RIVERS & ROOTS
Privacy Policy
Effective Date: April 01, 2026
Rivers & Roots Festival ("R&R Fest," "Rivers & Roots Festival," "we," "us," or "our") is produced and presented by Privia Group, LLC. "Rivers & Roots" is a trademark owned by Privia Group, LLC. This Privacy Policy explains how Privia Group, LLC collects, uses, discloses, stores, and otherwise processes information in connection with the website located at and any related online services, digital forms, registrations, waitlists, ticketing flows, sweepstakes, promotions, surveys, communications, and event-related interactions that link or refer to this Privacy Policy (collectively, the "Site" and "Services").
This Privacy Policy is intended for users in the United States.
Hmong American Partnership (HAP) serves as fiscal agent for a grant supporting this project. HAP is not the operator of the Site and is not responsible for the day-to-day administration of the Site, commercial transactions, ticketing, advertising, analytics, or event operations described in this Privacy Policy.
1. Scope of This Privacy Policy
This Privacy Policy applies to information collected by or on behalf of Privia Group, LLC through:
the Site;
Tally forms, Stripe-enabled payment flows, registration forms, sponsor inquiry forms, vendor forms, waitlists, and other digital submissions associated with R&R Fest;
email, SMS, social media, and other communications that link to or reference this Privacy Policy; and
certain in-person, on-site, or post-event interactions where this Privacy Policy is made available or otherwise reasonably applies.
This Privacy Policy does not apply to third-party websites, platforms, ticketing interfaces, payment processors, social media platforms, advertising networks, or vendor websites that we do not own or control, even if they are linked on or accessible through the Site.
2. Information We Collect
We may collect the following categories of information, depending on how you interact with us.
A. Information You Provide Directly
We may collect information you choose to provide, including:
name;
email address;
telephone number;
city and state;
organization or business name;
job title or role;
form submissions and inquiry details;
sponsorship, vendor, media, volunteer, or partnership application information;
event registration details;
survey responses, testimonials, feedback, and other communications;
transaction and order information;
payment-related information necessary to facilitate transactions, although full payment card details are generally processed by third-party payment processors and not stored by us.
B. Information Collected Automatically
When you visit the Site or interact with our emails, ads, or content, we and our service providers may automatically collect certain information, including:
IP address;
browser type and version;
device identifiers;
operating system;
approximate geographic location derived from IP address;
referring URLs and campaign parameters;
pages viewed and content interactions;
clicks, scroll behavior, session duration, and navigation paths;
event registrations and conversion signals;
date/time stamps; and
other log and usage information.
C. Cookies and Similar Technologies
We and our service providers may use cookies, pixels, tags, SDKs, local storage, and related tracking technologies to collect information about your interactions with the Site and our advertising, including for analytics, attribution, audience building, retargeting, and measurement.
These technologies may include, without limitation:
Google Analytics 4;
Google Tag Manager;
Google Ads conversion and remarketing technologies;
Meta Pixel and related Meta business tools; and
other tools used for website performance, campaign analysis, fraud prevention, and audience insights.
D. Information From Third Parties
We may receive information from third parties, including:
form and workflow tools such as Tally;
payment processors such as Stripe;
analytics, advertising, and social media platforms;
marketing, communications, and CRM tools;
business partners, sponsors, vendors, and service providers;
publicly available sources; and
individuals who refer you to us or interact with us on your behalf.
E. Event and On-Site Information
If you attend R&R Fest or related events, we may collect information relating to your attendance, participation, purchases, surveys, photographs, video footage, testimonials, and other event engagement data.
3. How We Use Information
We may use information for any lawful business purpose, including to:
operate, administer, maintain, secure, and improve the Site and Services;
process registrations, orders, inquiries, waitlists, applications, and transactions;
communicate with you regarding the festival, tickets, event updates, vendors, sponsors, programs, promotions, and related opportunities;
provide customer service and respond to inquiries;
send newsletters, promotional messages, and other marketing communications;
personalize content, offers, and advertising;
measure and understand audience behavior, engagement, and campaign performance;
build, create, and use audience segments and remarketing lists;
detect, investigate, prevent, and address fraud, abuse, security incidents, and unlawful conduct;
protect our rights, property, brand, trademarks, goodwill, systems, attendees, partners, and the public;
enforce our Terms of Use and other agreements;
comply with legal, regulatory, contractual, insurance, accounting, tax, reporting, and grant-related obligations;
prepare internal reports, sponsor updates, event analytics, and required post-event reporting; and
support cultural, operational, educational, measurement, and public-engagement objectives related to R&R Fest.
Without limiting the foregoing, data gathered from the festival or through the Site may be aggregated, summarized, analyzed, and incorporated into reports and materials provided to funding, grant, or institutional stakeholders, including the Minnesota Humanities Center (MHC), so long as such use is lawful and appropriate.
4. Legal Bases / Consent and Your Choices
Because this Privacy Policy is directed primarily to U.S. users, our processing is generally based on one or more of the following:
your consent;
performance of a transaction or requested service;
our legitimate business interests;
compliance with legal obligations; and/or
protection of our rights and safety.
You may choose not to provide certain information, but doing so may limit your ability to access certain features, forms, registrations, or services.
You may opt out of marketing emails by using the unsubscribe link contained in those communications. Opting out of marketing messages does not affect transactional, service, legal, operational, safety, or event-related communications.
5. How We Disclose Information
We may disclose information to the following categories of recipients:
A. Service Providers and Contractors
We may disclose information to vendors, consultants, contractors, and service providers that perform services for us, including providers of:
website hosting and infrastructure;
analytics and tag management;
advertising and audience tools;
payment processing;
email and communications delivery;
form collection and workflow management;
CRM and database tools;
professional advisory services;
event operations and customer support; and
security, fraud prevention, and administrative support.
B. Advertising, Analytics, and Social Platforms
We may disclose information to advertising and analytics partners, including Google, Meta, and related service providers, to support audience measurement, attribution, advertising delivery, conversion tracking, and remarketing.
C. Sponsors, Partners, Vendors, and Event Stakeholders
We may disclose information where reasonably necessary to administer sponsorships, vendor participation, media requests, volunteer programs, event activations, or related collaborations.
D. Legal, Safety, and Business Protection Disclosures
We may disclose information if we believe in good faith that doing so is necessary or appropriate to:
comply with law, regulation, subpoena, court order, governmental request, grant requirement, or legal process;
enforce our agreements, policies, and legal rights;
protect the rights, property, or safety of Privia Group, LLC, the festival, our attendees, our partners, or others;
detect, investigate, or prevent fraud, security incidents, or unlawful conduct; or
respond to emergencies.
E. Business Transfers
We may disclose or transfer information in connection with an actual or proposed merger, acquisition, financing, investment, reorganization, asset sale, change in control, or similar transaction involving Privia Group, LLC or relevant assets, subject to applicable law.
F. Aggregated or De-Identified Information
We may use and disclose aggregated, anonymized, or de-identified information for lawful business, analytical, cultural, reporting, marketing, and research purposes.
We do not sell personal information in exchange for monetary compensation.
6. Payment Processing
Privia Group, LLC is the merchant of record for transactions processed in connection with R&R Fest. Payment transactions may be facilitated through third-party processors and service providers, including Stripe, and may be initiated through tools such as Tally or other website and workflow interfaces.
Payment card and certain financial information is generally collected and processed directly by such third parties subject to their own terms and privacy practices. We encourage you to review the privacy policies and terms of any payment processor or third-party commerce provider you use.
7. Event Photography, Video, and Media Data
R&R Fest is a live public event experience. In connection with attendance, registration, or participation, we may collect and use photographs, video recordings, audio recordings, testimonials, interviews, and related media depicting attendees, participants, vendors, sponsors, performers, and other persons present in public or event-related settings, subject to applicable law and our applicable terms.
Such content may be used for operational, security, documentary, archival, editorial, promotional, commercial, marketing, brand, educational, fundraising, sponsorship, grant, and reporting purposes.
8. Data Retention
We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:
provide and improve the Site and Services;
complete transactions and maintain business records;
support analytics, audience development, and campaign reporting;
comply with tax, accounting, insurance, legal, regulatory, and grant obligations;
resolve disputes and enforce agreements; and
protect our business interests.
Retention periods may vary depending on the nature of the information and applicable legal or operational requirements.
9. Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. However, no website, network, device, database, transmission, or storage system can be guaranteed to be completely secure. Accordingly, we do not warrant or guarantee the absolute security of any information.
10. Children
R&R Fest is an all-ages event, but the Site is not directed to children under 13 as a primary audience. We do not knowingly collect personal information online from children under 13 in a manner requiring parental consent under applicable U.S. law unless explicitly disclosed and lawfully managed. If you believe a child under 13 has submitted personal information to us inappropriately, please contact us at legal@priviaco.com.
11. Third-Party Sites and Services
The Site may contain links to or integrations with third-party websites, ticketing or payment interfaces, sponsor content, social platforms, maps, forms, vendors, or tools. We are not responsible for the privacy, security, content, or practices of such third parties. Your interactions with third-party services are governed by their own terms and policies.
12. U.S.-Only Orientation
The Site and Services are intended for users in the United States. By using the Site, you understand that your information may be processed and stored in the United States and other jurisdictions where our service providers operate, subject to applicable law.
13. Your Privacy Rights and Requests
Subject to applicable law, you may have the right to request access to, correction of, deletion of, or additional information regarding certain personal information we maintain about you. We may need to verify your identity before responding to a request.
To make a request, please contact:
We reserve the right to decline requests where permitted by law, including where a request is unfounded, impracticable, repetitive, prohibited, or inconsistent with our legal, contractual, security, recordkeeping, or operational obligations.
14. Changes to This Privacy Policy
We may revise this Privacy Policy at any time in our sole discretion. When we do, we will update the Effective Date above. Your continued use of the Site or Services following the posting of an updated Privacy Policy constitutes your acknowledgment of the revised terms, to the extent permitted by law.
15. Minnesota Humanities Center / Legacy Acknowledgment
This work is funded in part by the Minnesota Humanities Center with money from the Arts and Cultural Heritage Fund, as appropriated by the Minnesota State Legislature from the Minnesota Clean Water, Land & Legacy Amendment, created by the vote of the people of Minnesota on November 4, 2008. Funding for this project was originally awarded under the project title “Sabaidee Cultural Festival.” Hmong American Partnership (HAP) serves as the fiscal agent for this grant.
16. Contact
For privacy-related questions, requests, or notices, please contact: