PRIVACY POLICY

Last Updated: August 19, 2026

Introduction

The Park at 14th (“we,” “us,” or “our”) operates The Park at 14th mobile application (the “App”), the websites at park14.com and park14.vip, and the ticketing, RSVP, and reservation pages we host (together with the App, the “Services”). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our Services. By using our Services, you agree to the practices described here. If you do not agree, please do not use our Services.

Information We Collect

When you use our Services, we collect information you provide directly as well as information generated automatically through your use of the service.
You provide us with your email address, first and last name, and optionally your phone number when you create an account. You may also upload a profile photograph. If you add a payment method, your card details are collected and processed securely by our payment processor, Stripe, Inc. We do not store your full card number on our servers; we retain only the card brand, last four digits, and expiration date for display purposes. We also collect transaction-related information such as tip amounts, event RSVPs and guest counts, and reservation details.
Certain information is collected automatically when you use the App, including your push notification token, device type, and operating system version. We also maintain records of your event attendance, check-in history, complimentary beverage transactions, and purchase history.

How We Use Your Information

We use the information we collect to provide and operate the Services, including authenticating your identity, managing your membership, processing transactions, and delivering notifications. We use payment information to facilitate complimentary drink tracking, tip processing, and membership billing. We send push notifications to keep you informed about events, tips, reservations, and account activity. We use check-in and attendance data to manage venue operations and coordinate events.
We do not use automated decision-making to make decisions about your membership, your access to the venue, or your billing that produce legal or similarly significant effects for you — a person makes those decisions. We do not sell your personal information.

How We Share Your Information

We share your information only as necessary to operate our Services. Our payment processor, Stripe, Inc., receives your payment card details, customer identifier, and transaction amounts to process payments. Supabase, Inc. provides authentication and database hosting and receives your email, account data, and authentication tokens. Expo (820 Labs, Inc.) provides push notification delivery and receives your push notification token. Amazon Web Services provides cloud infrastructure for hosting our services. We also work with service providers for business text messaging, transactional email, internal team communication, push notification delivery, and website analytics. These providers receive only the information needed to perform those functions on our behalf and are not permitted to use it for their own purposes.
Certain information may be visible to other users at your direction. If you RSVP to an event, your first name, last initial, and profile photo may appear in the event’s attendee list. When you submit a tip, the recipient staff member sees your first name.
We may disclose your information if required by law or in response to valid requests by public authorities. We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Storage and Security

Your account data and transaction records are stored in our secure cloud database hosted in the United States. Authentication tokens are stored on your device using platform-native encrypted storage (iOS Keychain or Android Keystore). Payment card details are stored and processed by Stripe in accordance with PCI DSS Level 1 compliance standards. Profile photographs are stored in our cloud storage and served over encrypted connections. Photograph URLs are not guessable, but they are not individually access-controlled — anyone given a direct link to a photo can view it.
All data transmitted between your device and our servers is encrypted using TLS/HTTPS. Access to member data is restricted to authorized personnel on a need-to-know basis.

Data Retention

We retain your account information for the duration of your active membership plus 12 months following closure. Transaction history is retained for 7 years as required for financial record-keeping. Push notification tokens are retained until you uninstall the App or revoke notification permissions. Authentication tokens expire automatically and are cleared upon logout. App preferences stored on your device persist until you uninstall the App.

Your Rights and Choices

You may update your profile information, including your name, email, and profile photo, directly in the App. You may add, remove, or change your default payment method at any time. You may disable push notifications through your device settings.
You may request a copy of the personal information we hold about you or request deletion of your account and associated data by contacting us at info@park14.com. Upon receiving a verified deletion request, we will delete your data within 30 days, except where retention is required by law.
Our Services do not track you across third-party websites or applications and do not respond to Do Not Track signals.

Children’s Privacy

Our Services are not intended for use by individuals under the age of 21, consistent with our venue’s age requirements. We do not knowingly collect personal information from anyone under 21. If we learn that we have collected such information, we will delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App, on our websites, or by sending a push notification. The “Last Updated” date at the top indicates when the most recent changes were made. Your continued use of the Services after changes constitutes acceptance of the revised policy.

Jurisdiction-Specific Disclosures

California residents have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information. Residents of Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws may have additional rights, including the right to access, correct, delete, and obtain a copy of personal data. European Economic Area and UK residents may exercise rights under the GDPR, including withdrawal of consent, data access, rectification, erasure, and the right to lodge a complaint with a supervisory authority. Our legal bases for processing are performance of contract, consent, and legitimate interests. To exercise any of these rights, contact info@park14.com.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
The Park at 14th
920 14th Street NW
Washington, DC 20005
Email: info@park14.com