ESCA Badge

Privacy Policy

Access

Privacy Policy

Last Updated: July 14, 2026

CONTENTS

  1. Introduction
  2. Who We Are
  3. How to Contact Us
  4. Scope of This Policy
  5. Acknowledgment and Consent
  6. Changes to This Policy
  7. Information We Collect
  8. How We Collect Information
  9. How We Use Your Information
  10. When and With Whom We Share Information
  11. Sale of Personal Data
  12. Cookies and Tracking Technologies
  13. Do Not Track Signals
  14. Security
  15. Retention of Personal Data
  16. International Users and Data Transfers
  17. Children’s Privacy
  18. Links to Third-Party Sites
  19. Your Rights and Choices
  20. California Residents
  21. European Residents (GDPR)
  22. Questions

1. Introduction

The Exhibition Services & Contractors Association (“ESCA,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy (the “Notice”) explains how ESCA collects, uses, shares, and protects your Personal Data when you visit The Badge website at badge.esca.org and any related ESCA-operated websites (together, the “Badge Site”), apply for, renew, or manage a badge, or otherwise interact with our products, services, or communications (collectively, the “Services”).

This Notice applies to all Badge Site visitors, registered users, badge holders and applicants, contractors, venue administrators, and other users of our Services. Each time you use the Badge Site, the current version of this Notice applies, so please check the Last Updated date at the top and review any changes since the last version.

“Personal Data” (also referred to as “Personal Information”) means any information that identifies, relates to, describes, or could reasonably be linked — directly or indirectly — to a particular individual, such as your name, email address, postal address, phone number, employer, job title, or online identifiers. This definition may vary by jurisdiction, and the applicable legal definition will control where it differs from this one.

2. Who We Are

ESCA is a non-profit trade association representing firms engaged in the exhibition, trade show, and event services industry. The Badge, powered by ESCA, is a national worker identification program that provides a database of approved workers available to venue management and contractors. We are organized under U.S. law as a tax-exempt non-profit and are headquartered in the United States. As a U.S.-based association, ESCA does not actively market to or solicit business from individuals or entities in the European Economic Area (EEA), the United Kingdom, or Switzerland; however, some of our service providers may have offices or staff located outside the United States.

3. How to Contact Us

If you have any questions or concerns about this Notice or our privacy practices, please contact us at:

Email: hello@esca.org
Phone: 972.777.9282
Mail: Exhibition Services & Contractors Association, 8501 W. 191st Street, Unit 1, Mokena, IL 60448
Website: badge.esca.org

4. Scope of This Policy

This Notice covers ESCA’s collection, use, disclosure, and protection of your Personal Data through the Badge Site and Services. It does not apply to information collected by third-party websites, applications, or services we do not control, even when linked from our Badge Site.

We may also collect Personal Data from you through means other than the Badge Site — for example, paper applications, payments by check, phone calls, in-person interactions at venues or events, or emails sent to us directly. If we combine information collected outside the Badge Site with information collected through the Badge Site, this Notice will apply to the combined information unless we tell you otherwise.

Personal Data does not include data that has been de-identified, pseudonymized, anonymized, or aggregated such that it cannot reasonably be linked back to you (“De-Identified Data”).

By visiting the Badge Site or using the Services, you acknowledge that you have read and understood this Notice and consent to the collection, use, and sharing of your Personal Data as described here. If you do not agree with this Notice, please do not use the Badge Site or Services.

6. Changes to This Policy

We may update this Notice from time to time. The current version will always be posted on the Badge Site, and updates take effect when posted. If we make material changes, we will revise the Last Updated date above and, where appropriate, notify you by posting a prominent notice on the Badge Site or by emailing the address you most recently provided to us. You are responsible for periodically checking this page for updates. Your continued use of the Badge Site or Services after changes are posted constitutes your acceptance of the updated Notice.

7. Information We Collect

7.1 Information You Provide to Us

We collect Personal Data you give us directly when you interact with ESCA and the Badge program, including:

  • Contact information — your name, company, job title, business or personal mailing address, email address, and phone number, provided when you correspond with us, complete a webform, or report a problem with the Badge Site.
  • Account information — usernames, passwords, and other authentication data used to register for and access your account.
  • Badge program information — details provided when you apply for, renew, or manage a badge, such as your name, photograph, employer or contracting company, job title or trade classification, and badge or credential status. Badge information may be provided by you or by your employer or contracting company on your behalf.
  • Sensitive information — when necessary, with your consent or as otherwise permitted by applicable law, we process information revealing trade union membership in connection with the Badge program.
  • Payment information — financial information such as billing address and payment card details used to pay badge fees or make other purchases. Payment card data is processed and stored by our payment processor (Authorize.net); ESCA does not retain full payment card numbers.
  • Communications and content — messages, survey responses, comments, or other content you submit to ESCA through the Badge Site or by email.

7.2 Information Collected Automatically

When you use the Badge Site, we (and our service providers) automatically collect certain technical information, including:

  • Internet Protocol (IP) address used to connect your device to the Internet;
  • Browser type, version, language, and plug-ins;
  • Operating system, device type (desktop, laptop, tablet, phone), and device identifiers;
  • Time-zone setting and approximate geographic location derived from your IP address;
  • Pages you view, search terms entered, page response times, download errors, length of visits, scrolling, clicks, mouse-overs, and methods used to navigate away from the page;
  • Referring URL and the URL of the page visited after leaving the Badge Site;
  • Log file information, such as access times, domain names, and cookie information.

7.3 Information We Collect From Other Sources

We may receive information about you from your employer or contracting company (for example, when they register you for or manage your badge), from participating venues, from publicly available sources, and from our service providers who perform identity verification, fraud prevention, payment processing, or analytics on our behalf. We will obtain your consent before contacting you where required by applicable law.

7.4 Non-Personal and Aggregated Data

We collect information sent automatically by your browser or device that, on its own, does not identify you (for example, aggregated browser type, device type, or operating system statistics). We may use this information for business purposes such as customer service, fraud prevention, market research, and improving the Badge Site. We may share De-Identified Data and aggregated information with third parties for any lawful purpose.

8. How We Collect Information

We collect Personal Data through the methods described above, including: webforms and online applications; account creation; submissions by your employer or contracting company; email and direct correspondence; phone calls; in-person interactions at venues and events; cookies and similar technologies (see Section 12); third-party service providers who support our operations; and publicly available sources. We may combine information collected through any of these channels and apply this Notice to the combined data.

9. How We Use Your Information

We process Personal Data only where (1) you have given consent (which you may withdraw at any time); (2) processing is necessary to perform a contract with you, including administering your badge; (3) we are required to do so by law; (4) processing is necessary to protect your vital interests or those of another person; or (5) processing is necessary for our legitimate interests, except where overridden by your rights and interests.

We use the information we collect for purposes including:

  • Providing, administering, and improving the Badge program and Services you have requested, including issuing, verifying, and renewing badges;
  • Making credential and verification status available to participating venue management and contractors, which is the core function of the Badge program;
  • Processing badge fees and other transactions, and providing receipts, renewal notices, and account communications;
  • Responding to your inquiries, requests, and customer-support questions;
  • Sending newsletters, industry updates, and other publications where you have subscribed or have not opted out;
  • Notifying you of products and services from ESCA or selected partners that may interest you, in accordance with your preferences;
  • Operating, securing, and improving the Badge Site — including troubleshooting, data analysis, testing, research, statistical and survey purposes, and presenting content most effectively for you and your device;
  • Measuring the effectiveness of advertising, communications, and outreach;
  • Detecting, preventing, and responding to fraud, abuse, security risks, and violations of our terms;
  • Complying with our legal, regulatory, tax, and accounting obligations and enforcing our agreements and rights;
  • Notifying you about material changes to the Badge Site, Services, or this Notice;
  • Transferring your information as part of a merger, acquisition, restructuring, or similar transaction;
  • Any other purpose for which you provide your Personal Data or to which you consent.

10. When and With Whom We Share Information

We may share your Personal Data with the following categories of recipients for the purposes described in this Notice:

  • Participating venues and contractors — the core function of the Badge program is to make worker credential and verification status available to venue management and contractors. When your badge is presented or scanned at a participating venue, your relevant badge information (such as your name, photograph, employer, and credential status) is shared with that venue and, where applicable, your contracting company.
  • Service providers, suppliers, and sub-contractors — performing services on our behalf, including data storage and hosting, database management, web analytics, email delivery, payment processing, and customer support.
  • Analytics and advertising providers — helping us measure use of the Badge Site, optimize content, and deliver relevant communications and advertising.
  • Legal, financial, and compliance advisors — providing professional services such as legal counsel, audit, and tax advice.
  • Government authorities, regulators, and law enforcement — where required by law, court order, or legal process, or to protect our rights, property, or safety, or that of others.
  • Successors and acquirers — in connection with a merger, sale of assets, restructuring, dissolution, or similar transaction, in which case Personal Data may be among the assets transferred.

We require that service providers handle your Personal Data only in accordance with our instructions and applicable law, and that they maintain appropriate security and confidentiality safeguards.

11. Sale of Personal Data

ESCA does not sell your Personal Data to third parties without your opt-in consent. From time to time we may exchange or rent member or subscriber mailing lists with carefully screened industry partners; if we do so, we will honor any opt-out preferences you have set and provide a means to opt out in advance.

12. Cookies and Tracking Technologies

The Badge Site uses cookies and similar technologies (such as web beacons, pixel tags, and unique identifiers) to provide a safer, customized, and efficient experience. Cookies set by ESCA (or by domains we operate) are “first-party cookies.” Cookies set by other parties — for example, analytics or advertising providers — are “third-party cookies.”

The specific cookies used on the Badge Site, the purposes they serve, and how to control them are described in our Cookie Policy. You can manage or delete cookies through your browser settings at any time; disabling certain cookies may affect how the Badge Site functions. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and exercise advertising-cookie choices through industry opt-out tools at aboutads.info/choices and networkadvertising.org/choices.

13. Do Not Track Signals

Because there is no industry-standard interpretation of “Do Not Track” (DNT) signals, ESCA does not currently respond to DNT signals sent by web browsers. Your navigation of the Badge Site may be tracked as part of the activity described in this Notice. If you arrive at the Badge Site by way of a third-party site that does respond to DNT requests, the recognition of any DNT request you have initiated will end as soon as you reach our Badge Site. You can limit certain tracking using the cookie controls described above.

14. Security

We use reasonable administrative, technical, and physical security measures to protect Personal Data against loss, misuse, unauthorized access, disclosure, alteration, and destruction. Payment transactions are encrypted using industry-standard encryption (TLS/SSL). However, no method of transmission over the Internet or electronic storage is fully secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for all activities that occur under your account.

15. Retention of Personal Data

We retain your Personal Data only as long as necessary for the purposes for which it was collected, including providing you with Services, maintaining your badge record, complying with our legal, regulatory, tax, accounting, and reporting obligations, resolving disputes, and enforcing our agreements and rights. Specific factors we consider include:

  • Whether your badge or account is active;
  • Financial and recordkeeping requirements relating to badge fees and other payments;
  • Security, fraud, and abuse prevention;
  • The nature of any direct communications you have had with ESCA.

We may retain De-Identified Data for as long as we deem appropriate. Where you request deletion of your information, residual copies may persist in routine backups for a reasonable period before being overwritten.

16. International Users and Data Transfers

ESCA is headquartered in the United States, and the Personal Data we collect is generally stored and processed on servers located in the United States. If you are visiting the Badge Site from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States and other countries where ESCA or our service providers operate. Privacy laws in those countries may differ from, and may not be as protective as, those in your jurisdiction. By using the Badge Site, you consent to such transfers.

17. Children’s Privacy

The Badge Site is not directed to children, and the Services are intended for users who are at least 18 years old. We do not knowingly collect Personal Data from individuals under the age of 13. If you are under 13, please do not use the Badge Site or send us any Personal Data. If we learn that we have collected Personal Data from a child under 13 without verifiable parental consent, we will take appropriate steps to delete it. Parents or guardians who believe a child has submitted Personal Data to ESCA may contact us at hello@esca.org to request removal.

The Badge Site may contain links to third-party websites, applications, and services that we do not operate or control. These links are provided as a convenience and do not imply ESCA’s endorsement of, or association with, the operators of those sites. ESCA is not responsible for the privacy practices or content of any third-party site. We encourage you to review the privacy policies of any third-party site you visit through a link from the Badge Site.

19. Your Rights and Choices

19.1 Reviewing, Updating, and Deleting Your Information

If any information we have about you is incorrect, or you wish to have information (including Personal Data) updated or removed from our records, you may do so by logging into your account on the Badge Site, by contacting us at hello@esca.org, or by submitting our data subject request form. We will respond to your request consistent with applicable law and our legal and recordkeeping obligations.

19.2 Marketing Opt-Out

If you prefer not to receive marketing communications from ESCA, you may opt out at any time by clicking the “unsubscribe” link at the bottom of any marketing email or by emailing hello@esca.org. Please note that even after opting out of marketing messages, we may still send you Service-related communications — for example, badge renewal notices, transaction receipts, important security or legal notices, and updates about your badge or account.

20. California Residents

Section 1798.83 of the California Civil Code (the “Shine the Light” law) requires certain businesses to disclose their policies relating to sharing of certain categories of Personal Data with third parties for those third parties’ direct marketing purposes. If you are a California resident and have provided Personal Data to ESCA, you may request information about such disclosures by contacting hello@esca.org with the subject line “Request for California Privacy Information.” We will respond within thirty (30) days, or as otherwise required by law.

The California Consumer Privacy Act of 2018 (CCPA), as amended, generally does not apply to non-profit organizations. ESCA is a non-profit trade association.

21. European Residents (GDPR)

This section applies only to individuals located in the European Economic Area (EEA), the United Kingdom, or Switzerland (collectively, the “EU Region”).

As a U.S.-based non-profit, ESCA does not actively offer goods or services to, or monitor the behavior of, individuals located in the EU Region. However, if you are a resident of the EU Region and have provided Personal Data to ESCA, you may have the following rights under the General Data Protection Regulation (GDPR) and similar laws, subject to legal limitations:

  • Right of access — to obtain confirmation of whether we process your Personal Data and a copy of that data;
  • Right to rectification — to have inaccurate or incomplete Personal Data corrected;
  • Right to erasure — to request deletion of your Personal Data, subject to certain exceptions;
  • Right to restrict processing — to ask us to suppress processing of your Personal Data in certain circumstances;
  • Right to object — to object to processing based on legitimate interests or for direct marketing;
  • Right to data portability — to receive your Personal Data in a structured, commonly used, machine-readable format;
  • Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time;
  • Right to lodge a complaint — with a supervisory authority, such as the UK Information Commissioner’s Office (ICO) or another EU data protection authority.

Where we process Personal Data of EU Region residents, our legal bases include consent, performance of a contract, compliance with a legal obligation, protection of vital interests, and our legitimate interests (such as fraud prevention, network security, direct marketing, analytics, and administering the Badge program), except where those interests are overridden by your rights and freedoms.

To exercise any of these rights, please contact us at hello@esca.org.

22. Questions

If you have any questions about this Notice or our privacy practices, please contact us at hello@esca.org. We are committed to working with you to resolve any concerns about our handling of your Personal Data.