Privacy Policy
Last updated: October 1, 2026
VIP Guests (“VIP Guests”, “we”, “us”) is a sole proprietorship based in Torrance, California, USA. We operate a platform that lets restaurants, breweries and other hospitality venues (“Venues”) in the United States and Canada run their own loyalty clubs at addresses like venue-name.vipguests.ca.
This policy explains what personal information we handle, why, and the choices you have. It covers:
- guests who join or use a Venue’s club;
- business contacts who request a demo or otherwise contact us about VIP Guests; and
- visitors to vipguests.ca.
We follow the privacy and anti-spam laws that apply to us. These include the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA), the CAN-SPAM Act and the Telephone Consumer Protection Act (TCPA) in the United States. For people in Canada, they include the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s anti-spam legislation (CASL).
1. Who is responsible for your information
When you join a Venue’s club, that Venue decides how its club works: its rewards, its offers and the messages it sends. VIP Guests provides and operates the platform, processes club information on the Venue’s behalf as its service provider, and is responsible for how the platform protects that information. Each Venue’s club data is kept separate from every other Venue’s, and we do not use one Venue’s guest data for another Venue.
For demo requests and our own website, VIP Guests is responsible for the information directly.
You can contact us about any club on our platform at privacy@vipguests.ca.
2. Information we collect from guests
- Contact details: the email address and/or mobile number you sign in with (each confirmed with a one-time code), and your first name if you give it.
- Membership details: your membership tier and status, promo codes used and, for venues that serve alcohol, your confirmation that you are of legal drinking age.
- Visits and purchases: table check-ins and information read from receipts you choose to upload: venue name, receipt number, date, totals and the items purchased. If you allow location access during a check-in, we also use your approximate distance from the Venue to confirm you are on site.
- Rewards activity: stamps, points, Daily Spin results, and rewards issued and redeemed (with the time of redemption).
- Preferences we work out: from your visits and purchases, we work out things like your favourite items, how often you usually visit and what you typically spend. A Venue uses these to choose which offers to send you and when.
- Messaging preferences and consent records: whether you agreed to receive offers by email and/or text, the exact wording you agreed to, when, and the IP address and browser used, plus any later opt-out (including replying STOP or clicking unsubscribe).
- Payment information: paid memberships are processed by Stripe. We receive confirmation of payment and subscription status. We never see or store your full card number.
- Wallet cards: if you add your club card to Apple Wallet or Google Wallet, we keep the identifiers needed to update the card (for example, to remove a reward once it is used). Apple and Google handle their wallet apps under their own privacy policies.
- Technical information: a session cookie that keeps you signed in on your device, and standard server logs used for security and troubleshooting.
We do not keep the receipt photos you upload. We keep a digital fingerprint of each photo and of the receipt’s details so the same receipt can’t be submitted twice.
3. Information we collect from business contacts
When you request a demo, we collect what you enter on the form. That includes your name, role, email, phone number, business name and website, location, business type, number of locations, approximate guest volume and spend, current loyalty program and point-of-sale system, launch timeline, interests and notes. We also record the page and campaign that brought you to the form, your browser, and a one-way scrambled version of your IP address (used to prevent abuse).
We use this to respond to your request, prepare and give your demo, and decide how best to follow up. We give each request a score based on how well VIP Guests fits your business. We may also use automated tools, including AI, to summarize your request and suggest how to tailor the demo. These assessments help us prioritize and prepare. They don’t produce legal or similarly significant decisions about you, and a person reviews every request.
We will only send you product news if you tick the box asking for it, and you can unsubscribe at any time. We keep demo requests that don’t lead to a customer relationship for up to 24 months.
4. Website visitors
vipguests.ca does not use advertising trackers or cookies for analytics. We use Cloudflare Web Analytics to count visits to vipguests.ca in aggregate (pages viewed, referring sites, country and device type). It does not set cookies, does not fingerprint you and is not used to identify or track you across sites. It is not used on Venue club pages. The demo form uses Cloudflare Turnstile to tell people from bots. Turnstile processes technical signals from your browser for that purpose only.
5. How we use personal information
- To run memberships: sign you in, track visits, stamps and points, run the Daily Spin, and show and redeem your rewards.
- To verify receipts and prevent fraud, such as duplicate or altered receipts or a reward used twice.
- To process membership payments and pass the Venue its share.
- To send messages: one-time sign-in codes when you ask for them and, only if you opted in, offers and news from the Venue by the channel(s) you chose, at times picked from your visit patterns.
- To respond to demo requests and run our business.
- To keep records of consent, as required by law.
- To secure, maintain and improve the platform.
6. Text messages (SMS)
If you opt in to texts from a Venue, you will receive recurring automated marketing messages from that Venue at the number you provided. Message frequency varies. Message and data rates may apply. Reply HELP for help or STOP to cancel at any time. You may also turn texts off on your club card. Consent to texts is not a condition of membership or purchase. We don’t send marketing texts during quiet hours in your local time.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the service providers that deliver our messages. Mobile carriers are not liable for delayed or undelivered messages.
7. Email
If you opt in to email offers from a Venue, every marketing email identifies the Venue, includes its mailing address and contains a one-click unsubscribe link. Unsubscribing takes effect immediately. We will still send messages you request, such as sign-in codes and receipts for paid memberships.
8. Service providers and other disclosures
We share personal information only with providers that help us run the platform, under contracts that limit their use of it to providing their service to us:
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, data storage, security, bot protection and sending transactional emails |
| Amazon Web Services | Sending marketing emails |
| Telnyx | Sending and receiving text messages |
| Stripe | Processing membership payments |
| Anthropic | Reading receipt photos you upload; summarizing demo requests |
| Apple and Google | Delivering and updating wallet cards you choose to add |
We share a guest’s club information with the Venue that runs that club. We may also disclose information when required by law, or to protect the rights and safety of our users, Venues or the public. If VIP Guests is sold or reorganized, information may transfer to the new owner under this policy.
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.
9. Where information is processed
We and our providers process information in the United States, Canada and other countries where they operate. Information about people in Canada may therefore be processed in the United States, where it may be accessible to authorities under local law.
10. How long we keep it
- Guests: membership, visit and rewards information is kept while your membership is active and for up to two years after it ends, unless you ask us to delete it sooner.
- Consent and opt-out records: kept for as long as needed to show we respected your choices.
- Demo requests: kept for up to 24 months if they don’t lead to a customer relationship.
- Sign-in codes: one-time codes expire after ten minutes.
11. Your choices and rights
Everyone:
- Turn email or text offers on or off on your club card, click unsubscribe in any email, or reply STOP to any text.
- Ask for a copy of your information, ask us to correct it, or ask us to close your membership and delete it, subject to records we must keep by law (such as payment and consent records).
California residents have the right to:
- know what personal information we collect, use and disclose (including the categories and sources described in sections 2 to 4 and the purposes in section 5);
- get a copy of it;
- have it corrected or deleted; and
- not be discriminated against for using these rights.
We don’t use sensitive personal information for anything beyond what the law allows without an opt-out, and we don’t sell or share personal information, so there is nothing to opt out of. We honour Global Privacy Control signals as an opt-out of sale and sharing anyway. You may use an authorized agent; we will ask the agent for proof of authority and may ask you to verify your identity. Under California’s “Shine the Light” law, we don’t disclose personal information to third parties for their own direct marketing.
People in Canada have the right to access and correct their information and to withdraw consent. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Residents of other US states with consumer privacy laws can make the same requests, and we will honour them as those laws provide.
How to make a request: email privacy@vipguests.ca from the address on your membership, or tell us the mobile number you use. We verify requests by sending a one-time code to that email or number. We respond within 30 days, or within 45 days for California requests where the law allows. If we need more time, we’ll tell you why.
12. Age
The platform is not directed at children under 13, and we do not knowingly collect their information. Clubs at venues that serve alcohol are only for people of legal drinking age in that state or province (21 in the United States; 18 or 19 in Canada, depending on the province), and ask you to confirm your age when you join. Offers never include free alcohol.
13. Security
- Information is encrypted in transit.
- Each Venue’s club data is stored separately.
- Staff access requires credentials.
- Sign-in uses one-time codes instead of passwords.
- Card payments never touch our servers.
No system is perfectly secure. If a breach affects your information, we will notify you, and the regulators, as the law requires.
14. Changes
We may update this policy. If we make significant changes, we will post the new version here with a new “last updated” date and, where required, tell you before the change takes effect.
15. Contact
VIP Guests, Torrance, California, USA · privacy@vipguests.ca · general support: support@vipguests.ca