Privacy Policy

This Privacy Policy explains how Members Only, a Leo & Rose company (“Members Only,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our website at members-only.app (the “Site”) and the online pro-shop platform we provide to private clubs, their members, and apparel brands (together with the Site, the “Services”). [Confirm the legal entity name and registered address for publication.]

Who this policy covers

Members Only serves several different kinds of people, and the information we handle depends on which one you are:

• Site visitors & prospects — people who browse the Site or submit a demo, contact, or brand-partner request.
• Club staff & administrators — people who operate a club’s storefront, catalog, and billing through our platform.
• Club members — people who shop a club’s private storefront, personalize orders, and charge them to their member account.
• Brand partners — people at apparel brands who connect a catalog and fulfill orders through the platform.

Our role: controller and processor

For the Site, our own account administrators, prospect and partner inquiries, and our internal business records, we act as a controller— we decide how and why that information is used, and this policy governs it.

For information about club membersthat we handle to operate a club’s storefront (for example, a member’s roster record, orders, and charges), we generally act as a processor or service provider on behalf of the club. The club decides how that information is used and is responsible for its own privacy practices. If you are a club member, please direct privacy questions and requests to your club first; we will support the club in responding. [Confirm this controller/processor split with counsel and whether a separate Data Processing Addendum applies to club and brand customers.]

Information we collect

Information you provide directly.When you request a demo, contact us, or apply to partner, we collect the details you submit — such as your name, work email, club or company, role, approximate membership size, and any message. When you use the platform, we collect account details and the content you enter (for example, storefront settings, catalog data, crest and branding assets, and order information).

Member shopping & personalization data.When a member shops a storefront, we process order details and personalization choices — such as items, sizes, saved fits, favorite brands, crest placement, and thread selections — to fulfill and stitch the order.

Information we receive from your club.To run a member storefront, a club may provide member records such as name, member number, and account status. We handle this on the club’s behalf as described above.

Billing information.Member orders are charged to the member’s club account and exported to the club’s billing system; we process the amounts and order references needed to do this. We do not collect or store payment card numbers for member purchases. [If any part of the Services accepts cards or uses a payment processor, describe that processor here.]

Information collected automatically. Like most websites and applications, we automatically collect limited technical information such as device and browser type, IP address, pages viewed, and general usage, through cookies and similar technologies.

How we use information

• To respond to inquiries and set up demos, accounts, or brand partnerships.
• To provide, operate, secure, and improve the Services — including building storefronts, curating catalogs, processing orders, applying crests, and exporting member charges to the club.
• To personalize the member shopping experience (for example, saved sizes and reorders).
• To communicate with you about your account, orders, and the product, and — where you have asked us to or as permitted by law — about news and offers.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations and enforce our agreements.

[Confirm the legal bases relied on for any users in the EU/UK, if applicable.]

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:

• Service providers.With vendors who help us run the business — such as hosting/infrastructure, email delivery, and analytics — under contracts that limit their use of the information. [Maintain a current list of sub-processors and link it here.]
• To fulfill orders across the network. To complete a member order, relevant details (for example, the item, size, ship-to information, and crest instructions) are shared with the connected brandthat drop-ships it, and order and charge records are made available to the member’s club. Members only ever see retail pricing; brands and clubs do not see one another’s confidential data.
• With your club.If you are a member, your club has access to its own members’ account and order records.
• Legal & safety. When required by law or to protect the rights, property, or safety of Members Only, our customers, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

Cookies & analytics

We use essential cookies to operate the Site and platform and, where enabled, privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings; disabling some cookies may affect how the Services work. [If you deploy a cookie banner or analytics that requires consent, describe it here.]

Data retention

We retain information for as long as needed to provide the Services, and afterward for legitimate business, legal, accounting, or security purposes, then delete or de-identify it. Member records we process on a club’s behalf are retained according to our agreement with that club. [Confirm specific retention periods.]

Data security

We use reasonable administrative, technical, and organizational safeguards to protect information, including multi-tenant isolation designed so that one club, brand, or member cannot access another’s data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or to opt out of certain processing. To exercise a right, contact us using the details below; we may need to verify your identity. Club members: because we handle your shopping and account data on behalf of your club, please contact your club to exercise these rights, and we will assist the club as needed. We will not discriminate against you for exercising your rights. [Tailor to the specific state and country frameworks that apply, e.g. CCPA/CPRA, other US state laws, and GDPR/UK GDPR if relevant.]

Children’s privacy

The Services are intended for adults and are not directed to children under 13 (or the age required by local law). We do not knowingly collect personal information from children. [Adjust the age threshold and approach to confirm.]

International users

We operate in the United States, and the Services are hosted and processed in the United States. If you access the Services from outside the U.S., you understand your information may be transferred to and processed in the U.S. [Add transfer-mechanism language if you knowingly serve EU/UK users.]

Third-party services & links

The Services may link to or integrate with third-party sites and services (for example, a brand’s own site or a club’s billing system) that we do not control. Their handling of your information is governed by their own privacy policies.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice.

Contact us

Questions or requests about this policy? Get in touch, or reach us at [privacy contact email] / [mailing address]. [Add a Data Protection Officer or EU/UK representative if required.]