Privacy Policy

This Privacy Policy explains how 203 Lounge LLC (“203 Lounge,” “we,” “us,” or “our”) collects, uses, shares, and protects information about you when you visit 203lounge.com(the “Site”), hold a membership, or visit our venue in 9 Phoenix Ave, Waterbury, Connecticut 06702(together, the “Services”). By using the Services, you agree to the practices described here.

1. Information we collect

Information you give us.

• Account details: name, email address, and password or sign-in method, collected through our authentication provider when you create an account.
• Phone number: if you add one, used to send one-time sign-in codes by SMS and for account recovery.
• Payment details: your card number, expiration date, and billing ZIP are collected directly by Stripe, our payment processor. We never see or store your full card number. We keep the last four digits, card brand, and your billing history.
• Membership details: your tier, subscription status, renewal date, and any table reservations or event RSVPs.
• Messages: anything you send us by email or through the Site.

Information we collect when you visit the venue.

• Entry records: when staff scan your personal QR pass at the door we record the date and time, the event, and how many guests entered with you. We record guest counts only, not guest names.
• Staff notes: door and management staff may log notes about an entry (for example, a refused entry or a capacity hold) in an internal audit trail.

Information collected automatically.

• IP address, browser and device type, pages viewed, and the date and time of your visit.
• Essential cookies and similar identifiers needed to keep you signed in and to protect the Site from abuse (see Section 6).

2. How we use information

• To create and manage your account and verify your identity and membership at the door.
• To process payments, renew subscriptions, and send receipts and billing notices.
• To manage venue capacity, guest allowances, table reservations, and event RSVPs.
• To send you service messages about your account, your membership, or changes to our terms and policies.
• To send you news about upcoming events and member offers, if you have opted in. You can opt out at any time using the link in any such email or by contacting us.
• To keep the Services secure, prevent fraud and pass sharing, enforce our Terms of Service, and comply with law.
• To understand how the Site is used so we can improve it.

3. How we share information

We do not sell your personal information, and we do not share it with third parties for their own marketing. We share information only as follows:

• Service providers who process data on our behalf and are bound to use it only to provide services to us: Clerk (authentication and account management), Stripe (payments and subscription billing), Supabase (database and file storage), Upstash (caching and rate limiting), and Vercel (website hosting). If we add providers for email delivery, SMS delivery, error monitoring, or analytics, we will update this list.
• Venue staff see the information needed to admit you: your name, tier, guest allowance, and pass status.
• Legal and safety: when required by law, subpoena, or court order, or when we believe disclosure is necessary to protect the rights, property, or safety of 203 Lounge, our members, our staff, or the public.
• Business transfers: if 203 Lounge is involved in a merger, sale, or transfer of assets, your information may be transferred as part of that transaction, subject to this policy.
• With your consent or at your direction.

4. Text messages

If you add a phone number to your account, we may send you one-time sign-in codes and account security messages by SMS. These are service messages, not marketing. Message and data rates may apply. We will not send promotional text messages unless you separately opt in, and you can stop them at any time by replying STOP.

5. How long we keep information

• Account and membership data: for as long as your account is open, and for up to 12 months after it closes so we can handle billing disputes and reactivations.
• Payment and billing records: up to 7 years after the transaction, as required for tax and accounting.
• Entry records and staff logs: up to 24 months, to support safety, capacity reporting, and incident review.
• Technical logs: typically 90 days or less.

We may keep information longer where the law requires it or where it is needed to resolve a dispute or enforce our agreements.

6. Cookies

We use strictly necessary cookies to keep you signed in, remember your session, and protect the Site against abuse. We do not currently use advertising cookies or third-party tracking pixels. If that changes we will update this policy and, where required, ask for your consent. You can clear or block cookies in your browser settings, but the member portal will not work without the essential ones.

7. Security

We protect your information with industry-standard measures, including encryption in transit, signed and expiring QR passes, role-based access for staff, and rate limiting on sensitive endpoints. Card data is handled entirely by Stripe, a PCI DSS Level 1 certified processor. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach affecting your information we will notify you as required by Connecticut law.

8. Your choices and rights

• Access and correction: you can view and update your name, email, and phone number in your account settings, and your payment method and subscription in the member portal.
• Cancel: you can cancel a monthly membership at any time in the member portal.
• Delete: you can ask us to delete your account and personal information by emailing 203loungellc@gmail.com. We will honor the request except for records we must keep by law (such as billing records) or need to resolve a dispute.
• Marketing opt-out: use the unsubscribe link in any promotional email, or contact us.
• Data portability: on request we will provide a copy of the personal information we hold about you in a common, machine-readable format.

Connecticut residents may also have rights under the Connecticut Data Privacy Act, including the right to confirm whether we process your data, to correct or delete it, to obtain a copy, and to opt out of targeted advertising or the sale of personal data. We do not engage in targeted advertising or sell personal data. To exercise any right, email 203loungellc@gmail.comwith the subject line “Privacy request.” We will respond within 45 days and will not discriminate against you for exercising your rights. If we deny a request, you may appeal by replying to our response.

9. Age requirement

203 Lounge is a 21+ venue. The Services are not directed to anyone under21, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top shows when it last changed. If a change materially affects how we use your information, we will notify active members by email or through the Site before it takes effect.

11. Contact us

203 Lounge LLC
9 Phoenix Ave, Waterbury, Connecticut 06702
203loungellc@gmail.com
(475) 314-2876