Privacy Policy

Last updated: June 15th, 2025

0. Overview

This Privacy Policy describes the types of personal information Printer’s Academy On Line, LLC d/b/a dinnerHQ ("dinnerHQ", "we", "us", or "our") collects from website visitors and people who use our Services, how we use and share that information, and the choices you have. Please read it carefully to understand our practices and how we will treat your information.

Capitalized terms not defined in this Policy have the meaning given in our Terms of Use.

1. Who we are

Printer’s Academy On Line, LLC, d/b/a dinnerHQ (“dinnerHQ,” “we,” “us” or “our”) operates curated B2B networking dinners in the United States.

Postal address: 3870 NE 167th Avenue, North Miami Beach, Florida 33160, USA
Email: privacy@dinnerhq.com

We take privacy seriously and align our practices with leading U.S. and international frameworks, including the GDPR and California CCPA/CPRA.

2. Definitions

“Services” means our public website at www.dinnerhq.com (the “Site”) and the curated B2B networking dinners and related features we operate (for example, ticketing and attendee rosters).

“Personal Information” means information about an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to that person’s identity.

“Third‑Party Products/Service Providers” are products or services not owned or controlled by dinnerHQ (for example, Luma for ticketing or Stripe for payments). Their own privacy notices apply to their handling of information.

3. Scope of this Policy

This Policy explains how we collect, use, share and protect personal information when you:

  • browse www.dinnerhq.com (the “Site”);
  • purchase or manage a ticket via Luma or other ticketing widgets embedded in the Site;
  • interact with our emails, SMS messages or social‑media ads; or
  • attend a dinnerHQ event;
  • network with other professional attendees via dinner‑specific rosters or post‑event follow‑up messages.

This Policy does not cover third‑party websites or services that link to or from us. Their own privacy statements apply.

Controller details: The controller responsible for the processing of personal information is Printer’s Academy On Line, LLC d/b/a dinnerHQ. You can reach us at the address and email listed above.

4. Acceptance of this Policy

By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services. You can contact us at privacy@dinnerhq.com with questions about this Policy.

5. Updates to this Policy

We may update this Policy from time to time. When we do, we will post the revised version on this page and update the effective date at the top. Where required, we will provide additional notice (for example, by email or banner). Your continued use after an update constitutes acceptance of the revised Policy.

6. Information we collect

We collect information from the following sources: (a) directly from you; (b) automatically from your device and browser; (c) from event partners and service providers that help us operate dinners (for example, Luma, Stripe); and (d) from publicly available sources or third‑party services, where allowed by law.

CategoryExamplesHow we collect it
IdentifiersName, business email, phone, postal address, LinkedIn URL, company & job titleForms you complete, ticket checkout (Luma), voluntary profile updates, business‑card exchange
Company informationCompany name and domain, company size/headcount, industryContact forms, RSVP flows, or optional post‑purchase profile
Professional profile data (optional)Years of experience, skills, languages, seniority level, role focusOptional profile forms and surveys; never required for ticket purchase
Payment referencesLast 4 digits of card, card type, Stripe payment ID, purchase metadata (amount, currency, timestamp)Processed by Stripe; dinnerHQ receives only tokens & receipts, never full card numbers
Event‑preference dataDietary notes, vertical/industry interests, seating requestsTicket checkout or post‑purchase survey
Marketing & engagement dataEmail opens/clicks, SMS interactions, ad‑campaign membershipManaged via Beehiv and Meta/Facebook ads pixels
Device & usage dataIP address, browser type, pages visited, time on page, referring URLCookies, web beacons, Google Analytics, Supabase edge functions
Customer‑support recordsMessages, attachments, call notesZendesk or direct email

We do not intentionally collect sensitive data such as social‑security numbers, health information or government identifiers.

We also do not seek or require information about legally protected characteristics (for example race, color, religion, national origin, disability, or medical details). Please do not provide such information.

7. How we use your information

We process personal information to:

  • Provide our service — issue tickets, confirm restaurant logistics, handle seating and send pre‑/post‑event communications.
  • Process payments via Stripe and detect fraud.
  • Personalise outreach — recommend dinners aligned with your industry or interests.
  • Operate, secure and improve the Site and any future mobile app.
  • Facilitate networking — share limited professional contact details (name, company, role, LinkedIn) with other confirmed attendees so you can follow up after the dinner.
  • Send marketing emails/SMS you opt into; you may unsubscribe at any time.
  • Comply with law — e.g. tax, accounting and lawful requests.
  • Defend our rights and prevent misuse of our services.

We rely on one or more of the following legal bases, as applicable: (i) performance of a contract (ticket purchase), (ii) our legitimate interests in running and marketing the business, (iii) your consent (for optional newsletters/texts), and (iv) compliance with legal obligations.

Legal basis for processing (GDPR/UK GDPR)

  • Contract — to issue tickets, manage attendance and provide customer support.
  • Legitimate interests — to operate, secure and improve our Services and communicate relevant offers; we balance these interests against your rights.
  • Consent — for optional marketing emails/SMS and certain cookies; you may withdraw at any time.
  • Legal obligation — to comply with tax, accounting and law‑enforcement requests.

8. Cookies & similar technologies

We use first‑ and third‑party cookies, pixel tags and local‑storage objects to recognise your browser, analyse traffic, remember preferences and measure ad performance. You can control cookies through your browser settings. Blocking all cookies may degrade Site functionality.

Key third‑party cookies/pixels:

  • Google Analytics 4 — site analytics (IP anonymised)
  • Meta (Facebook) & LinkedIn Insight Tags — conversion tracking & retargeting
  • Stripe — checkout session, fraud prevention and payment performance
  • Beehiv — newsletter subscription analytics

Third‑party use of cookies. Some content and features are provided by service providers who may set their own cookies and similar technologies. These providers may associate cookie data with information they have about you from other services and use it for advertising or measurement.

Website Analytics (Google). We use Google Analytics to understand aggregate Site usage. Learn more in Google’s privacy policy and control collection using Google’s opt‑out add‑on.

Google Ads/AdWords. We may use Google Ads remarketing to reach people who previously visited our Site. Manage your preferences at Google Ads Settings or visit the Network Advertising Initiative opt‑out page.

Meta (Facebook) Ads. You can control ad personalization from Meta at Facebook Ad Preferences.

LinkedIn Ads. Manage LinkedIn ad settings at LinkedIn Advertising Preferences.

9. Who we share information with

We disclose information only as needed to run the service:

TypeRecipientPurpose
Cloud hosting & data platformSupabase Inc. (US and EU datacentres), Vercel Inc., Airtable, Inc.Database, auth, edge functions
Ticketing & event managementLuma Inc.Ticket sales, attendee roster, check‑in
Payment processingStripe, Inc.Secure card processing, fraud screening
Email & newsletterClay Inc., Arcanine Technologies Inc., Beehiv Inc., Hubspot Inc., Astrodon CorporationTransactional + marketing emails
SMS & telephonyCloudtalk Inc., Twilio, Inc.Event‑reminder SMS
Advertising pixelsMeta Platforms, LinkedIn Corp., Google AdsAd measurement & retargeting
Customer supportZendesk Inc.Ticketing and chat
AnalyticsGoogle Analytics, Vercel Inc. (Analytics & Speed Insights)Site usage metrics
CI/CD & code hostingGitHub, Inc.Version control, CI/CD workflows
Other attendeesFellow participants in the same dinnerProfessional networking & follow‑up

We require each service provider to keep information confidential and to use it only for the purpose we disclosed it.

Payment processing: We use Stripe to process payments and do not store full credit‑card numbers. Stripe handles card data in accordance with its own privacy policy and PCI‑DSS requirements. We receive tokens and limited payment metadata (e.g., last four digits, card brand, amount).

We may also share information (i) to comply with law or valid legal process, (ii) to enforce our Terms of Use, (iii) in connection with a business transfer such as a merger or sale, or (iv) with your consent.

We do not sell personal information and have not sold personal information in the preceding 12 months.

Categories of personal information disclosed for a business purpose (last 12 months)

CategoryRecipient typesPurpose
IdentifiersHosting/platform, email & newsletter providers, ticketing, analytics, advertising platformsOperate Services, communications, analytics, ad measurement
Company & professional infoTicketing, email & CRM toolsEvent logistics, attendee networking, targeted communications
Payment referencesStripe (payment processor)Process payments and prevent fraud
Device & usage dataAnalytics providers, security toolsSite performance, security, usage insights
Marketing & engagement dataEmail platforms, advertising platformsCampaign performance, retargeting (where permitted)
Customer‑support recordsZendeskSupport ticketing and communications

10. International transfers

We operate principally in the United States. If you access the Site from outside the U.S. you consent to transferring your information to the United States, which may have data‑protection laws less strict than those in your jurisdiction. For EU/UK visitors, we rely on Standard Contractual Clauses with our processors that handle data outside the EEA/UK.

11. Retention

We keep information only as long as necessary to fulfil the purposes in Section 7, to resolve disputes or as required by law (e.g., U.S. tax regulations). When no longer needed, we securely delete or de‑identify it.

12. Your choices & rights

  • Email & SMS marketing — click “Unsubscribe” in any message or email privacy@dinnerhq.com.
  • Cookies — use browser controls to block or delete cookies.
  • Access / correction / deletion — U.S. residents may request a copy or deletion of personal information by emailing privacy@dinnerhq.com.
  • California residents — you have CCPA rights to know, delete and opt out.
  • EEA/UK/Swiss visitors — you have GDPR rights of access, rectification, erasure, restriction, objection and data portability, exercisable via the same email. Because we are not established in the EEA, we process your data on the Article 3(2) GDPR extraterritorial basis.

We will respond within 30 days (or the period required by applicable law). We may ask for identity verification.

Do Not Track. At this time there is no industry standard for recognizing browser “Do Not Track” signals, so we do not respond to them. You can control cookie‑based tracking via your browser settings.

California privacy rights (CCPA/CPRA)

California residents have rights to know, delete, correct, and opt‑out of sale or sharing of personal information, and to limit use of sensitive personal information. We do not sell personal information. We may “share” identifiers and device data with advertising partners for cross‑context behavioral advertising; you can opt out via cookie settings or by emailing privacy@dinnerhq.com.

Do Not Sell or Share My Personal Information. If you wish to opt out of sale or sharing, contact us at the email above and adjust your cookie preferences. We will honor valid opt‑out signals to the extent required by law.

Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes. You may request more details at the email above.

EEA/UK/Swiss supplemental notice

Users in the European Economic Area, the United Kingdom, and Switzerland have additional rights under GDPR/UK GDPR:

  • Access — request copies of your personal information.
  • Rectification — request correction of inaccurate data or completion of incomplete data.
  • Erasure — request deletion under certain conditions.
  • Restriction — request we limit processing under certain conditions.
  • Objection — object to processing based on legitimate interests and to direct marketing.
  • Portability — request transfer of your data to you or another provider in a structured, commonly used, machine‑readable format.
  • Withdraw consent — when we rely on consent, you may withdraw it at any time.

We may request reasonable information to verify your identity before responding. We do not charge a fee unless a request is manifestly unfounded, repetitive, or excessive.

Complaints: You may lodge a complaint with your local Data Protection Authority at any time.

Controller vs. processor: Where we process information on behalf of event partners or other customers, those entities act as the controller. Please contact the relevant controller to exercise your rights for that data.

International transfers: When we transfer personal information outside the EEA/UK, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses or their UK equivalents.

13. Security

We use TLS encryption in transit, AES‑256 encryption at rest (Supabase‑Postgres), MFA on all admin accounts, role‑based access controls, nightly database backups and quarterly external vulnerability scans. No internet transmission is ever 100% secure; you acknowledge this risk.

If we believe a data breach has compromised your information, we will notify you and regulators as required by law.

14. Responsible disclosure of security vulnerabilities

If you discover or suspect a security vulnerability in our Services, please notify us immediately atprivacy@dinnerhq.com. If, during testing, you encounter any sensitive data, stop the test and do not share that data. We will investigate in a reasonable timeframe and may limit access while an issue is assessed.

15. Children’s privacy

Our Services are intended for adults 18 years and older. We do not knowingly collect information from children. If you believe we have done so inadvertently, please contact us for removal.

16. Contact

Questions about this Policy or your personal information? Email privacy@dinnerhq.com or write to the Florida address above.