Privacy Policy

This policy explains what Membership Club (“we”, “us”) collects when you use Membership Club, why we collect it, and who else sees it. It applies to this website and to any pass we issue you.

What we collect

• Account details — your email address, the name you choose to display, and a phone number if you give us one. You give us these; we do not buy them.
• Sign-in information — a password, stored only as a salted hash we cannot reverse, or a sign-in link, or your choice to sign in with Google or Apple.
• What you buy and hold — tickets, memberships, points, and the transaction history behind them.
• Things you send us — event applications, messages, and feedback.
• Technical records — the IP address and browser a session was created from, kept so you can see and revoke your own sessions, and an audit record of security-relevant actions on your account.

What we do not collect

• We never see your card number. Card details go directly to our payment processor and never reach our servers.
• We do not use advertising trackers, and we do not sell or rent your information to anyone, for any purpose.

Cookies

We set one cookie, mc_session, to keep you signed in. It holds a signed session reference and nothing else. Deleting it signs you out. We use no advertising or analytics cookies.

Who else sees your information

We share the minimum needed to run the service, and only with these processors:

• Stripe — payment processing. Stripe receives your payment details directly and handles them under its own privacy policy.
• Our email provider — to send you sign-in links, receipts and notifications. It receives your email address and the message.
• Google and Apple — only if you choose to sign in with them, or add a pass to their wallet. They tell us your email address and name; we never receive your password.
• Telegram — only where an installation uses it for staff notifications. Members’ personal details are not sent to it.

We also disclose information where the law requires it. Otherwise, no one else receives it.

How long we keep it

We keep your account for as long as it exists, and financial records for as long as tax and accounting law requires. Sessions expire on their own. When you close your account we remove your personal details but retain the transaction record, since we are not permitted to delete financial history.

Your choices

• See and change your details on your account page.
• Sign out any device from your sessions page.
• Ask us for a copy of your information, or ask us to delete it —  by writing to Lama <Lama-noreply@bjg.pub>.

Depending on where you live you may have additional rights over your information, including access, correction, deletion, and objecting to how we use it. Write to us and we will honour them.

Keeping it safe

Passwords are hashed, sessions are signed and expire, and payment card details never reach us. No system is perfect; if we ever discover a breach affecting you, we will tell you.

Children

This service is not directed at children under 13, and we do not knowingly collect their information.

Changes

If we change this policy we will update the date above. Material changes will be announced on the site.

Contact

Membership Club — Lama <Lama-noreply@bjg.pub>.