Discretion is the currency of the Club. This policy explains what we collect, why we collect it, and the limits we place on ourselves when handling your data.
1. What We Collect
When you interact with the Club, we collect:
- Identity data — full name, email, date of birth (implicit via ID check at entry), Instagram handle (optional).
- Application data — your occupation / creative identity provided on the Guest List Application.
- Payment data — processed by Stripe; we never see or store your full card number. We retain the last 4 digits, card brand, and payment status.
- Attendance data — which events you registered for, redeemed, or attended.
- Technical data — IP address, browser type, and basic session logs used for security and fraud prevention.
2. Why We Collect It
- To curate the guest list and maintain the exclusivity of the Club.
- To process memberships, ticket purchases, and issue digital entry passes.
- To verify identity at the door and prevent fraudulent access.
- To send event confirmations, membership updates, and influencer approvals.
- To comply with legal and tax obligations.
3. Who We Share It With
We do not sell your data. We share limited information only with trusted service providers who help us run the Club:
- Stripe — payment processing (see stripe.com/privacy).
- Resend — transactional email delivery.
- MongoDB Atlas — encrypted database storage.
- Venue staff — receive the guest list on the night of the event for door check only.
We may disclose information if compelled by law, subpoena, or if necessary to protect the safety of members and staff.
4. Cookies & Tracking
We use only essential cookies required to keep you logged in and secure the checkout session. We do not run third-party ad trackers or behavioural profiling on the site.
5. Data Retention
Membership, ticket, and application records are retained for as long as your account is active plus 24 months for financial and legal compliance. Payment records are retained for 7 years as required by tax law. You may request deletion of your personal profile at any time (see Rights below).
6. Your Rights
Depending on your jurisdiction, you have the right to:
- Request a copy of the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your account and associated data (except records we are legally required to keep).
- Withdraw consent for marketing emails at any time.
To exercise any of these rights, email secretsoulciety@secretsoulcietyclub.com. We respond within 30 days.
7. Security
All connections are encrypted with TLS. Passwords are hashed using industry-standard algorithms. Payment data is tokenized by Stripe and never touches our servers. No system is impenetrable, and we cannot guarantee absolute security — but we treat your data with the discretion the Club is built on.
8. Children
The Club is strictly 19+. We do not knowingly collect data from anyone under 19. If we discover such data, we delete it immediately.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on the site and via email to active members.