at:
Freaky Dog LLC DBA Work'N'Roll NYC
Email: contact@worknroll.nyc

We will do our best to respond within a reasonable timeframe and in accordance with applicable laws.