Effective date: 10/21/26
Last updated: 10/21/26
Premier Club Access is a service of Citrus Consulting Partners, LLC ("Citrus", "we", "us"). It lets members of private clubs register visitors. Club staff use it to review and approve visits, and approved visitors receive a digital entry pass. This policy explains what personal information the Premier Club Access service collects, how we use it, and the choices you have.
We provide Premier Club Access on behalf of the clubs that use it ("Clubs"). Each Club decides which visitor information it requires and how long it keeps it. Where a Club's own privacy policy also applies to you, please read it as well.
1. Information we collect
Club members, staff and administrators
- Name, mobile phone number (used to sign in with a one-time code), and optionally an email address.
- Your club membership and role, and your notification and SMS preferences.
- Records of actions you take in the service, such as visit requests and approvals. These records are kept for security and accountability.
Visitors – provided by the member who registers you, or by you through a secure link
- Guests: name, mobile phone number, and, if the Club requires them, email address.
- Vendors and contractors: company name, and for each person who visits, their name, mobile phone number and, if required, email address.
- Documents the Club requires, such as a photo ID, a business license, proof of insurance, or other documents the Club specifies, along with each document's review status and expiry date.
- Details of your visit to the club: dates, its purpose, and its status.
Automatically collected
- Basic technical information needed to run and secure the service, such as IP address, browser type and timestamps, in our hosting providers' logs.
- One essential cookie that keeps signed-in members signed in. We do not use advertising or tracking cookies.
2. How we use information
- To provide the service: register visitors, route requests to Club staff, issue and verify entry passes, and send notifications about visits.
- To verify that required documents are present and current before a visit is approved.
- To send text messages (SMS) and emails about visits and accounts. SMS is described in our SMS Terms.
- To keep the service secure, prevent fraud and misuse, and keep an audit trail of access decisions.
- To meet legal obligations.
We do not sell personal information. We do not use it for advertising.
3. Text messaging (SMS)
- We send SMS only for the purposes described in our SMS Terms: sign-in codes, visit document requests, entry passes, and visit status updates.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all sharing described in this policy, and this information will not be shared with any third parties.
- Reply STOP to any message to opt out. Reply HELP for help.
4. How information is shared
We share personal information only:
- With the Club you are a member of, or that you are visiting. Club staff see the visit and visitor information as they need to approve and admit visitors.
- With service providers who process data for us under contract, solely to run the service:
- database, sign-in and document storage (Supabase)
- application hosting (Vercel)
- SMS delivery and sign-in codes (Twilio)
- email delivery (Resend)
Their use is limited to providing services to us.
- When required by law, or to protect the rights, safety or security of users, Clubs or the public.
- In a business transfer (for example, a merger or acquisition), subject to this policy.
5. Data retention
Each Club sets how long visitor information is kept. Unless the Club chooses otherwise:
- Saved guests: kept for 12 months after their last visit, then deleted.
- Vendors and contractors: kept for 3 years after the company's last visit, then deleted.
- One-time visitors who are not saved: kept for 90 days after the visit, then deleted.
- Documents: each document is valid for a term the Club sets (for example, 12 or 18 months from upload). An expired document no longer counts and must be replaced. It is deleted no later than the end of the retention period above.
- A minimal record of access events, which contains no names, phone numbers or document contents, is kept for security auditing.
- Member account information is kept while you have an active membership in the service.
6. Security
- Data is encrypted in transit (TLS) and at rest.
- Access is restricted by role. Each Club can only access its own data.
- Entry-pass and upload links use long, random, expiring codes.
- No system is perfectly secure, but we work to protect your information.
7. Your rights and choices
- Opt out of SMS at any time by replying STOP, or by changing your SMS preference in your profile.
- Access, correction and deletion – You may ask to see, correct or delete your personal information, subject to legal and security record-keeping requirements. Contact us (below) or your Club.
- California residents (CCPA/CPRA) have the right to know, delete and correct personal information, and the right not to be discriminated against for exercising these rights. We do not sell or "share" personal information as those terms are defined by California law.
- EEA/UK residents (GDPR) may have additional rights, including the right to object and to data portability. Please contact the Club, or us (below), to make a request.
8. Where data is stored
Data is stored and processed in the United States.
9. Children
The service is not directed to children under 13, and we do not knowingly collect their personal information.
10. Changes to this policy
We may update this policy. We will post the new version here with a new "Last updated" date. We will tell Club administrators about any material change.
11. Contact us
Citrus Consulting Partners, LLC
150 Belleview Blvd, Apt 603, Belleair, FL 33756
Email: robmiller@citrusconsultingpartners.com