Privacy Policy

Who we are

Kush House Social Club BCN ("Kush House", "we", "us") is a private members' club at Plaça Tirant lo Blanc 1, Sant Martí, 08005 Barcelona, Spain. We are responsible for the personal data described in this policy.

For any privacy question or request, email kushhouse@gmail.com.

What we collect

When you apply for membership on kushhouse.com, we collect:

• your name
• your email address
• your expected arrival date
• the size of your group
• your language and which part of the website you applied from

We also ask you to confirm that you are 18 or older. That confirmation is not stored.

We do not ask for payment details, ID documents or passwords on the website.

When you visit the website, our systems record limited technical information to keep the site secure. Where we record your IP address, we keep it only in a scrambled, one-way (hashed) form. Our hosting provider's servers also keep standard access logs for a short time.

Why we use it

• To handle your application: to create your invitation, email you your invitation code, and let reception find your invitation when you arrive. Legal basis: steps taken at your request before membership (GDPR art. 6(1)(b)).
• To run and protect the website: to keep the site secure and prevent abuse. Legal basis: our legitimate interest (GDPR art. 6(1)(f)).
• To meet legal obligations that apply to the club. Legal basis: GDPR art. 6(1)(c).

We do not sell your data and we do not use it for advertising. We will not add you to a mailing list.

Who we share it with

Only with services that help us run the club and the website:

• Website hosting: DreamHost, whose servers are in the United States.
• Check-in system: Check-In.cx, so reception can find your invitation. It receives your name, email address, arrival date, group size, language and invitation code.
• Email delivery: our email provider, only to send your invitation.

The Visit page shows a Google Map. When it loads, Google may receive your IP address under Google's own privacy policy. Links to Instagram, WhatsApp and Google open those services, which have their own privacy policies.

How long we keep it

• Membership applications: 12 months after your last visit, then deleted.
• Technical security logs: only as long as needed for security, then deleted.

Cookies

The website uses only the cookies it needs to work:

• a language cookie (kh_lang), to remember the language you chose
• an age cookie (kh_age), to remember that you confirmed you are 18 or older
• a session cookie (khsid), set only when you use the membership form, to protect it from abuse

We do not use advertising, analytics or tracking cookies.

Your rights

You can ask us to:

• show you the data we hold about you
• correct it
• delete it
• limit or object to how we use it
• give you a copy in a portable format

Email kushhouse@gmail.com and we will reply within one month.

You can also complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).

Age

The club and this website are for adults 18 and over only. We do not knowingly collect data from anyone under 18.

Changes

If we change this policy, we will update the date at the top of this page.