Privacy Notice
In effect from 10 August 2026.
What this notice covers
This notice explains how personal information is handled in the A Weekend with Porsche workspace, the tool participating Porsche Centers use to run the program. It covers two groups of people, because what happens to their information differs: program guests, whose details a Porsche Center records, and Porsche Center staff, who sign in to the workspace.
Who is responsible for what
For information about program guests, the Porsche Center decides which guests to enter, what to record about them, and where their details are sent. We hold and process that information on the Center's behalf and on its instructions. A guest with a question or a request should contact the Porsche Center that invited them, and we will help that Center answer. For information about Center staff who hold accounts, we decide how it is used, so those questions come to us directly.
What is collected
About program guests: name, email address, phone number, vehicle of interest, vehicle identification number, program status, the Center contact, notes recorded by Center staff, pre-visit questionnaire answers, progress through the six stages of the journey, the booked date and time of their experience, how many people are coming and the names given for them, and, where a Center submits one, a story and photograph about the weekend. About Center staff: name, work email address, role, the Center they belong to, and a record of actions taken in the workspace. Collected automatically: a sign-in session, and usage events recording which pages and program slides were viewed, how far through, and how long was spent on them. We do not ask for payment card numbers, government identifiers or health information, and Centers are instructed not to enter them.
Where it comes from
Information about a guest does not come from the guest. It comes from the Porsche Center, either entered by staff or imported in bulk from the registration export produced by the event platform used to invite them. That export carries more than is kept: a guest's home address and date of birth appear in it and are deliberately not stored, because the program has no use for them. Information about staff comes from the person or from their Center.
Why it is used
To operate the program: to know who is coming, to prepare and send program communications, to record what a guest was told and what happened during their experience, to pass a guest's details to the Center's own lead or customer system where the Center asks for that, and to give a Center reporting on its own program. Staff information is used to provide and secure accounts and to support the Center.
Cookies
The workspace sets two cookies and both are strictly necessary to keep somebody signed in. There is no advertising cookie, no analytics cookie and no third-party tracking script in this product. If that changes, this notice will change with it.
Who it is shared with
With the providers that run the service for us, named rather than described: Vercel, which hosts the workspace and serves every page; Neon, which hosts the database the workspace stores information in; and Microsoft, which delivers program email from our sending mailbox. With the lead or customer system a Porsche Center chooses, when that Center asks for a guest's details to be sent there. With professional advisers or authorities where the law requires it. And with a successor, if the business is transferred. There is no other processor: no advertising network, no analytics provider, no AI service. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
How long it is kept
Information is kept while a Porsche Center's account is active and until it is deleted. Deleting a guest also deletes that guest's journey progress, and deleting a story deletes its photograph. A Center may ask us to delete its data at any time, and we will. There is no automatic deletion on a timetable today. That is stated plainly rather than published as a retention schedule we do not yet operate, and this section will be updated when one is in place.
How it is protected
Each Center's records are separated from every other Center's, enforced in the database itself rather than only in the application. Sessions are signed, so one cannot be forged or altered, and they expire. Invitation and password-reset links are stored as hashes rather than as the link itself. Traffic is encrypted in transit. Uploaded images are checked against their actual file contents rather than the type they claim, and formats that can carry scripts are refused. No system is completely secure, and we do not claim otherwise.
Rights a person has
Depending on where they live, a person may have the right to know what information is held about them, to get a copy of it, to have it corrected, to have it deleted, to limit how it is used, and not to be treated differently for asking. Because a Porsche Center decides what is recorded about its guests, a guest should ask the Center that invited them, and we will help that Center respond. A Center staff member can ask us directly. We will confirm who is asking before we act on a request, because acting on an unverified request would itself put information at risk. If we refuse a request, we will say why, and the person may ask us to look at that decision again by replying to our answer.
Children
The workspace is not directed to children and we do not knowingly collect information about them. A guest record about a child should not be entered.
Automated decisions
No decision about a guest is made automatically. The workspace records and presents information; a person at the Porsche Center decides what to do with it.
Changes to this notice
We may update this notice. When we do, we will update the effective date at the top of this page, and we will tell Centers about a material change.
How to reach us
Questions about this notice, or a request about personal information, can be sent to support@thewolfpack.agency. A program guest should contact the Porsche Center that invited them, which can raise it with us.