Privacy Policy

Version 1.0

Last updated: February 17, 2026

Meridian Rock, PTD LTE ("we," "us," or "our") operates the Hedges VIP product platform, including mobile wallet passes, the enrollment portal, and the management portal at www.hedgesvip.com. This Privacy Policy describes how we collect, use, store, and protect your personal information.

1. Information We Collect

Customer Information (VIP Card Holders): When you enroll in the VIP card program, we collect your first and last name, phone number, and optionally your email address. We also record your age attestation confirming you are 21 years of age or older.

Usage Data: We track venue visits (door scans), ticket issuance and redemption, benefit usage (cover charges, drink discounts), and offer redemptions to administer the VIP program and detect fraud.

Wallet Data: When you add your VIP card to Apple Wallet or Google Wallet, we store device registration tokens and wallet pass identifiers necessary to deliver and update your digital card.

Staff Account Information: For staff portal users, we collect name, email address, role assignment, and login credentials. If you sign in with Google, we receive your Google profile information (name, email, profile picture) and store an OAuth account link.

2. How We Use Your Information
We use the information we collect to:
  • Issue and manage your VIP card and digital wallet passes
  • Process venue entry, ticket issuance, and benefit redemptions
  • Send promotional offers and program updates (if you provided an email)
  • Detect and prevent fraud, including repeated invalid scan attempts and suspicious activity
  • Generate anonymized analytics for venue operators
  • Maintain audit records for compliance and dispute resolution
  • Authenticate and manage staff portal access
3. Data Sharing and Third Parties

Venue Operators: Participating venues can access your visit history, benefit redemptions, and card status for their location(s) through the management portal.

Wallet Providers: We share limited data with Apple and Google as required to issue and update wallet passes on your device.

Email Services: If you provide an email address, we use third-party email providers to send transactional and promotional messages.

We do not sell your personal information. We may disclose information when required by law or to protect the safety and security of our users and platform.

4. Data Storage and Security

Your data is stored in encrypted databases with strict access controls. Each venue operator's data is isolated through multi-tenant architecture, meaning one operator cannot access another's customer data.

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, rate limiting, and comprehensive audit logging of all staff actions.

5. Data Retention

We retain your information for as long as your VIP card is active. Cards that have not been used at any venue door for six consecutive months are automatically expired due to inactivity.

Audit records and fraud detection data are retained for a minimum of two years for compliance purposes, even after your card expires or is revoked.

6. Your Rights
Depending on your jurisdiction, you may have the right to:
  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Opt out of promotional communications
  • Request a copy of your data in a portable format
To exercise any of these rights, contact the staff at your participating venue or email us at the address below.
7. Cookies and Tracking

The management portal uses session cookies for authentication. We do not use third-party tracking cookies or advertising pixels. The enrollment portal does not require cookies for basic functionality.

8. Age Requirement

The Hedges VIP program is available only to individuals 21 years of age or older. We do not knowingly collect information from anyone under 21. If we learn that we have collected data from someone under 21, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact the staff at any participating Hedges VIP venue or email us at privacy@hedgesvip.com.

© 2026 Meridian Rock, PTD LTE. All rights reserved.