Privacy Policy
Last updated: June 15th, 2025
0. Overview
This Privacy Policy describes the types of personal information Printer’s Academy On Line, LLC d/b/a dinnerHQ ("dinnerHQ", "we", "us", or "our") collects from website visitors and people who use our Services, how we use and share that information, and the choices you have. Please read it carefully to understand our practices and how we will treat your information.
Capitalized terms not defined in this Policy have the meaning given in our Terms of Use.
1. Who we are
Printer’s Academy On Line, LLC, d/b/a dinnerHQ (“dinnerHQ,” “we,” “us” or “our”) operates curated B2B networking dinners in the United States.
Postal address: 3870 NE 167th Avenue, North Miami Beach, Florida 33160, USA
Email: privacy@dinnerhq.com
We take privacy seriously and align our practices with leading U.S. and international frameworks, including the GDPR and California CCPA/CPRA.
2. Definitions
“Services” means our public website at www.dinnerhq.com (the “Site”) and the curated B2B networking dinners and related features we operate (for example, ticketing and attendee rosters).
“Personal Information” means information about an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to that person’s identity.
“Third‑Party Products/Service Providers” are products or services not owned or controlled by dinnerHQ (for example, Luma for ticketing or Stripe for payments). Their own privacy notices apply to their handling of information.
3. Scope of this Policy
This Policy explains how we collect, use, share and protect personal information when you:
- browse www.dinnerhq.com (the “Site”);
- purchase or manage a ticket via Luma or other ticketing widgets embedded in the Site;
- interact with our emails, SMS messages or social‑media ads; or
- attend a dinnerHQ event;
- network with other professional attendees via dinner‑specific rosters or post‑event follow‑up messages.
This Policy does not cover third‑party websites or services that link to or from us. Their own privacy statements apply.
Controller details: The controller responsible for the processing of personal information is Printer’s Academy On Line, LLC d/b/a dinnerHQ. You can reach us at the address and email listed above.
4. Acceptance of this Policy
By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services. You can contact us at privacy@dinnerhq.com with questions about this Policy.
5. Updates to this Policy
We may update this Policy from time to time. When we do, we will post the revised version on this page and update the effective date at the top. Where required, we will provide additional notice (for example, by email or banner). Your continued use after an update constitutes acceptance of the revised Policy.
6. Information we collect
We collect information from the following sources: (a) directly from you; (b) automatically from your device and browser; (c) from event partners and service providers that help us operate dinners (for example, Luma, Stripe); and (d) from publicly available sources or third‑party services, where allowed by law.
Category | Examples | How we collect it |
---|---|---|
Identifiers | Name, business email, phone, postal address, LinkedIn URL, company & job title | Forms you complete, ticket checkout (Luma), voluntary profile updates, business‑card exchange |
Company information | Company name and domain, company size/headcount, industry | Contact forms, RSVP flows, or optional post‑purchase profile |
Professional profile data (optional) | Years of experience, skills, languages, seniority level, role focus | Optional profile forms and surveys; never required for ticket purchase |
Payment references | Last 4 digits of card, card type, Stripe payment ID, purchase metadata (amount, currency, timestamp) | Processed by Stripe; dinnerHQ receives only tokens & receipts, never full card numbers |
Event‑preference data | Dietary notes, vertical/industry interests, seating requests | Ticket checkout or post‑purchase survey |
Marketing & engagement data | Email opens/clicks, SMS interactions, ad‑campaign membership | Managed via Beehiv and Meta/Facebook ads pixels |
Device & usage data | IP address, browser type, pages visited, time on page, referring URL | Cookies, web beacons, Google Analytics, Supabase edge functions |
Customer‑support records | Messages, attachments, call notes | Zendesk or direct email |
We do not intentionally collect sensitive data such as social‑security numbers, health information or government identifiers.
We also do not seek or require information about legally protected characteristics (for example race, color, religion, national origin, disability, or medical details). Please do not provide such information.
7. How we use your information
We process personal information to:
- Provide our service — issue tickets, confirm restaurant logistics, handle seating and send pre‑/post‑event communications.
- Process payments via Stripe and detect fraud.
- Personalise outreach — recommend dinners aligned with your industry or interests.
- Operate, secure and improve the Site and any future mobile app.
- Facilitate networking — share limited professional contact details (name, company, role, LinkedIn) with other confirmed attendees so you can follow up after the dinner.
- Send marketing emails/SMS you opt into; you may unsubscribe at any time.
- Comply with law — e.g. tax, accounting and lawful requests.
- Defend our rights and prevent misuse of our services.
We rely on one or more of the following legal bases, as applicable: (i) performance of a contract (ticket purchase), (ii) our legitimate interests in running and marketing the business, (iii) your consent (for optional newsletters/texts), and (iv) compliance with legal obligations.
Legal basis for processing (GDPR/UK GDPR)
- Contract — to issue tickets, manage attendance and provide customer support.
- Legitimate interests — to operate, secure and improve our Services and communicate relevant offers; we balance these interests against your rights.
- Consent — for optional marketing emails/SMS and certain cookies; you may withdraw at any time.
- Legal obligation — to comply with tax, accounting and law‑enforcement requests.
8. Cookies & similar technologies
We use first‑ and third‑party cookies, pixel tags and local‑storage objects to recognise your browser, analyse traffic, remember preferences and measure ad performance. You can control cookies through your browser settings. Blocking all cookies may degrade Site functionality.
Key third‑party cookies/pixels:
- Google Analytics 4 — site analytics (IP anonymised)
- Meta (Facebook) & LinkedIn Insight Tags — conversion tracking & retargeting
- Stripe — checkout session, fraud prevention and payment performance
- Beehiv — newsletter subscription analytics
Third‑party use of cookies. Some content and features are provided by service providers who may set their own cookies and similar technologies. These providers may associate cookie data with information they have about you from other services and use it for advertising or measurement.
Website Analytics (Google). We use Google Analytics to understand aggregate Site usage. Learn more in Google’s privacy policy and control collection using Google’s opt‑out add‑on.
Google Ads/AdWords. We may use Google Ads remarketing to reach people who previously visited our Site. Manage your preferences at Google Ads Settings or visit the Network Advertising Initiative opt‑out page.
Meta (Facebook) Ads. You can control ad personalization from Meta at Facebook Ad Preferences.
LinkedIn Ads. Manage LinkedIn ad settings at LinkedIn Advertising Preferences.
9. Who we share information with
We disclose information only as needed to run the service:
Type | Recipient | Purpose |
---|---|---|
Cloud hosting & data platform | Supabase Inc. (US and EU datacentres), Vercel Inc., Airtable, Inc. | Database, auth, edge functions |
Ticketing & event management | Luma Inc. | Ticket sales, attendee roster, check‑in |
Payment processing | Stripe, Inc. | Secure card processing, fraud screening |
Email & newsletter | Clay Inc., Arcanine Technologies Inc., Beehiv Inc., Hubspot Inc., Astrodon Corporation | Transactional + marketing emails |
SMS & telephony | Cloudtalk Inc., Twilio, Inc. | Event‑reminder SMS |
Advertising pixels | Meta Platforms, LinkedIn Corp., Google Ads | Ad measurement & retargeting |
Customer support | Zendesk Inc. | Ticketing and chat |
Analytics | Google Analytics, Vercel Inc. (Analytics & Speed Insights) | Site usage metrics |
CI/CD & code hosting | GitHub, Inc. | Version control, CI/CD workflows |
Other attendees | Fellow participants in the same dinner | Professional networking & follow‑up |
We require each service provider to keep information confidential and to use it only for the purpose we disclosed it.
Payment processing: We use Stripe to process payments and do not store full credit‑card numbers. Stripe handles card data in accordance with its own privacy policy and PCI‑DSS requirements. We receive tokens and limited payment metadata (e.g., last four digits, card brand, amount).
We may also share information (i) to comply with law or valid legal process, (ii) to enforce our Terms of Use, (iii) in connection with a business transfer such as a merger or sale, or (iv) with your consent.
We do not sell personal information and have not sold personal information in the preceding 12 months.
Categories of personal information disclosed for a business purpose (last 12 months)
Category | Recipient types | Purpose |
---|---|---|
Identifiers | Hosting/platform, email & newsletter providers, ticketing, analytics, advertising platforms | Operate Services, communications, analytics, ad measurement |
Company & professional info | Ticketing, email & CRM tools | Event logistics, attendee networking, targeted communications |
Payment references | Stripe (payment processor) | Process payments and prevent fraud |
Device & usage data | Analytics providers, security tools | Site performance, security, usage insights |
Marketing & engagement data | Email platforms, advertising platforms | Campaign performance, retargeting (where permitted) |
Customer‑support records | Zendesk | Support ticketing and communications |
10. International transfers
We operate principally in the United States. If you access the Site from outside the U.S. you consent to transferring your information to the United States, which may have data‑protection laws less strict than those in your jurisdiction. For EU/UK visitors, we rely on Standard Contractual Clauses with our processors that handle data outside the EEA/UK.
11. Retention
We keep information only as long as necessary to fulfil the purposes in Section 7, to resolve disputes or as required by law (e.g., U.S. tax regulations). When no longer needed, we securely delete or de‑identify it.
12. Your choices & rights
- Email & SMS marketing — click “Unsubscribe” in any message or email privacy@dinnerhq.com.
- Cookies — use browser controls to block or delete cookies.
- Access / correction / deletion — U.S. residents may request a copy or deletion of personal information by emailing privacy@dinnerhq.com.
- California residents — you have CCPA rights to know, delete and opt out.
- EEA/UK/Swiss visitors — you have GDPR rights of access, rectification, erasure, restriction, objection and data portability, exercisable via the same email. Because we are not established in the EEA, we process your data on the Article 3(2) GDPR extraterritorial basis.
We will respond within 30 days (or the period required by applicable law). We may ask for identity verification.
Do Not Track. At this time there is no industry standard for recognizing browser “Do Not Track” signals, so we do not respond to them. You can control cookie‑based tracking via your browser settings.
California privacy rights (CCPA/CPRA)
California residents have rights to know, delete, correct, and opt‑out of sale or sharing of personal information, and to limit use of sensitive personal information. We do not sell personal information. We may “share” identifiers and device data with advertising partners for cross‑context behavioral advertising; you can opt out via cookie settings or by emailing privacy@dinnerhq.com.
Do Not Sell or Share My Personal Information. If you wish to opt out of sale or sharing, contact us at the email above and adjust your cookie preferences. We will honor valid opt‑out signals to the extent required by law.
Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes. You may request more details at the email above.
EEA/UK/Swiss supplemental notice
Users in the European Economic Area, the United Kingdom, and Switzerland have additional rights under GDPR/UK GDPR:
- Access — request copies of your personal information.
- Rectification — request correction of inaccurate data or completion of incomplete data.
- Erasure — request deletion under certain conditions.
- Restriction — request we limit processing under certain conditions.
- Objection — object to processing based on legitimate interests and to direct marketing.
- Portability — request transfer of your data to you or another provider in a structured, commonly used, machine‑readable format.
- Withdraw consent — when we rely on consent, you may withdraw it at any time.
We may request reasonable information to verify your identity before responding. We do not charge a fee unless a request is manifestly unfounded, repetitive, or excessive.
Complaints: You may lodge a complaint with your local Data Protection Authority at any time.
Controller vs. processor: Where we process information on behalf of event partners or other customers, those entities act as the controller. Please contact the relevant controller to exercise your rights for that data.
International transfers: When we transfer personal information outside the EEA/UK, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or their UK equivalents.
13. Security
We use TLS encryption in transit, AES‑256 encryption at rest (Supabase‑Postgres), MFA on all admin accounts, role‑based access controls, nightly database backups and quarterly external vulnerability scans. No internet transmission is ever 100% secure; you acknowledge this risk.
If we believe a data breach has compromised your information, we will notify you and regulators as required by law.
14. Responsible disclosure of security vulnerabilities
If you discover or suspect a security vulnerability in our Services, please notify us immediately atprivacy@dinnerhq.com. If, during testing, you encounter any sensitive data, stop the test and do not share that data. We will investigate in a reasonable timeframe and may limit access while an issue is assessed.
15. Children’s privacy
Our Services are intended for adults 18 years and older. We do not knowingly collect information from children. If you believe we have done so inadvertently, please contact us for removal.
16. Contact
Questions about this Policy or your personal information? Email privacy@dinnerhq.com or write to the Florida address above.